Smaki
Privacy Policy
Effective date: 5 November 2026
Smaki ("we", "our", "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect information when you use the Smaki mobile application (the "App").
1. Information We Collect
1.1 Information You Provide
We may collect information you provide directly in the App, such as:
- Recipes you create
- Shopping lists and inventory items
- App settings and preferences
1.2 Automatically Collected Information
We may collect limited technical data necessary to operate the App, such as:
- Device type and OS version
- App version and basic usage events
- Crash and performance logs (if enabled)
- An anonymous install identifier generated on your device. This ID is not tied to your Apple ID, email, or any personal data and is only used to keep your credit balance consistent across app launches.
1.3 Camera and Photo Library
If you attach a photo to a product or a recipe, the App asks for access to your camera or photo library. The picture is copied into the App's own folder on your device and stays there while you only use the App.
Two actions send a photo further, and you start both yourself. The first is sharing: if you share a recipe that has a photo, the photo is uploaded to our server together with the recipe so that the shared page can show it. Anyone holding that share link can open the page and the image.
The second is Recipe photos. When you use From a photo, the photos you choose (up to three) are sent over an encrypted connection to our server, which passes them to our AI provider to read the recipe. Before sending, the App converts each photo to JPEG and removes its metadata, such as location. We do not store the photos: they are held in memory only while the recipe is read and are then discarded. Only the recipe text is saved, on your device. Our AI provider processes the photos on our behalf and may keep them for a limited time under its own terms.
1.4 Voice Input
When you dictate a list, the App asks for access to the microphone and to speech recognition. Speech is recognized by the speech service of your phone's operating system (Apple or Google), on the device where it is available. Smaki does not record or store your voice and does not receive any audio. Only the recognized text appears in the text field, and it is handled like any list you type. You can turn off microphone and speech recognition access in system settings at any time.
1.5 Links You Import
When you import a recipe from a link (for example YouTube, TikTok, Instagram, Facebook, X, Pinterest or Telegram), the App sends that link to our server. The server reads the public page behind it: the caption and cover and, for a video, the spoken text or subtitles, using our transcription provider Supadata where needed. It then passes that text to our AI provider to write the recipe. We do not store the video. The resulting recipe is saved on your device.
2. How We Use Information
We use information to:
- Provide core App functionality
- Generate recipes based on your input
- Store and display your data within the App
- Improve app performance and stability
3. AI Processing
The App may send your recipe request or ingredient list to third-party AI providers — specifically OpenRouter, which routes the request to a large language model on our behalf — to generate content. A request carries what you ask Smaki to cook with, the eating preferences you set in the App, and your anonymous install identifier for rate-limiting. It is not associated with your Apple ID, email, or any personal identifier.
Eating preferences include your diet and the ingredients you told the App to avoid. If you list allergies there, they travel with the request: the model has to know what to keep out of the recipe. Depending on where you live, an allergy counts as health information, so we say it plainly rather than folding it into "preferences". Leave the field empty and nothing about your health is sent.
If you use From a photo, the photos you choose are sent to the same AI provider, as described in section 1.3.
4. Credits, Purchases and Advertising
Generating a recipe with AI spends credits. A new install starts with a small balance, and you can add credits in two ways: buy a credit pack in the App Store or Google Play, or watch a rewarded video. There is no subscription.
Payments are handled entirely by Apple or Google. We never see or store your card or other payment details. After a purchase, the store sends our server a purchase record: a transaction identifier and the product you bought. We link it to your anonymous install identifier to add the credits, and to take them back if the store refunds the purchase.
Rewarded videos are served by Google AdMob. To show an ad and to confirm that it was watched, Google's SDK processes device and advertising identifiers under Google's own privacy policy. We receive the reward result, not the advertising profile behind it.
5. Data Storage
Most data is stored locally on your device. Your recipes, pantry, shopping list and settings never leave it on their own.
We store these things on our servers:
- Your credit balance, tied to the anonymous install identifier described in section 1.2.
- Records of your credit purchases and of any refunds, tied to the same identifier, as described in section 4.
- Anything you deliberately share. Sharing a recipe or a shopping list uploads a copy of it, and the photo attached to a recipe, so that the link you send has something to show. That copy sits on our server until we remove it, and whoever has the link can read it without installing the App.
If you enable sync or external services in a future version, that relationship will be updated here with an effective date.
6. Sharing Your Data
We do not sell your personal data.
We share limited data with the following service providers:
- PostHog — for anonymous product analytics inside the App: which screens are used, which features are tapped, whether a recipe was generated or a credit spent. PostHog assigns the same anonymous install identifier described in section 1.2; we do not send your name, email, or any other personal information.
- Amplitude — for anonymous product analytics on this website (smakipro.com) only, not inside the App: which pages are viewed, which CTAs are clicked, and which language a visitor browses in. Amplitude assigns an anonymous device identifier; we do not send your name, email, or any other personal information.
- Google AdMob — for the rewarded videos that top up credits (as described in section 4)
- Apple and Google Play: they process your credit purchases and tell our server which purchase was made or refunded (as described in section 4)
- Supadata: a transcription provider. When you import a recipe from a video link, it returns the spoken text or subtitles of that video (as described in section 1.5)
- OpenRouter — for AI recipe generation (as described in section 3)
- Railway — the cloud platform that hosts our gateway server; it sees only request metadata required to route traffic
7. Tracking Across Apps
Smaki does not request the App Tracking Transparency permission on iOS, so the App does not access your device's advertising identifier and cannot link your activity in Smaki to your activity in other companies' apps or websites for targeted advertising.
Google AdMob still needs to know a video finished so it can pay out a reward, and it uses a device identifier of its own for that and for fraud prevention, as described in section 4. That identifier is scoped to serving ads inside the App, not to tracking you elsewhere.
8. Your Choices
You can:
- Disable camera or photo access in system settings
- Delete recipes or lists inside the App at any time
- Erase everything the App stores from its Settings screen
- Uninstall the App to remove local data from your device
- Request deletion of your server-side data (credit balance and purchase records) on our data deletion page, or by emailing us at the address in section 14. Please include the anonymous install identifier visible in Settings → About if available, so we can locate the right record
9. Your Rights (EU / UK Users)
If you are in the European Union or the United Kingdom, you have the right to request access to, correction of, or deletion of your data, as well as the right to object to or restrict its processing, and the right to data portability. To exercise any of these rights, contact us at the address in section 14. We will respond within 30 days.
10. Children's Privacy
Smaki is not intended for children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with information, please contact us so we can delete it.
11. Data Retention
We retain data only as long as necessary to provide App functionality. Locally stored data remains until you delete it. Server-side credit balances are retained as long as the anonymous install identifier remains active, or until you request deletion, except that we may keep purchase and refund records where we need them for accounting or to settle a refund.
A recipe or shopping list you shared expires 90 days after you created the link. Past that point the link stops working and the stored copy, including the photo, is deleted from our server.
12. International Transfers
If you use the App outside your country, your data may be processed in other jurisdictions (including the United States, where our service providers are based) according to this Privacy Policy.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted here with an updated effective date.
14. Contact Us
If you have questions, contact us at:
smaki.support@gmail.com