Privacy Policy
— Last updated October 11, 2026 —
This policy explains what Kiwi collects, why, who it goes to, and what you can do about it. It describes the app as actually built, not as a category of app.
1. What we collect
Account information. Your name, email address, and — only if you choose to give it — a phone number. Your password is stored only as a cryptographic hash; we never see or store it in readable form.
Household and food preferences. This is the heart of the app and the largest category. It includes: how many people you cook for and how many of them are children; the food dislikes of picky eaters in your household; cuisines you like; dietary patterns (for example vegetarian, kosher); food allergies and avoidances, including any you type in yourself; free-text dietary notes; health goals; cooking skill level; spice tolerance; kitchen equipment and stovetop type; budget level; items you always buy; and how long a plan you want and how much time you will spend cooking.
What you create and do. Meal plans, saved and imported recipes (including recipe photos you choose to import), grocery lists and their check-off state, what you have cooked and when, and any notes you choose to add.
Marketing preferences. Whether you have agreed to receive email or SMS from us. Both default to "off".
Technical information. Server logs of requests to our API, which include your device's IP address and the time of each request. The app contains no analytics, advertising or crash-reporting software, and we do not collect your location, your contacts or your device's advertising identifier.
Our website. Our website, kitchenwizard.ai — including the Kiwi Cookbook pages — uses Google Analytics to count visits and to see which pages are read and which buttons are used. Google Analytics sets cookies in your browser and receives the pages you view, the links you click, an approximate location derived from your IP address, and your browser and device type. We use it only to understand how people find and use the website. It is not used in the Kiwi app, on the web or on your phone, and it never receives your name, your email address or anything you enter in Kiwi. You can block it with your browser's privacy settings or with Google's opt-out add-on at tools.google.com/dlpage/gaoptout.
2. Sensitive information, stated plainly
Food allergies, dietary restrictions and health goals can reveal information about health. We treat them as sensitive. We collect them for one purpose — to filter and shape the recipes Kiwi suggests to you — and we use them for nothing else. We do not sell them, we do not share them for advertising, and we do not use them to build a profile of you for any purpose other than generating your meal plans.
Information about children in your household — how many there are and what they will not eat — is entered by you, the account holder. We do not knowingly collect information directly from children, and children cannot hold Kiwi accounts.
3. Why we collect it
- To generate meal plans and grocery lists that match your household, your restrictions and your schedule — the core function of the app.
- To keep your account secure and to authenticate you.
- To fix problems: diagnosing errors, understanding failures, improving accuracy.
- To manage your account and, if we introduce paid plans, your subscription.
- To send you service messages, and marketing only if you asked for it.
4. Automated processing and the AI services we use
Kiwi generates plans, grocery lists, recipe formatting and meal images using third-party artificial-intelligence services. To do that, we send only what each request needs. For plans and grocery lists: your food preferences, dietary restrictions and allergies, household size, kitchen equipment, cooking-time limits and the names of the recipes involved. For a recipe you import: the web page text, the photo, or the text you pasted. For a meal image: the meal's title and the names of its dishes. We do not send your name, email address, phone number or payment details — nothing in these requests identifies you to the provider.
Our providers process this information to return a result to us. Under the commercial terms we use, they do not use it to train their models and retain it only briefly for abuse monitoring.
We keep a log of these requests — which prompt version ran, how many tokens it used and what it cost — so we can diagnose failures and control spend. When you delete your account, that log is de-identified: the entries remain, but nothing links them to you.
5. Who else receives information
| Recipient | What they receive, and why |
|---|---|
| AI services — today, Anthropic and OpenAI; providers may change | As described in section 4: food preferences, restrictions, household size, recipe text or photos, and meal titles, to generate plans, lists, formatted recipes and images. Nothing in these requests identifies you: no name, email, account or payment information. |
| Instacart | Only when you tap "Shop on Instacart": your grocery list's title and its item names, quantities and units, to build a shopping page on Instacart. No name, email or account link. What happens on Instacart's page is governed by Instacart's own terms and privacy policy. |
| Hosting and infrastructure providers | The companies that run our servers, database and file storage hold the information above on our behalf, in the United States, and may use it only to provide those services to us. |
| Email delivery provider | Your email address and the message, for account emails such as password resets and email-change confirmations. |
| Apple / Google | App distribution, and payment and subscription handling when you buy Kiwi Premium through their stores. They do not receive your preference data. |
| Google (Google Analytics) | Visits to our website, kitchenwizard.ai, through cookies: the pages viewed, the links clicked, an approximate location and the browser and device type, so we can see how the website is used. Never used in the app, and never sent your name, email or anything you enter in Kiwi. |
| RevenueCat | Our subscription-management provider. It receives purchase records from Apple and Google — which plan you bought, when it renews or ends — and a random app-user identifier, so Kiwi knows which accounts have Premium. No name, email or preference data. |
We do not sell your personal information. We do not share it for cross-context behavioural advertising. We do not use it to train anyone's advertising models.
6. Where information is held, and for how long
Your data is stored with a managed hosting provider in the United States. We keep your account and content for as long as your account is active.
When you delete your account, your account, preferences, plans, recipes and grocery lists are deleted immediately and permanently. Copies may persist in database backups for up to two days before they are overwritten. De-identified usage records — which features ran and what they cost, with nothing linking them to you — are retained. Images Kiwi generated for your saved meals contain no personal information and may remain in storage until routine clean-up.
7. Your choices and rights
- See and correct. Your preferences are editable in the app at any time; your account details are editable in settings.
- Delete. Delete your account in the app: on Home, tap your initials in the top-right corner, then Account, then Delete account; type "delete" and tap Delete my account. Deletion is immediate and permanent. You can also email us at support@kitchenwizard.ai and we will delete it for you.
- Export. Ask us and we will provide a copy of the information you have given us.
- Marketing. Off unless you turn it on, and you can turn it off again at any time, in the app or through the unsubscribe link.
Depending on where you live you may have additional rights — to know, to correct, to delete, to limit the use of sensitive information, and not to be discriminated against for exercising them. Email support@kitchenwizard.ai and we will respond within the time the law allows. We will not ask you for more information than we need to verify who you are.
8. Security
Passwords are stored as salted hashes. Access to the app requires an authentication token stored in the device's secure storage, and that token expires after thirty days. Traffic to our servers is encrypted in transit, and our database provider encrypts stored data at rest. The information we send to AI services is sent without your name, email address or any account identifier. No system is perfectly secure, and we will notify you as required by law if a breach affects your information.
9. Children
Kiwi is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided us information, email us and we will delete it. Information you provide about children in your household — how many children and their food dislikes — is yours, and is used only to shape your meal plans.
10. Changes
We will post any update here and change the date at the top. For material changes we will notify you in the app or by email before they take effect.
11. Contact
Kitchen Wizard, Inc., a Delaware corporation. Notice address: 47 Postgate Rd., South Hamilton, MA 01982. Privacy enquiries: support@kitchenwizard.ai.