Effective date: 6 October 2026
This policy explains what information the Shiok Recipe app (“the app”) collects, why, who it is shared with and the choices you have. The app is made by MR IT PTE. LTD. (UEN 202007918N), 6001 Beach Road, #13-10 Golden Mile Tower, Singapore 199589 (“we”, “us”).
The short version
- No sign-up. There are no accounts, so we never ask for your name, email address or phone number.
- Your recipes stay on your phone. Saved recipes, cookbooks, meal plans, shopping lists, your pantry and Log Book are stored on your device, not on our servers.
- When you import a recipe, it is read by Google’s Gemini AI. The link, the post’s text, pictures or video, or the photo you take is sent to Google to turn it into a recipe. The app asks your permission before the first import, and you can change this in Profile.
- We count imports and keep anonymous usage statistics so the free and Pro plans work and so we can improve the app. You can turn usage statistics off in Profile.
- We don’t sell your data, show ads or track you across other companies’ apps or websites.
What we collect and why
| Information | What it is | Why we use it |
|---|---|---|
| Support ID | A random ID that identifies your installation of the app. On Android it is derived from your device’s Android ID in a one-way scrambled form (the Android ID itself is never sent); on iPhone it is a random ID kept in your device’s Keychain. It is shown in Profile. | Counting your monthly imports, knowing whether you have Pro, and finding your details if you contact us for help. |
| Import counts | How many imports this Support ID has made in each month. | Applying the monthly import allowance of your plan. |
| Import log | For each import: when it happened, the type (link, video, dish photo, fridge or pantry scan), the platform (e.g. TikTok), whether it worked and any error, the app version, operating system and country. It does not include the link, recipe text or photos. | Fixing problems and answering support requests. |
| Content you import | The link you share or paste and the post’s public text, pictures or video; photos you take or choose of a dish, recipe, fridge or pantry; the ingredients of a recipe when you ask for nutrition. | Sent to Google’s Gemini AI to read the recipe or estimate nutrition (see below). We do not keep your photos. |
| Usage statistics (optional) | Which screens and features are used, app version, operating system and approximate location (country, region and city worked out from your connection). Linked to a random analytics ID, not to your name. We do not store your IP address. | Understanding how the app is used so we can improve it. You can turn this off in Profile. |
| Purchase status | Whether your Support ID has an active Pro subscription, and its renewal and expiry dates. If we give you Pro for free (for example as a prize), the dates and a short internal note. | Unlocking Pro. |
| Support messages | Your email address and anything you write to us. | Replying to you. |
Things we don’t collect: your name, email address (unless you write to us), phone number, contacts, precise location, health information, advertising ID, or your payment card details.
AI processing (Google Gemini)
The app uses Gemini, an AI service from Google, to turn posts, videos and photos into recipes and to estimate nutrition per serving. When you import something, the app sends it to our server, which passes it to Gemini and returns the recipe to your phone.
- Nothing is sent to Gemini until you import something, and the app asks for your permission before the first import.
- You can withdraw permission at any time in Profile → Read Recipes with Gemini AI. Imports that need the AI then stop working until you allow it again; everything already saved stays.
- Google processes this content under its terms for the paid Gemini API, which state that Google does not use it to train or improve its models.
How links are read
To read a social media post or web page you share, our server fetches the public post from the site it is on (for example TikTok, Instagram, YouTube, Facebook, Pinterest, 小红书 / XiaoHongShu or a recipe website), sometimes through a scraping service we pay for (Apify). Only the link is sent; nothing that identifies you.
When a public post has been turned into a recipe, we may keep that recipe for up to 90 days, filed under the post’s link, so the next person who imports the same post gets it faster. This copy contains the public post’s recipe only, not who imported it.
Purchases
Pro subscriptions are bought through the App Store (Apple) or Google Play (Google). They handle the payment, and we never see your card details. We use RevenueCat to manage subscriptions: it receives your Support ID and the purchase record from Apple or Google, and tells our server whether your Pro plan is active. Cancel or manage your subscription in the App Store or Google Play settings on your phone.
Who we share information with
We share information only with these service providers, and only for the purposes above:
| Provider | What for |
|---|---|
| Google (Gemini API) | Reading recipes from links, videos and photos; estimating nutrition |
| Cloudflare | Hosting our server and its database |
| Apify | Fetching public social media posts from links you share |
| RevenueCat | Managing Pro subscriptions |
| Apple and Google | App stores and payments |
We don’t sell or rent your information, and we don’t share it for advertising. We may disclose information if the law requires it, or to a buyer if our business is sold (they would have to follow this policy).
Where your information is processed
Our providers run their services in several countries, including the United States. When information leaves Singapore, we rely on the providers’ contractual and security commitments to protect it to a standard comparable to Singapore’s Personal Data Protection Act (PDPA).
How long we keep it
| Information | Kept for |
|---|---|
| Monthly import counts | 13 months |
| Import log | 90 days |
| Usage statistics | 12 months (erased at once if you turn them off) |
| Recipes read from public posts | Up to 90 days |
| Photos you take or choose | Not kept: used to read the recipe, then discarded |
| Purchase records | As long as RevenueCat, Apple and Google keep them for the subscription |
| Support emails | As long as needed to help you, and up to 2 years |
Your choices and rights
- Usage statistics: turn them off in Profile. This also erases the statistics already stored for your phone.
- AI permission: change it in Profile → Read Recipes with Gemini AI.
- Your recipes and other data on your phone: delete them in the app, use Profile → Reset App, or uninstall the app.
- Access, correction or deletion: email us with your Support ID (Profile → Support ID) and tell us what you would like. We will reply within 30 days. Without a Support ID we can’t tell which records are yours, because nothing is linked to your name.
Security
Information is sent over encrypted connections (HTTPS). Our server and database are hosted by Cloudflare, and access to the admin tools is limited to us.
Children
The app is a general-audience cooking app and is not directed at children under 13. We don’t knowingly collect information from children. If you believe a child has sent us information, contact us and we will delete it.
Changes to this policy
If we change this policy, we will update it here and change the effective date. If a change is significant, we will also tell you in the app.
Contact us
For any privacy question or request, contact our Data Protection Officer:
- Email: support@mrit.com.sg
- Post: MR IT PTE. LTD., 6001 Beach Road, #13-10 Golden Mile Tower, Singapore 199589