Panilo — Privacy Policy
Panilo helps a family decide what to cook today. This policy explains what we keep, why, and who else sees it. Updated 2026-11-07.
What we keep
- Account: your e-mail address, or the identifier Apple or Google gives us when you sign in with them.
- Your family: the names you give eaters, whether an eater is a child, their allergies, foods they do not eat and how spicy they like food. Allergies are health information: we keep them only to filter out unsafe recipes, and you can remove them at any time.
- What you ask and choose: the phrases you type or say, the products and chips you select, the recipes we suggested, which one you chose, your ratings, leftovers, the shopping list and the list of products at home.
- Voice recordings and photos are sent to our server only to be turned into text or a list of products and are not stored after the answer.
- Technical data: the device type for your session, and anonymous usage statistics (for example, how long it took to choose a dish). The statistics use a one-way code instead of your family's identifier and never contain what you typed or said.
Why
To suggest recipes that suit your family, to keep your shopping list in sync between the adults of one family, to remember what your family liked, and to keep the service working and affordable. We do not sell your data and we do not show ads.
Who processes it
- Cloudflare hosts the service; the database and pictures are stored in the European Union.
- Google (Gemini API) receives the text of a request together with the eaters' first names and restrictions, and voice recordings or photos, to write recipes, recognise speech or read a photo. We never send your e-mail address or account identifiers.
- Cloudflare Email Service delivers sign-in codes and invitations.
- Apple and Google when you choose to sign in with them.
How long
As long as your account exists. Leftovers are kept for 3 days, sign-in codes for 10 minutes, invitations for 7 days. When you delete your account in Settings, your account is deleted at once, and your family's data too if you are its only adult.
Children
Accounts are for adults. Parents may add children as eaters without an account; we keep only what the parent enters.
Your rights
You can see and change your family's data in the app, and delete it by deleting the account. You may also ask us for a copy, a correction or deletion, or object to processing, by writing to support@panilo.cooking. If you are in the EU, you may complain to your data protection authority.
Recipes are suggestions
Recipes are written by a language model and may contain mistakes. Allergies and «does not eat» rules are checked by a separate filter, but always read the ingredients yourself, especially for serious allergies.