The short version. CHOFR LLC does not use your app data for advertising or tracking, does not sell personal information, and does not run a separate behavioral-analytics service for Bubble & Squeak.
The app does send limited information to Apple and to certain third-party services when needed for features such as iCloud sharing, Apple Reminders, product lookups, community price contributions, recipe imports, and optional external AI.
1. Scope and who we are
This policy applies to the Bubble & Squeak app and the website at getbubbleandsqueak.app. The app and website are provided by CHOFR LLC ("CHOFR," "we," "us," or "our").
The website does not use advertising cookies or third-party analytics. Standard security and delivery logs may be processed briefly by our hosting provider, Cloudflare, to deliver the site and protect it from abuse.
2. Data on your device and in Apple services
Kitchen and household data
Recipes, leftovers, pantry items, shopping information, household names, photos, preferences, and related app content are stored on your device. If you enable household or device syncing, this content is stored in your Apple iCloud account using CloudKit and may be shared with the household members you invite.
Apple Reminders
If you grant Reminders access, Bubble & Squeak reads and updates the Reminders list you choose for shopping. That information is managed through Apple Reminders and your Apple account.
Location, camera, photos, and notifications
With your permission, the app may use an approximate device location to find nearby stores through Apple services, use the camera or selected photos for scanning and food workflows, and schedule notifications. CHOFR does not receive this permission data through a separate server.
Optional voice conversations in version 2.3
Coming in version 2.3, Kitchen Assistant can use the microphone with your permission while the conversation is open. Apple speech technologies transcribe speech on your device, and the app does not save microphone audio. Conversation text is kept in the app’s local history so you can return to it or delete it. If you choose an external AI provider, the transcribed text and relevant kitchen context are sent to that provider in the same way as a typed request.
On-device diagnostics
The app keeps diagnostic events locally so you can troubleshoot household and sync behavior. CHOFR does not automatically receive these logs. They leave your device only if you deliberately export and share them.
Pro purchases and free samples in version 2.3
Apple handles Pro purchases and payment information through the App Store. The app uses StoreKit to verify transactions, restore purchases, recognize eligible Family Sharing access, and check whether an earlier App Store acquisition qualifies for existing-customer access. Verification happens on your device; CHOFR does not operate a separate purchase-validation server or receive your payment-card details.
The app stores access status and counts of successful sample recipe imports and scans locally on your device so it can show your remaining allowance and unlock purchased features. Sample counts are not synced through iCloud or transferred by Restore Purchases. These records are used for access management, not advertising or behavioral analytics. Apple retains App Store purchase records under its own policies.
Apple processes data under Apple's privacy policy. Apple-provided app distribution and platform diagnostics are governed by your Apple settings and agreements.
3. Third-party and community services
Product and price information
Barcode lookups may send a barcode to product-information services such as Open Food Facts or UPCitemdb. Public price searches may query Open Prices or public government data sources.
When you record a product price, Bubble & Squeak may automatically contribute the product barcode or product name, price, currency, and date to the Open Prices community database. When you scan nutrition information for a barcoded product, the app may contribute the barcode, product name, and nutrition facts to Open Food Facts. These community contributions are made under a shared Bubble & Squeak service account, without your name, email address, advertising identifier, or Bubble & Squeak account identifier. The receiving service may retain and publish the contributed facts and will receive ordinary network information such as an IP address.
Learn more in the Open Food Facts privacy policy and at Open Prices.
Optional external AI providers
Supported Apple Intelligence features run through Apple technologies when available. If you add your own API key for Google Gemini, OpenAI, or Anthropic Claude and choose an AI-assisted feature, the app sends the prompt and relevant ingredients, leftovers, preferences, or recipe details to the provider you selected so it can return a result. Your API key is stored in the device Keychain and is sent only to that provider for authentication.
CHOFR does not receive the API key or the provider response through a separate server. The provider may retain or use submitted content according to your account settings and its terms. Review the privacy policy for Google, OpenAI, or Anthropic before connecting it.
Recipe links and other websites
When you import a recipe link, the app requests that page to find structured recipe facts. The website operator receives a normal network request and may process it under its own privacy policy. Bubble & Squeak keeps the source link with the imported facts so you can review their origin.
4. How information is used and shared
Information is used only to provide the feature you request, keep your kitchen data in sync, maintain security and reliability, and support you when you deliberately send a support request or diagnostic export.
CHOFR does not sell personal information, does not share app data for cross-app tracking, and does not use app data for third-party advertising. Data is shared only with people you invite to an iCloud household, with services necessary for features you use, when you deliberately export or share it, or when required by law.
5. Your choices and controls
- Manage camera, photo, microphone, location, Reminders, and notification permissions in Apple Settings.
- Disconnect an external AI provider and remove its API key from Bubble & Squeak settings.
- Remove app content within Bubble & Squeak, manage shared household access, or delete the app and its local data.
- Manage iCloud and Reminders data through the corresponding Apple services.
- Contact the relevant third-party provider about content it retains, including facts contributed to an Open Food Facts community database.
CHOFR does not operate a separate Bubble & Squeak user-account database from which it can retrieve or delete your iCloud content.
6. Retention and security
Content on your device, in iCloud, or in Reminders remains until you or the applicable platform deletes it under your settings. Third-party services retain information under their own policies. Support information you choose to send may be kept as reasonably necessary to resolve the request, maintain business records, or meet legal obligations.
We use platform security features such as Apple Keychain, app sandboxing, permission controls, and encrypted network connections. No security method can guarantee absolute protection.
7. Children, international use, and changes
Bubble & Squeak is a general-audience kitchen app and is not directed to children under 13. We do not knowingly operate a service that collects personal information from children.
Apple and third-party providers may process information in countries other than yours. Their policies describe the safeguards they apply. We may update this policy when the app or legal requirements change. The effective date above will be updated when changes are material.
8. Contact
For privacy questions or requests, contact CHOFR LLC at support@chofr.io or visit Bubble & Squeak Support.