Privacy Policy

Mulling Spice · Effective 20 July 2026

Mulling Spice is a recipe app made by an individual, not a company. This policy explains exactly what the app stores, where it goes, and what happens when you delete your account. It is written to be specific rather than reassuring — if something leaves your device, it is described below.

What the app stores

Your recipes are kept on a private server operated by the app's developer, so that they sync between your devices and can be shared with people you invite to a recipe book.

• Account details: your email address, your name, and — if you use Sign in with Apple — the anonymous account identifier Apple provides. If you choose Apple's "Hide My Email", the relay address is what gets stored; the app never sees your real one.
• Your content: recipes, ingredients, steps, notes, photos you upload, recipe books, tags, meal plans, and shopping lists.
• Your activity within the app: star ratings, favourites, and the "I cooked this" entries that power the dashboard. These exist because they are features you use, not to study your behaviour.
• Your password, if you sign up with email — stored only as an irreversible hash. It cannot be read back, by anyone, including the developer.

AI recipe import, and the one third party involved

The app can read a recipe from a photo or a web link. That feature works by sending the content to Anthropic, the company behind the Claude AI model, which extracts the structured recipe and sends it back.

This only happens after you explicitly agree to it. Until you do, the AI features are switched off and return an error rather than sending anything. You can withdraw that consent at any time in Settings, which switches them off again. Anthropic's handling of the data it receives is governed by its own terms.

What the app does not do

• No advertising, and no advertising identifiers.
• No analytics or tracking services. The app contains no third-party tracking code of any kind.
• Nothing is sold, rented, or shared with data brokers.
• Your information is never used to track you across other apps or websites.

The only third party that receives any of your content is Anthropic, for the AI import feature described above, and only with your consent.

Photos and shared links

Two things are worth stating plainly, because they are deliberate design choices rather than accidents:

• Uploaded photos are served from a public web address with a long, randomly generated filename. The address is not published or guessable, but anyone who obtains the exact link can view that photo without signing in. This is what allows photos to load quickly inside the app.
• Share links work the same way. If you create a share link for a recipe, anyone with that link can view it. Deleting the link revokes access.

Deleting your account

You can delete your account from within the app, under Settings. It happens immediately and cannot be undone. Here is precisely what that does:

• Removed: your account record, your email, name, and Apple identifier, every recipe book you created and all of its recipes, ingredients, steps, tags, meal plans and shopping lists, along with your ratings, favourites, cook history — and the photo files for those recipes, which are erased from the server's disk.
• Kept, but anonymised: if you contributed a recipe to a recipe book that someone else created, that recipe stays in their book, because deleting it would remove content other people still rely on. Your name is detached from it and it is no longer connected to you in any way.

How long things are kept

Your content is kept for as long as your account exists. There is no automatic expiry, and no archive kept after deletion. The server keeps ordinary technical logs of requests for operational troubleshooting; these are not linked to your content and are not sent anywhere else.

Security

All traffic between the app and the server is encrypted in transit. Passwords are stored only as irreversible hashes. Access to a recipe book is restricted to its members. That said, no system is perfectly secure, and this is a small app run by one person rather than a company with a security team — please weigh that when deciding what to store in it.

Children

Mulling Spice is not directed at children under 13, and accounts are not knowingly created for them.

Your choices

• Turn AI features on or off at any time, in Settings.
• Edit or delete any recipe, photo, or book at any time.
• Delete your entire account from within the app, without needing to ask anyone.
• Request a copy of your data, or ask a question about any of the above, using the contact address below.

Changes to this policy

If this policy changes in a way that affects what is collected or where it goes, the effective date at the top will change and the updated version will appear at this address.

Contact

Questions about privacy, or requests about your data: [email protected]