Privacy policy
Last updated: 3 November 2026
This policy explains what data Emilio processes, why, for how long, and the rights you have. In short: we only collect what the app needs to work, we don't sell your data and we don't show ads.
1. Who we are
Emilio, the iPhone app and the emilioplans.com website, is published by KKAT LTD, which is the controller of your data. For any question or request about your data, write to support@emilioplans.com.
2. The data we process
| Category | Data |
|---|---|
| Account | The identifier provided by Apple or Google when you sign in and, if you allow it, your email address (or Apple's relay address) and your name. Your nickname and profile photo, if you add them. Emilio does not use passwords. |
| Profile and preferences | Your answers when you start: goals, household (number of adults, teenagers, children and toddlers), meals per week, shopping day, diet, how often you eat meat, allergies, foods you don't like, time available on weekdays, cooking level, where you find recipes. Your language, units, notification and newsletter preferences. |
| Your content | Recipes you create, import (from a link or a photo) or adapt, saved recipes, favourites, ratings and reviews, meal plan, shopping list, recurring items, collections and planning rules. |
| Conversations with Emilio | The messages you type or dictate to the assistant. Dictation is transcribed by Apple's speech recognition on your iPhone: we only receive the text. We don't keep the conversations on our servers, only a count of the messages sent. |
| Household | The members of your household, their role, and the invitations sent and accepted. |
| Subscription | What Apple signs for your purchases: product, purchase and renewal dates, trial and offer status, App Store country, price and currency. We never see your payment details. |
| Device and usage | App language, time zone, App Store country, whether notifications are allowed, the days you open the app, and counts of what you do (recipes imported, meals planned, messages sent to Emilio…). Server logs: date, route called, IP address, app version. |
Emilio has no advertising identifier, no third-party tracker and no analytics SDK.
Your diet and allergies may reveal information about your health. We only use them to choose the recipes, suggestions and emails we show you. By entering them you consent to this use, and you can delete them from your profile at any time.
3. Why we use it, and on what basis
| Purpose | Legal basis |
|---|---|
| Create your account, sign you in and secure your sessions | Performance of the contract |
| Suggest recipes and meal plans for your household, diet and allergies; answer you through Emilio | Performance of the contract; consent for health-related data |
| Run the meal plan, shopping list, collections and household sharing | Performance of the contract |
| Manage your subscription and your household's access | Performance of the contract |
| Send emails the service needs (your trial ending, important changes) | Performance of the contract |
| Send tips and reminders about using Emilio (for example when next week isn't planned yet) | Legitimate interest; you can unsubscribe from every email |
| Send the newsletter | Consent, which you can withdraw in the settings |
| Keep the service secure, prevent abuse and fix bugs | Legitimate interest |
| Improve the catalogue and the app with aggregated statistics | Legitimate interest |
We make no automated decision that has legal effects on you, and we don't sell or rent your data to anyone.
4. What other members of your household see
Members of your household see your name, your nickname and your profile photo, the shared content (saved recipes, meal plan, shopping list, collections, planning rules) and whether the household has a subscription. They don't see your answers when you started (diet, allergies, preferences), your favourites, your reviews or your conversations with Emilio. Your allergies only filter what you see.
5. Service providers
We use the following providers. They process data on our behalf and following our instructions.
- Railway (United States): servers and database of the service.
- Cloudflare (United States): domain name and network of emilioplans.com.
- Apple: Sign in with Apple, App Store purchases and subscriptions, speech recognition on your iPhone.
- Google: Sign in with Google, and the Gemini API, which creates a recipe photo when you ask for one. It receives the recipe's title and main ingredients, and your own photo of the dish if you provide one.
- Anthropic (United States): the AI behind Emilio. It answers your messages, reacts to your answers when you start and reads the recipes you import from a link. It receives your first name, your messages and what it needs to answer (your household, diet, allergies, meal plan or the recipe concerned), never your email address. Anthropic doesn't use this data to train its models.
- Loops (United States): sends our emails. It receives your email address, first name, language, time zone, App Store country, household composition, diet, allergies and dislikes, subscription status and usage counts, so that each email suits you. Your contact is deleted from Loops when you delete your account.
When data leaves the European Economic Area or the United Kingdom, the transfer is covered by the European Commission's standard contractual clauses or by the EU–US Data Privacy Framework for certified providers.
6. How long we keep data
- Account, profile, personal content and subscription records: as long as your account exists.
- Shared household content (saved recipes, meal plan, shopping list, collections, planning rules): as long as the household exists. After you delete your account, it stays with the household with no link to you.
- Session tokens: 90 days at most, revoked when you sign out or delete your account.
- Household invitations: 7 days.
- Server logs: 30 days at most.
When you delete your account, your email address, your Apple or Google identifiers, your name, nickname, photo, preferences and subscription records are erased immediately, and your contact is deleted from Loops. Database backups are renewed within 30 days.
7. Your rights
Depending on where you live (European Union and United Kingdom under the GDPR, Turkey under the KVKK, and other similar laws), you have the right to access your data, correct it, erase it, restrict its processing, receive a copy in a machine-readable format, object to processing based on our legitimate interest, and withdraw your consent at any time (newsletter, notifications, health-related data), without affecting past processing.
Most of these rights are available in the app: edit your profile and preferences, turn off the newsletter, remove your photo, delete your account. For anything else, write to support@emilioplans.com; we reply within one month. You can also complain to your data protection authority, for example the CNIL in France, the AEPD in Spain, the ICO in the United Kingdom or the KVKK Board in Turkey.
8. Security
Exchanges between the app and our servers are encrypted (TLS). Session tokens are known only to your device and stored hashed on our side. Access to the database is restricted to the KKAT LTD technical team. If a data breach is likely to harm you, we will inform you as the law requires.
9. Children
Emilio is not designed for children. You must be at least 15 to create an account, or have the permission of a parent or guardian. If you think a child has given us data without this permission, write to us and we will delete it.
10. The emilioplans.com website
The website sets no cookies and uses no analytics or tracker. Its fonts and images are served by us. Our servers and Cloudflare record visitors' IP addresses in their logs for security, for 30 days at most.
11. Changes
We may update this policy when the app or the law changes. The date of the last update is at the top of the page; if a change is important, we will tell you in the app or by email.
12. Contact
For any question about this policy or your data: support@emilioplans.com.