The short version. CHOFR LLC does not use your app data for advertising or tracking, does not sell personal information, and does not run a separate behavioral-analytics service for Bubble & Squeak.
The app does send limited information to Apple and to certain third-party services when needed for features such as iCloud sharing, Apple Reminders, product lookups, community price contributions, recipe imports, and optional external AI.
1. Scope and who we are
This policy applies to the Bubble & Squeak app and the website at getbubbleandsqueak.app. The app and website are provided by CHOFR LLC ("CHOFR," "we," "us," or "our").
The website does not use advertising cookies or third-party analytics. Standard security and delivery logs may be processed briefly by our hosting provider, Cloudflare, to deliver the site and protect it from abuse.
2. Data on your device and in Apple services
Kitchen and household data
Recipes, leftovers, pantry items, shopping information, household names, photos, preferences, and related app content are stored on your device. If you enable household or device syncing, this content is stored in your Apple iCloud account using CloudKit and may be shared with the household members you invite.
Apple Reminders
If you grant Reminders access, Bubble & Squeak reads and updates the Reminders list you choose for shopping. That information is managed through Apple Reminders and your Apple account.
Location, camera, photos, and notifications
With your permission, the app may use an approximate device location to find nearby stores through Apple services, use the camera or selected photos for scanning and food workflows, and schedule notifications. CHOFR does not receive this permission data through a separate server.
On-device diagnostics
The app keeps diagnostic events locally so you can troubleshoot household and sync behavior. CHOFR does not automatically receive these logs. They leave your device only if you deliberately export and share them.
Apple processes data under Apple's privacy policy. Apple-provided app distribution and platform diagnostics are governed by your Apple settings and agreements.
3. Third-party and community services
Product and price information
Barcode lookups may send a barcode to product-information services such as Open Food Facts or UPCitemdb. Public price searches may query Open Prices or public government data sources.
When you record a product price, Bubble & Squeak may automatically contribute the product barcode or product name, price, currency, and date to the Open Prices community database. When you scan nutrition information for a barcoded product, the app may contribute the barcode, product name, and nutrition facts to Open Food Facts. These community contributions are made under a shared Bubble & Squeak service account, without your name, email address, advertising identifier, or Bubble & Squeak account identifier. The receiving service may retain and publish the contributed facts and will receive ordinary network information such as an IP address.
Learn more in the Open Food Facts privacy policy and at Open Prices.
Optional external AI providers
Supported Apple Intelligence features run through Apple technologies when available. If you add your own API key for Google Gemini, OpenAI, or Anthropic Claude and choose an AI-assisted feature, the app sends the prompt and relevant ingredients, leftovers, preferences, or recipe details to the provider you selected so it can return a result. Your API key is stored in the device Keychain and is sent only to that provider for authentication.
CHOFR does not receive the API key or the provider response through a separate server. The provider may retain or use submitted content according to your account settings and its terms. Review the privacy policy for Google, OpenAI, or Anthropic before connecting it.
Recipe links and other websites
When you import a recipe link, the app requests that page to find structured recipe facts. The website operator receives a normal network request and may process it under its own privacy policy. Bubble & Squeak keeps the source link with the imported facts so you can review their origin.
4. How information is used and shared
Information is used only to provide the feature you request, keep your kitchen data in sync, maintain security and reliability, and support you when you deliberately send a support request or diagnostic export.
CHOFR does not sell personal information, does not share app data for cross-app tracking, and does not use app data for third-party advertising. Data is shared only with people you invite to an iCloud household, with services necessary for features you use, when you deliberately export or share it, or when required by law.
5. Your choices and controls
- Manage camera, photo, location, Reminders, and notification permissions in Apple Settings.
- Disconnect an external AI provider and remove its API key from Bubble & Squeak settings.
- Remove app content within Bubble & Squeak, manage shared household access, or delete the app and its local data.
- Manage iCloud and Reminders data through the corresponding Apple services.
- Contact the relevant third-party provider about content it retains, including facts contributed to an Open Food Facts community database.
CHOFR does not operate a separate Bubble & Squeak user-account database from which it can retrieve or delete your iCloud content.
6. Retention and security
Content on your device, in iCloud, or in Reminders remains until you or the applicable platform deletes it under your settings. Third-party services retain information under their own policies. Support information you choose to send may be kept as reasonably necessary to resolve the request, maintain business records, or meet legal obligations.
We use platform security features such as Apple Keychain, app sandboxing, permission controls, and encrypted network connections. No security method can guarantee absolute protection.
7. Children, international use, and changes
Bubble & Squeak is a general-audience kitchen app and is not directed to children under 13. We do not knowingly operate a service that collects personal information from children.
Apple and third-party providers may process information in countries other than yours. Their policies describe the safeguards they apply. We may update this policy when the app or legal requirements change. The effective date above will be updated when changes are material.
8. Contact
For privacy questions or requests, contact CHOFR LLC at support@chofr.io or visit Bubble & Squeak Support.