GarnishedPrivacy Policy
How Garnished handles your information. Garnished is available in the United States.
Who we are
Garnished is made by Lulo Labs. We are responsible for your personal data in the app and on this website. Questions or requests: [email protected].
The short version
- Garnished has no accounts and never asks for your name, email or phone number.
- Your allergies and diet rules are used only to shape your recipes. They are never sold, never used for ads and never sent to our analytics or advertising partners.
- Recipes are written by third-party AI providers from the ingredients and kitchen profile you give.
- We share a few app events and purchase events with advertising partners such as Meta to measure our ads, tied to a random app ID, and your advertising identifier only if you allow tracking when iOS asks. You can stop it with Do not sell or share in the app (Settings › Legal).
- We don't sell your information for money.
- You can delete your data in the app at any time (Settings › Legal › Delete my data).
What we collect
- Identifiers: a random user ID created when you first open the app (there is no sign-in), which also ties your analytics events together; a random app ID created by our advertising partner's tool; and, if you allow tracking, your iPhone's advertising identifier.
- What you tell Garnished: the ingredients you type or dictate, your kitchen profile (cooking goals, skill, who you cook for, meals, cuisines, time and clean-up preferences, diet rules, food allergies, dislikes, equipment and staples), the recipes you create and save, and recipe reports you send.
- Approximate location: your region as a place name, such as "Austin, United States", if you allow location or type it. Our advertising partners may also infer a rough location from your IP address.
- Purchases: your subscription and credit-pack history from Apple, and your credit balance.
- Usage data: which screens and features you use, linked to your random user ID, and app events such as install, app opens, finishing setup, your first recipe and purchases, for ad measurement.
- Diagnostics: crash reports and app performance measurements (such as start-up time), with device model, iOS and app version.
- Optional details: gender and age band if you give them ("Prefer not to say" is always an option) and your birthday month if the app has your birthday. Used only for analytics.
- Messages you send us, to answer them.
We don't collect your name, email address, phone number, contacts, photos, precise location or voice recordings. When you dictate ingredients, Apple's speech recognition turns your voice into text on your iPhone; the audio never leaves it.
Location
If you allow location, iOS gives Garnished one approximate position (never precise GPS), which Apple's location services turn into a place name on your iPhone. Garnished keeps only that place name, such as "Austin, United States", in your kitchen profile, so recipes can suit your region and season. It is stored on our servers with your profile and sent to our AI provider with your recipe requests; only the country goes to our analytics provider. You can type a region instead, skip it, or change it in Settings, and turn off location access in Settings › Garnished › Location.
How we use it
- Provide the app, write your recipes and their pictures, and keep your library and credits in step.
- Process purchases, unlock your plan and credits, and restore them.
- Keep the service secure, prevent abuse and fix crashes and slow screens.
- Understand, in aggregate, how Garnished is used so we can improve it.
- Measure and improve our own advertising (with your advertising identifier only if you allow tracking).
- Review recipe reports, answer your messages and meet legal obligations.
We use your information only for these purposes. Where we ask your permission (tracking, location, the AI terms), you can withdraw it at any time in iOS Settings or in the app, and you can stop ad measurement with Do not sell or share in the app.
AI-generated recipes and pictures
Garnished writes recipes with AI. When you ask for a recipe, our servers send third-party AI providers the ingredients you typed or dictated (as text), your kitchen profile (diet rules, allergies, dislikes, equipment, cooking level and region) and, when you change a recipe, the recipe being changed. A separate AI provider draws the picture of the plate from a short description of the dish, with no information about you. We never send your name, contacts or a device identifier.
Our AI providers use this only to return the recipe and picture. Under their terms for paid services they do not use it to train their models; they may keep request logs for a limited time to detect abuse.
Before your first recipe, Garnished shows these terms and asks you to agree. You can read them again or withdraw your agreement in Settings › AI & your data; Garnished asks again before your next recipe.
Recipes, nutrition figures and pictures are generated by AI and can be wrong. Pictures are illustrations. See the food safety disclaimer. You can report a recipe in the app (Report this recipe); a person reads every report.
Advertising and tracking
Garnished's App Store versions include an advertising tool from Meta that we use only to measure and improve our own ads, for example to see which ad led to an install. Whether or not you allow tracking, it sends Meta a few app events (install, app opens, finishing setup and your first recipe) with a random app ID it creates, device and app details and your IP address, and our subscription-management provider sends Meta your purchase events with the same random ID. Without tracking, Meta gets no advertising identifier and uses this only in aggregated, privacy-preserving ad measurement (such as Meta's Aggregated Event Measurement). Meta handles it under its own privacy policy.
iOS asks whether you allow the app to track your activity across other companies' apps and websites (App Tracking Transparency). Only if you tap Allow does Meta also receive your advertising identifier. You can change that at any time in Settings › Privacy & Security › Tracking.
To stop it all, turn on Do not sell or share my personal information in the app (Settings › Legal). Garnished then stops sending these events from your iPhone, asks Meta to limit what it already has, and stops our subscription-management provider passing your purchases to Meta. Test versions of the app never include advertising tools. Our website sets no cookies and runs no trackers.
Where your data is stored
Your data is stored and processed in the United States by our cloud hosting provider and our other service providers. We protect it with industry-standard measures, including encryption in transit, access controls and checks that requests come from our genuine app, but no system is completely secure.
