Your data and device permissions

Privacy

Fotorecipe uses your information to manage pantry stock, recipes, shopping, cooking, scanning, costing, and synchronization. It does not require a social-media account to calculate what you can cook.

Data stored on this device

In standalone use, pantry stock, recipes, shopping records, scanned-product profiles, prices, settings, and device preferences are stored in this browser. Fotorecipe also caches app files so an installed copy can start reliably.

Household synchronization

Household sync is optional. When you create or join a household, household-owned records are sent to the Fotorecipe household service so approved devices can stay synchronized. Stored service data is encrypted. Device credentials, camera choice, appearance, voice preferences, and opening-screen preferences remain local to each device.

Camera, photos, and microphone

Fotorecipe asks for camera or microphone access only when you start a scan, photo capture, or hands-free Cook feature. Local recognition stays on the device. When enhanced recognition is configured and you request it, the selected product or recipe photos are sent to the configured recognition provider for that read. An approved product-label photo is held only in temporary application memory while its short-lived read is active; it is not written to Fotorecipe's background-job registry. The extracted result is kept briefly in an encrypted private server file so another cPanel worker can return it, then removed after acknowledgement, cancellation, or expiry. Normally a timer removes an expired file; if that worker stops before the timer runs, the next product-recognition start removes the already-expired encrypted file. The registry stores only a signed job reference, an image digest, status, and timing information. If a worker stops before finishing, the phone can resend its still-approved photo to resume safely. Fotorecipe does not continuously record the camera or microphone.

Recipe and video sources

When you choose Save to Fotorecipe or otherwise import a website or YouTube recipe, Recipe Saver reads the selected page address, title, selected text, structured recipe data, recipe-card text, recipe images, and video description evidence needed to prepare the review preview. If the page has no structured recipe or recipe card, Recipe Saver may use visible page text and visible links as a fallback. The extension keeps its temporary handoff only until the import succeeds or you clear it, and sends it only to Fotorecipe at https://fotorecipe.vindk.com. Fotorecipe stores the resulting preview draft with AES-256-GCM encryption at rest. The server deletes that draft when you save or cancel the review; an abandoned draft expires within 24 hours. Fotorecipe may also request the public source page, video metadata, description, transcript evidence, or linked recipe page when needed. Recipe Saver does not continuously monitor browsing. The original source address remains attached to the saved recipe so you can open it again.

Recipe Saver limited use

Recipe Saver uses selected page addresses and website content only to provide the recipe-import feature you request. This data is not sold, used for advertising, used for purposes unrelated to recipe import, or used to determine creditworthiness or for lending. It is transferred only to your configured Fotorecipe service as necessary to create the editable import preview, or where otherwise permitted by the Chrome Web Store User Data Policy. Human access is not allowed except with your consent for support, for security, to comply with law, or for aggregated and anonymized internal operations. Recipe Saver's use of information received from Chrome complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

Optional AI cross-checks

When you start an automatic till-slip image cross-check, Fotorecipe sends the original receipt photos directly from this device to every eligible AI endpoint allowed by your saved OpenRouter access setting. It deliberately withholds OCR text, current receipt fields, shopping-list names, and other models' answers so each provider reads the image independently. Results and safe failure details are kept locally with an image fingerprint so the same review can be reopened; credentials and duplicate image copies are not stored in that review history. If you choose the separate signed-in website option, Fotorecipe only prepares the prompt and original files. It does not read the website, its cookies, your account, or its answer; you paste the answer back yourself, and that provider's terms apply.

Backups and downloaded files

A Full Backup is created on your device and downloaded only when you request it. It includes household content needed for recovery but excludes device access credentials. Keep backup files private because they may contain your recipes, pantry records, product photos, and shopping history.

Your controls

You can edit or delete recipes, shopping trips, scanned products, custom ingredients, and device links from their Fotorecipe screens. You can unlink a device, revoke another household device, or clear this site's browser data. Make a Full Backup before clearing data or removing an installation.

Privacy questions can be sent to support@vindk.com .