Privacy Policy
Updated 9 November 2026
Panilo helps a family decide what to cook today. This policy explains what we keep, why, and who else sees it.
What we keep
- Account: your e-mail address, or the identifier Apple or Google gives us when you sign in with them.
- Your family: the names you give eaters, whether an eater is a child, their allergies, foods they do not eat and how spicy they like food. Allergies are health information: we keep them only to filter out unsafe recipes, and you can remove them at any time.
- What you ask and choose: the phrases you type or say, the products and chips you select, the recipes we suggested, which one you chose, your ratings, favourites, leftovers, the shopping list and the list of products at home.
- Country and time zone: the country and time zone your connection comes from, taken when you sign in and when the app refreshes your session. The country decides for which country recipes are written (its everyday dishes and supermarket products); the time zone keeps notifications and e-mails within daytime hours.
- Notifications: a push token for your phone, so that the family can be told about new favourites, shopping, timers and the morning suggestions.
- Before you sign in: if you try Panilo before creating an account, your selections and first recipes are kept for a temporary guest family. They move to your family when you sign in; otherwise they are deleted after 7 days.
- Voice recordings and photos are sent to our server only to be turned into text or a list of products and are not stored after the answer.
- Technical data: the device type for your session, and anonymous usage statistics (for example, how long it took to choose a dish). The statistics use a one-way code instead of your family’s identifier and never contain what you typed or said.
Why
To suggest recipes that suit your family and your country, to keep the shopping list in sync between the adults of one family, to notify the family, to remember what your family liked, and to keep the service working and affordable. We do not sell your data and we do not show ads.
E-mails. We send sign-in codes and invitations. Unless you unsubscribe, we also send a welcome e-mail, a few tips, a reminder after a long break and the morning suggestions. Every such e-mail has an unsubscribe link.
Recipe bank. Recipes written for families may be offered again to other families. They never carry your eaters’ names or anything else about your family.
Who processes it
- Cloudflare hosts the service; the database and pictures are stored in the European Union. Cloudflare Email Service delivers our e-mails.
- Google (Gemini API) receives the text of a request together with the eaters’ first names and restrictions, and voice recordings or photos, to write recipes, recognise speech or read a photo. We never send your e-mail address or account identifiers.
- Google Firebase Cloud Messaging and Apple Push Notification service deliver notifications: they receive the push token and the text of the notification (for example, a dish name).
- Apple and Google when you choose to sign in with them.
- Google Analytics for Firebase receives anonymous app usage (which screens and features are used, counts such as how many products were picked) with an app-instance identifier, to improve Panilo. It never receives names, e-mail, products or what you typed or said.
Your choices
- Each kind of notification can be switched off in Settings › Notifications.
- Anonymous statistics can be switched off in Settings › Privacy › Anonymous statistics.
- E-mails other than sign-in codes and invitations can be stopped with the link in any of them.
How long
As long as your account exists. Leftovers are kept for 3 days, sign-in codes for 10 minutes, invitations for 7 days, a guest family for 7 days. When you delete your account, it is deleted at once, and your family’s data too if you are its only adult — see Delete your account.
Children
Accounts are for adults. Parents may add children as eaters without an account; we keep only what the parent enters.
Your rights
You can see and change your family’s data in the app, and delete it by deleting the account. You may also ask us for a copy, a correction or deletion, or object to processing, by writing to support@panilo.cooking. If you are in the EU, you may complain to your data protection authority.
Recipes are suggestions
Recipes are written by a language model and may contain mistakes. Allergies and “does not eat” rules are checked by a separate filter, but always read the ingredients yourself, especially for serious allergies.