Privacy

Cibora works without an account. Your pantry, your week, your shopping list, what you have cooked and anything you have marked to avoid are stored on your device and never sent to us. There is no advertising, no tracking and no analytics of any kind — we do not measure which recipes you look at.

These live in your browser's local storage. We cannot read them, and clearing them removes them completely:

• Your pantry and what is in it
• Your week plan and shopping list
• Your cook log — what you cooked and when
• Your profile: name, how you cook, weeknight time limit, and your allergens
• Voice and speech preferences

Allergens are treated with particular care. When a feature needs to filter by them, the filtering happens in your browser rather than on our servers, so a health condition never travels in a request or appears in a log. You can erase all of it at any time from the You page.

An account is only needed to write recipes, review, comment, or sync between devices. If you make one we store:

• Your email address and display name
• Recipes you privately import, including any source link and creator credit you provide
• Your password, hashed with bcrypt — we never store or see the password itself
• Anything you deliberately publish: recipes, photos you upload, reviews, comments and collections

A shared link or pasted recipe stays as a pending draft in this browser tab while you sign in. It is cleared when you save or discard it, or when the tab's session storage is cleared. Choosing Preview sends the link or text to our server. We fetch public recipe pages; when text needs AI to organize it, we send that recipe text to Anthropic. Explicit Ingredients and Method sections can be read without AI. Only choosing Save privately adds the recipe to your account. Source images, when present, load directly from the original image host in your browser.

Photos attached to a recipe you write are stored by us and shown with it. Before storage we strip the hidden metadata that cameras and phones attach — including GPS coordinates, the timestamp, and the device serial number. A photo taken in your kitchen does not publish where your kitchen is.

When you use a camera feature — scanning your shelf, identifying a dish, or checking a pan mid-cook — a single still frame is sent to an AI provider to be analysed, and the answer is returned to you. The video stream never leaves your device, and we do not store the frame. The provider is Anthropic, or OpenAI where configured as a fallback.

• Anthropic (and optionally OpenAI) — text you type into Ask, recipe captions that need AI extraction, and camera frames
• Pexels — serves the catalog photography; your browser requests images from them
• Neon and Vercel — the database and hosting, which necessarily process what is stored above
• USDA FoodData Central and Open Food Facts — queried for nutrition and barcode data, never with anything about you

We do not sell data, and there is nobody else. No advertising networks, no analytics, no social trackers.

To stop the AI features being run up as a bill by automated abuse, we count how many times they are used. When you are signed out this is counted against a one-way hash of your IP address, never the address itself, and it is used for nothing but that count.

You can delete your account at any time from your account page. It is immediate and permanent: your sign-in, your recipes, your reviews, comments, collections and imports are removed. Catalog recipes that credited you remain, with the credit removed. Device data is separate — clear it from the You page.

Cibora is not directed at children under 13, and we do not knowingly collect anything from them.

If what the app does changes, this page changes with it and the date at the top moves. Questions or a deletion request you cannot complete yourself: privacy@ciboraapp.com.