How long we keep it
We keep your kitchen profile, recipes and library until you delete them or use Delete my data; after that we keep recipe content only in a de-identified form that can't be linked to you. Other data is kept only as long as shown below, then deleted. We may keep data longer only where the law requires it.
| Data | How long we keep it |
|---|---|
| Kitchen profile, recipes, library, collections, credit records | Until you delete them or use Delete my data |
| Plate pictures | Temporary copies 90 days; the picture saved with a recipe until the recipe is deleted (Delete my data keeps a de-identified copy) |
| De-identified recipe content (after Delete my data) | As long as needed to improve Garnished; it can't be linked to you |
| Live recipe progress (while a recipe is being written) | 7 days |
| Recipe reports | 180 days |
| Abuse-prevention counters (one-way scrambled ID) | 2 days |
| Crash reports | 90 days |
| Performance measurements | Up to 90 days |
| Server logs | 30 days |
| Analytics events (tied to your random user ID) | as long as needed to understand and improve the app, with no fixed period. Not removed by Delete my data; email us to have them deleted |
| Purchase records | As long as you have the app's purchases, then as tax law requires |
| Data received by advertising partners | Under the partner's own policy |
| Support emails | 2 years after the conversation ends |
| Database backups | 7 days |
Your rights
Depending on the state you live in (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others with consumer privacy laws), you may have the right to know and access the personal information we hold about you, correct it, delete it, get a copy in a portable format, and opt out of the sale of your information, "sharing" for cross-context behavioral advertising, targeted advertising and profiling. You can delete your data yourself in the app (Delete your data) and opt out of selling and sharing with Do not sell or share in the app (see Advertising and tracking). For anything else, email [email protected]. Because Garnished has no accounts, we may ask for a detail from your iPhone to verify the request. We reply within 45 days, free of charge. You may use an authorized agent. If we decline your request, you can appeal by replying to our decision with the subject Appeal; if we still decline, you can contact your state attorney general. We won't treat you differently for using these rights.
US state privacy notice
This notice at collection covers the categories of personal information defined by the California Consumer Privacy Act (CCPA) and similar state laws. In the last 12 months we have collected the categories below. We collect them from you, from your iPhone and, for purchases, from Apple.
| Category | Examples | Disclosed for a business purpose to | Sold or shared for advertising? |
|---|---|---|---|
| Identifiers | Random user ID; random advertising-tool app ID; IP address; advertising identifier (only if you allow tracking) | Service providers; advertising partners such as Meta | Random app ID and IP address: shared, unless you turn on Do not sell or share. Advertising identifier: shared only if you also allow tracking |
| Commercial information | Subscription and credit-pack purchases | Apple; our subscription-management provider; advertising partners such as Meta | Purchase events: shared, unless you turn on Do not sell or share |
| Internet or other electronic network activity | Features used, app events, crash and performance data | Service providers; advertising partners such as Meta (app events only) | App events (install, app opens, finishing setup, first recipe): shared, unless you turn on Do not sell or share |
| Approximate geolocation | Region as a place name; rough location from IP address | Service providers; advertising partners such as Meta (IP address) | IP-based location: shared, unless you turn on Do not sell or share |
| Sensitive personal information | Food allergies and diet rules you choose to enter | Service providers (cloud hosting and AI providers) only | No. Never sold or shared |
| Characteristics and inferences | Gender, age band, birthday month, cooking preferences | Our analytics provider | No |
Selling and sharing. We don't sell personal information for money. Giving app events, purchase events, a random app ID and your IP address (and, if you allow tracking, your advertising identifier) to advertising partners such as Meta may count as "selling" or "sharing" for cross-context behavioral advertising, or as targeted advertising, under some state laws. To opt out, turn on Do not sell or share my personal information in the app (Settings › Legal), or email us. Choosing Ask App Not to Track (or turning tracking off in Settings › Privacy & Security › Tracking) keeps your advertising identifier out of it but does not stop the events above. We don't knowingly sell or share the personal information of anyone under 16.
Sensitive information. We use your allergies and diet rules only to provide the recipes you ask for, never to infer anything about you, and you can limit their use by removing them in Settings › Your kitchen. We keep each category only as long as described in How long we keep it.
Consumer health data (Washington, Nevada and Connecticut)
Washington's My Health My Data Act, Nevada's consumer health data law (SB 370) and Connecticut's privacy law protect "consumer health data". The food allergies and diet rules you may enter in your kitchen profile could count as such data. This section explains how we handle them.
What we collect and how. Allergies (from a list of common allergens, or ones you type) and diet rules (such as vegetarian, vegan, pescatarian, halal, kosher, gluten-free, dairy-free or low-carb). Only you enter them, by choosing to answer those questions; "None" is always an answer.
Why. Only to keep those ingredients out of your recipes and follow your diet rules. They are stored with your kitchen profile on our servers and sent to our AI provider with each recipe request, for that purpose only. Your agreement to the AI terms before your first recipe is your consent to this; you can withdraw it in Settings › AI & your data.
Who receives them. Only our cloud hosting provider and our AI providers, acting for us. We never sell them, never use them for advertising, and never send them to our analytics or advertising partners, including Meta.
Your rights. You can see and change your answers in Settings › Your kitchen (clearing an answer also clears our server copy), delete all of them with Settings › Legal › Delete my data, withdraw your consent, ask which processors received them, and appeal a decision we make about your request by emailing [email protected]. Washington residents can also complain to the Washington State Attorney General.
Children
Garnished is meant for adults. It isn't directed to children under 13, and we don't knowingly collect personal information from them. The app doesn't ask for a date of birth, and its age question offers only adult age ranges or "Prefer not to say". If you believe a child under 13 has given us information, email [email protected] and we'll delete it.
Changes
We'll update this page and its date when our practices change, and tell you in the app about significant changes.