What Plantry stores, what it sends, and what it never touches.
Your recipes, meal plans and shopping lists are stored on your device, not on our servers. We have no accounts, so there is nothing for us to log you in to.
We collect anonymous usage statistics so we can see which features get used. The one thing that does leave your device is a fridge photo in Leftovers, which is sent to be read by an AI model and is not kept afterwards. We do not sell data, we run no advertising, and we use no advertising identifiers.
Everything you create in Plantry lives on your device: the recipes you save or write, your meal plans, your shopping list, your cookbook and your settings. It is not uploaded to us, and we cannot see it. Deleting the app deletes it, which is also why there is currently no way for us to restore it for you.
A small number of preferences, such as which tips you have already seen, sync through your own iCloud account using Apple’s key-value storage. That data belongs to your Apple Account and passes through Apple, not through us.
Plantry sends anonymous usage signals through TelemetryDeck, an analytics service built for privacy and operated in the European Union. We use it to understand which features people actually use and where they run into trouble.
A signal is the name of something that happened, such as finishing a shopping list, checking off an item, or opening the subscription screen, together with basic technical context such as the app version and the device model. That is the whole payload.
What is never in a signal: your recipes, your meal plans, your shopping list items, anything you type, any photo, and your name or email address. There are no advertising identifiers and no cookies. TelemetryDeck does not build a profile that follows you from one app to another, and we cannot take a signal and work out which person it came from.
Builds distributed through TestFlight are marked as test data and kept separate from the real figures.
Plantry asks for these only when you use the features that need them, and you can refuse and still use the rest of the app.
Camera. Used to photograph your fridge for the Leftovers flow, to add photos to your own recipes, and optionally to watch for hand gestures while cooking. Gesture detection runs entirely on your device, and those frames are never stored or uploaded. Photos you add to your own recipes stay on your device too. Fridge photos are the one exception, and the next section says exactly what happens to them.
Microphone and speech recognition. Used for short spoken commands in the full-screen cooking mode, such as “next” or “start timer”. Recognition runs on-device. The audio is not stored and not uploaded, and it does not go to Apple’s servers or ours.
Photo library. Requested only when you save an image or video that Plantry has made, such as a meal plan you want to share. Plantry writes to your library and does not read it.
When you photograph your fridge in the Leftovers flow, that photo has to leave your device to be read. This is the whole path it takes.
Plantry shrinks the photo, sends it to our own server at scan.plantry.app, and that server passes it to Claude, an AI model made by Anthropic, which reads it and returns a list of ingredient names. Those names come back to your device, and the photo has done its job.
We do not keep the photo. It is not stored on our server, it does not go into your Plantry library unless you add it to a recipe yourself, and it is not used to train any model. What is kept is the list of ingredient names, on your device, in the Leftovers list that you can edit or clear whenever you like.
The request also carries your App Store receipt, because recognising ingredients is a Premium feature and the server has to check that before it does the work. The receipt says whether a subscription is active and nothing else about you.
When you save a recipe from a website, Plantry fetches that page so it can read the recipe out of it. The site you are saving from sees a request, as it would from any browser.
Saving a cooking Reel or a TikTok goes through our own server at media.plantry.app, which fetches the post and passes back the video and its caption. We send that server the link you shared and nothing about you. The finished recipe is stored on your device.
Plantry Premium is sold through Apple’s In-App Purchase. Apple handles the payment and tells the app whether a subscription is active. We never see or store your card details, your billing address or your Apple Account. Refunds are Apple’s to issue, at reportaproblem.apple.com.
If you write to us, we keep your message and your address so we can reply and so we can follow up if the same problem comes back. We do not add you to a mailing list from a support email, and we do not pass your address to anyone.
The complete list of third parties: Apple, for the App Store, payments and iCloud; TelemetryDeck, for the anonymous statistics above; Anthropic, whose Claude model reads a fridge photo when you use Leftovers; and the websites and social platforms you choose to save a recipe from. There are no advertising networks, no data brokers and no social tracking pixels.
We do not sell, rent or trade personal information, and we never have.
Plantry is not aimed at children under 13, and we do not knowingly collect information from them.
Under the GDPR you may ask what we hold about you, ask for a copy, ask us to correct or erase it, and complain to your data protection authority. In practice the answer is usually short, because almost everything Plantry knows about you never leaves your device. Email hello@filibaba.com and we will answer.
The data controller is Filibaba AB, Sweden.
When it changes we will update this page and the date below. The company-wide terms of service that cover Plantry alongside our other apps are at filibaba.com.
Last updated 16 September 2026.
Questions about any of this go to hello@filibaba.com.