VibeCook Privacy Policy

Updated: October 24, 2026 Operator: Shanghai Zhiliang Technology Co., Ltd. Privacy contact: privacy@grapery.xyz. Food photos, inventory, prices, storage locations and handling history are stored on your device by default. The system photo picker provides only photos you choose. Camera, location and notifications are enabled by your actions. On-device Vision processes food photos and package text without uploading photos for local recognition. Looking up a city may use Apple's geocoding service. When you actively request cloud suggestions, after confirming the request or enabling remembered consent, your request, available food names and quantities, preparation and set dates, city and household dietary preferences are sent through Cloudflare to Alibaba Cloud Bailian's qwen3-vl-plus in the Beijing region. Photos and prices are not automatically sent. Remembered consent applies only to AI consultations you start, is saved per device and account, and can be turned off in Settings → Privacy & permissions → AI consultations. A change in recipients or scope requires consent again. Your requests, returned recipes and conversation status are saved in private account activity. You can delete each activity; account deletion removes them too. Food and preference inputs are kept while the task runs and cleared after processing. Background tasks may finish after you close the card or leave the app. Preferences may contain sensitive information such as allergies and may be left blank. Check them before sending. Your interface language is also sent to select the response language. Food entry, inventory edit and unpublished sharing drafts, including entered details, selected photos and attached recipes, stay on this device and can be restored when reopened. Clear on-device content to remove them. Drafts are not automatically uploaded or published. Community posts are public. Shared images are redrawn and compressed on device to remove original metadata. Text and images are checked through Bailian, then stored with nicknames, recipes and reaction counts on Cloudflare if approved. Others may save public content. Likes, wants to try, recommendations, reports and blocks are linked to your account. Comments and private messages are not offered. Sign in with Apple credentials verify your identity. The server uses an app-specific derived identifier and time-limited sessions. To delete a cloud account, you verify your Apple identity again. The server uses that temporary authorization code to obtain and revoke this app's authorization with Apple, then deletes your account after revocation succeeds. Apple authorization codes, access tokens and refresh tokens are not saved in our database or logs. We never receive your Apple password. We do not use advertising tracking. Service providers may process necessary connection, security and error metadata. You can delete your posts, delete your cloud account and separately clear on-device data. Successful account deletion removes server account data, posts, images and associated interactions. Reports may retain de-identified records necessary for safety handling. Copies saved by others and system backups are outside our direct control. Support: suoshu@grapery.xyz.