Privacy Policy

Last updated: September 26, 2026

This policy covers Fennli (https://fennli.ai): the Fennli iOS app, the Fennli web app, and this website (together, the “Service”). It explains what we collect, which services receive it and why, and the choices you have.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

The short version

• Fennli’s answers are written by OpenAI’s models. To answer you, Fennli sends them your messages and the kitchen details they need. If OpenAI is unavailable, the request goes to Microsoft’s Azure OpenAI instead.
• In the iOS app, nothing goes to OpenAI or Microsoft until you allow it, and you can switch it off anytime in You → AI data sharing.
• We don’t sell your data. Every service that receives it is listed below, with what it receives.
• You can delete your account in the app, and your data goes with it.

Information we collect

Account data

When you sign up, we collect your email address and your name, plus either a password or the Apple or Google account you sign in with.

Conversations

We store the messages you exchange with Fennli, including the links you share and the photos you send, such as pictures of recipes or ingredients. Fennli uses this history to keep its help in context.

Recipes, pantry, lists and reminders

We store the recipes you save, the notes, changes and reflections you add to them, your pantry, your shopping lists, and the reminders you set.

What Fennli remembers about how you cook

From your conversations, Fennli builds a cooking profile, such as the dishes you make and the techniques you’re working on, and keeps the memories you pin. You can review them in the app.

Dietary preferences and restrictions

We collect the dietary preferences, food allergies, intolerances and other restrictions you share with Fennli. This information may be considered health-related data under certain privacy laws (see “Dietary and health-related data” below). We use it only to personalize your cooking help and to keep suggestions within your dietary needs.

Usage and device data

We record how the Service is used: which screens and pages you open, which features you use, and your device type, operating system, app version and IP address. We use this to understand how the Service is used and to improve it. We also collect crash and error reports, which help us find and fix problems.

Cookies

This website and the web app use cookies and similar technologies.

Analytics (PostHog): we use PostHog for product analytics. On this website and in the web app, PostHog records page views and the actions you take, such as button clicks, along with your device type. The data goes to PostHog’s EU servers (eu.i.posthog.com). PostHog cookies, prefixed with ph_, are set only if you accept analytics cookies in our consent banner. If you decline, no PostHog cookies are set, and analytics are still recorded for each page view without anything that lasts past your visit. Your choice is kept in a cookie_consent cookie for six months.

In the web app, analytics are linked to your account only if you accept. Separately, our servers record a few account events in PostHog, such as signing up, saving a recipe or changing plan, together with your email address. These are linked to your account whatever you choose in the banner, and they never include your messages or recipe text.

The iOS app doesn’t use cookies. It records screens and events in PostHog, linked to your account and email address.

Signing in to the web app also sets cookies from Clerk, our sign-in provider. The web app needs them to keep you signed in.

You can review PostHog’s Privacy Policy, and you can manage or disable cookies in your browser settings.

How we use your information

We use the information we collect to:

• Provide, maintain and improve the Service, including writing Fennli’s answers with AI models.
• Personalize your help based on your preferences, dietary needs, pantry and cooking history.
• Process payments, handled by Creem on the web and by Apple in the iOS app.
• Send you emails about your account, changes to the Service and, with your consent, occasional product updates.
• Analyze usage to improve the Service.
• Detect, prevent and fix technical issues, abuse and fraud.

AI data processing

Fennli’s answers are written by OpenAI’s models. If OpenAI is unavailable, the request goes to the same models on Microsoft’s Azure OpenAI Service instead. This is what Fennli sends them:

• Every chat message: your messages, the photos you attach, the links you share and what Fennli reads from them, your first name, and the kitchen details you’ve given Fennli: allergies, intolerances, diet, household, measurement system, and what Fennli remembers about how you cook. When the conversation needs them, Fennli also sends your pantry and your saved recipes.
• Recipes: the text of each recipe you save or edit, meaning its name, ingredients, steps and notes, so Fennli can search your recipes by meaning. When you search your recipes, the words you search for.
• Reminders: when a reminder is due, Fennli has the model write it, using your kitchen details.
• Memory: Fennli goes back over past conversations to update what it remembers about how you cook and to make those conversations searchable.

Fennli doesn’t send your email address, your password or your payment details to OpenAI or Microsoft.

Under their terms for business customers, neither OpenAI nor Microsoft uses this data to train their models. Each processes it under its own privacy policy and data processing terms:

• OpenAI Privacy Policy
• Microsoft Privacy Statement

Your choice in the iOS app

The iOS app asks before it sends anything. The first time you send a message, tap a suggested reply or tap “Try again”, Fennli asks whether to send your messages to OpenAI. Nothing is sent until you tap Allow, and Fennli keeps asking until you do.

