What stays on your iPhone
Saved recipes and personal edits are stored locally in the app’s private storage. Cookbook search terms are used on-device and are not sent to Kep. Kep does not create an account or connect this cookbook to your name or email address.
Local cookbook data remains until you delete a recipe, use “Delete all recipes,” or remove the app. iOS backup and restore behavior is controlled by your device and Apple settings.
What is sent when you import
When you choose to import a recipe, Kep sends the URL to our processing service. The service retrieves publicly accessible source content and converts it into structured ingredients and instructions.
Depending on the source, processing may involve service providers such as Supadata for transcript and on-screen-text extraction, DeepSeek for structured recipe formatting, and OCR services for reading text contained in images. These providers process data on our behalf and are not permitted to use it for advertising to you.
Shared recipe catalog
A normalized source URL, source metadata, and the extracted recipe may be retained in Kep’s shared catalog. This lets us serve the same public recipe quickly when it is imported again and improve extraction quality.
The catalog does not contain a device identifier, account, name, email address, or a record of which person saved a recipe. Catalog entries are retained until the source is removed, the entry is no longer useful, or a valid removal request is completed.
Security and diagnostics
The iPhone app uses Apple App Attest to verify an installation before it can call our service. We store its verification public key, an installation identifier, signature counters, registration and activity times, and access or revocation status. These records are separate from the shared recipe catalog and your on-device cookbook.
During private testing, an invitation registers one installation. We store a hash of an unused invitation, its expiry and an operator-supplied label. The label can identify the tester to the operator. Installation verification records persist so we can recognize an authorized installation and prevent a revoked installation from regaining access.
We may process an IP address, request identifier, timing data, source provider, usage counters and limited error diagnostics to investigate failures, prevent abuse and operate the service. The hosted iPhone API does not use anonymous browser-session cookies to authorize imports.
Operational diagnostics are retained for no more than 30 days unless a longer period is necessary to investigate fraud, protect the service, or comply with law.
What we do not do
Kep does not sell personal information, build cross-app advertising profiles, access your contacts or photos, or track activity across other companies’ apps and websites.
Deletion, removal, and contact
You can delete local recipes at any time inside the app. To request removal of a public-source recipe from the shared catalog, exercise a privacy right, or ask a question, email barnabaskim95@gmail.com. Include the source URL so we can locate the relevant catalog entry.