The short version
Gustari keeps your recipes in your own iCloud account. There is no Gustari server, no Gustari account, and nothing about you or your cooking is collected, analysed, or passed to anyone else.
The rest of this page is that same statement, said precisely.
What Gustari stores, and where
Everything you put into Gustari — recipes, photos, cookbooks, your shopping list, meal plans, and the notes and ratings you log when you cook something — is stored on your device and in your own private iCloud storage, under your own Apple Account.
That storage is yours. It is the same private iCloud area other apps use for their own data, and its contents are not visible to the developer of this app.
There is no Gustari server
You do not create an account to use Gustari, because there is nothing to create one with. Your recipes sync between your own devices through Apple’s iCloud service, not through a server operated by this app.
This is not a promise to handle your data carefully. It is the stronger statement that the data never arrives anywhere it could be handled.
What is never collected
- No analytics or usage tracking of any kind.
- No advertising, and no advertising identifiers.
- No third-party code in the app — no SDKs, no trackers, no libraries that phone home.
- No profile of you, your recipes, or your cooking.
- Nothing is sold or shared with anyone, because nothing is gathered in the first place.
When Gustari uses the internet
Only two things reach the network, and both are things you ask for:
- Importing a recipe from a link. When you paste or share a web address, Gustari fetches that page so it can read the recipe out of it. The request goes to that website, exactly as it would if you opened the page in a browser.
- iCloud sync. Your own data moving between your own devices, and to anyone you have chosen to share a library with.
Nothing else leaves your phone. There is no background reporting.
Text recognition and AI run on your device
Scanning a recipe from a photograph uses Apple’s on-device text recognition. On iPhones with Apple Intelligence, tidying an imported or scanned recipe into clean steps uses Apple’s on-device model.
In both cases the work happens on the phone itself. The photograph and the recipe are not uploaded anywhere to be processed.
Permissions, and what each is for
- Camera — only when you photograph a recipe so it can be scanned. Gustari does not use the camera at any other time.
- Photo library — only to attach a photo you choose to a recipe or a cookbook cover.
- Reminders — only if you turn on shopping list syncing. Gustari then creates and updates a Reminders list called “Gustari”. It does not read your other lists.
Each is requested when you first use the feature that needs it, and each can be withdrawn in iOS Settings at any time.
Sharing with other people
If you share your recipe library, that is done through Apple’s own sharing between your iCloud account and theirs. You decide who is invited and whether they can edit. You can stop sharing, or remove someone, whenever you like.
The cooking notes, dates and ratings you log against a recipe are treated as private and are never shared, whoever you share a library with.
Sending a recipe or a cookbook as a file is different: it hands over a copy, and once sent, that copy is theirs. It contains what you can see in the recipe, and it includes your cook log only if you explicitly choose to include it when sending.
Keeping and deleting
A recipe you delete moves to Deleted Items for 30 days, where you can restore it, before it is removed permanently. You can also empty that yourself at any time.
Because your data lives in your own iCloud storage, removing it is entirely in your hands: delete it in the app, or remove the app’s data from your iCloud account in iOS Settings. There is no copy elsewhere for anyone to delete on your behalf.
While Gustari is in beta
Gustari is currently distributed for testing through Apple’s TestFlight. If you send feedback or if the app crashes, Apple may pass that report — which can include a screenshot you chose to send, and technical details of the crash — to the developer. That is Apple’s system rather than the app’s, and it is covered by Apple’s own terms.
Anything you send that way is used to fix the problem, and nothing else.
Children
Gustari is not directed at children, and collects nothing from anyone, of any age.
Changes to this policy
If this policy changes, the date at the top of this page changes with it. Any change that affects what the app does with your information will be described in the app’s release notes as well.
Getting in touch
Questions about any of this, or about your data: [email protected]