Privacy policy

Who is responsible

Philio is an iPhone app made by Svante Dahlberg, an independent developer. For anything on this page, email philiosupport@svantedahlberg.com.

What stays on your iPhone

Your preferences, meal plans, recipes, favorites and shopping lists are saved on your device. They are not synced to iCloud or anywhere else, and deleting the app deletes them.

What is sent when Philio plans your meals

When you create a plan, pick meals, or ask for a change, the app sends the server what it needs to write the recipes:

• Your preferences: number of dinners and portions, budget, allergies and restrictions, diets, cuisines, cooking styles, difficulty and time limits.
• Anything you type, such as a description of how you like to eat or a request like "No mushrooms this week".
• The recipes in your current plan, so a change can build on them.
• Your language, measurement units, the current month, and your country.
• If you allow location access, your city and your latitude rounded to a whole degree (roughly 100 km). This is used for seasonal ingredients and local prices.

Nothing that identifies you, like your name, contacts or photos, is part of a request.

Who processes it

Philio's server runs on Cloudflare. It passes your request to Anthropic, whose Claude model writes the recipes. Anthropic processes requests to produce the response and does not use them to train its models. Recipe photos are generated by an image model on Cloudflare Workers AI, which receives only the recipe's name and main ingredients.

The server does not log the content of your requests or the recipes it sends back. Cloudflare keeps short-lived technical logs of each request (time, address, status) for up to 7 days to run and secure the service.

What the server keeps

• An anonymous device key. The app uses Apple's App Attest to prove requests come from a genuine copy of Philio. The server stores that key under a random-looking identifier, with the date it was first and last seen. It isn't linked to your name, email or Apple ID.
• Your subscription status. After a purchase, the app sends Apple's signed receipt so the server can check it. The server stores the subscription's transaction ID, product and expiry date with the device key. Apple handles the payment; Philio never sees your payment details.
• Usage counts. Each subscription has a weekly allowance, so the server counts how much you used each week. Counts are deleted after 5 weeks. Requests per minute are also counted to stop abuse, by device key and by IP address, and deleted after a few minutes.
• Recipes, without you. Recipes the server writes are kept for up to 90 days with no link to the person who asked, and may be used to build the shared Discover library.
• Totals by country. The number of plans made and active users per country per week, and how often ingredients appear, to improve price estimates. These are counts, not records of individuals.

Sharing favorites to Discover

When you favorite a recipe, Philio shares the recipe to Discover, where other people can find it. The server stores the recipe and how many people favorited it. To avoid counting you twice it keeps a one-way code for your favorite of that recipe, which can't be traced back to you or linked to your other favorites. You can turn this off in Preferences under "Share favorites to Discover".

Location

Philio asks for location only while you use the app, and only at city-level accuracy. Your coordinates are turned into a city name by Apple Maps on your device. Philio works without location; you can turn it off in the iPhone Settings app at any time.

What Philio never does

• No accounts, no sign-up, no email collection.
• No advertising, and no advertising identifier.
• No analytics or crash-reporting services.
• No tracking across apps or websites, and no selling or sharing of data with data brokers.

Allergies and health information

Allergies and diets you choose are used only to write recipes that fit them. They are sent with each request, and the server doesn't store your list of them. Philio's recipes are generated by AI, so always check ingredient labels if you have a severe allergy.

Your choices and rights

Deleting the app removes everything stored on your iPhone. Because the server holds no name or email, it can't look you up by them. If you want the records tied to your device removed, or have a question about your data, email philiosupport@svantedahlberg.com and we will help. Depending on where you live, you may have rights to access, correct or delete your data, and to complain to your local data protection authority.

Children

Philio is not directed at children under 13 and doesn't knowingly collect data from them.

Changes

If what Philio collects changes, this page is updated first and the date at the top changes with it.