To switch it off, go to You → AI data sharing and turn off “Send messages to OpenAI”. You can turn it back on the same way. While it’s off:

• Chat asks again before your next message, and nothing is sent unless you allow it.
• Recipe search matches recipe names and where each recipe came from, not ingredients or steps.
• Reminders still arrive, in plain words, without AI-written text.
• Fennli stops going over your conversations to update what it remembers.

Switching it off doesn’t delete anything. Your chat history, what Fennli remembers and the search entries already built for your recipes stay in your account until you delete them or your account.

In the web app

The web app doesn’t ask separately. Sending a message in the web app shares your data with OpenAI as described above. If you’ve switched AI data sharing off in the iOS app, it’s off for your account everywhere, and the web app won’t send your messages until you turn it back on in the iOS app.

Dietary and health-related data

Dietary preferences, food allergies and intolerances may be considered health-related or “special category” data under certain privacy laws, including the EU General Data Protection Regulation (GDPR).

We process this data based on your explicit consent, which you give when you choose to share dietary restrictions with Fennli. You can withdraw it at any time by removing your dietary information in the app or by contacting us at [email protected].

We use this data only to personalize your cooking help. We don’t share it with third parties except the AI providers, tracing and error monitoring services described in this policy, as needed to write Fennli’s answers and keep the Service working.

Who receives your data

We don’t sell, trade or rent your personal data. These are the services that receive it, and only for the purpose listed:

What Sentry receives. From our servers, Sentry receives error reports and performance data, with your account ID and IP address. They don’t include chat messages or model replies. Both can include request URLs, which can carry recipe search terms and the addresses of links you share. Error reports from other parts of the Service can include the data being processed when the error happened, such as recipe text. From the iOS app, Sentry receives crash and error reports with your account ID, email address, first name and IP address, and a recording of the screen in the moments before an error, with all text and images masked. From the web app, it receives error reports and performance data with your account ID, email address and first name, and masked screen recordings from before an error and from a sample of visits. It also receives any feedback you send us from either app, with a screenshot if you add one.

Each of these services provides the same or equal protection of your data as this policy sets out.

We may also share data if required by law, to protect our rights, or to prevent fraud or abuse.

If we add a service that processes your personal data, we will update this policy first.

Data security

We take reasonable steps to protect your data from unauthorized access, disclosure or misuse, including encryption in transit (HTTPS/TLS), access controls on our database and infrastructure, and secure sign-in.

No method of transmission over the internet or of electronic storage is completely secure, so we cannot guarantee absolute security.

Card payments on the web go through Creem and its payment processor, Stripe, which complies with the Payment Card Industry Data Security Standard (PCI DSS). Card details are entered directly into Stripe’s hosted checkout and never touch our servers. In the iOS app, Apple processes payments.

Data retention

• Your account and everything in it, including conversations, photos, recipes, pantry, lists, reminders, preferences and what Fennli remembers: kept while your account is active, and deleted when you delete your account.
• Analytics in PostHog: kept for up to 3 years. Your PostHog profile is deleted 48 hours after you delete your account.
• Error reports in Sentry: kept for up to 90 days.

Deleting your data

To delete your account, go to You → Account → Delete account in the iOS app, or to Account → Delete account in the web app. When you delete your account:

• Your account, conversations, photos, saved recipes, notes, pantry, shopping lists, reminders, preferences and what Fennli remembers are deleted.
• An active web subscription is cancelled. An App Store subscription isn’t, because only Apple can cancel it: cancel it in your Apple account’s subscription settings.
• Your email address stays on our newsletter list if you subscribed to it separately, until you unsubscribe.

Anything left in our backups is gone within 30 days, except where the law requires us to keep it. Deleting your account doesn’t reach copies already held by the services listed above, such as OpenAI, Microsoft, LangSmith and Sentry. Those expire on each service’s own schedule, or you can contact the service directly.

You can also ask us to delete your data by writing to [email protected].

Your rights

You can update your details or delete your account in the app. You can also ask to access, correct or delete your personal data at any time by writing to [email protected].

You can opt out of marketing emails with the “Unsubscribe” link in any of them.

GDPR rights (EEA residents)

If you are in the European Economic Area (EEA), you have the following rights under the GDPR:

• Right to access your personal data.
• Right to correct inaccurate data.
• Right to erasure (the “right to be forgotten”).
• Right to restrict processing.
• Right to data portability.
• Right to object to processing.
• Right to withdraw consent, for sharing with AI providers from the iOS app, for dietary and health-related data, and for marketing emails.
• Right to lodge a complaint with your local data protection authority.

Our legal bases for processing your data are contract performance (providing the Service), consent (sharing with AI providers from the iOS app, dietary and health-related data, and marketing emails), and legitimate interest (analytics, security and improving the Service).

CCPA rights (California residents)

If you are a California resident, you have the right to:

• Know what personal data we collect and how it is used.
• Ask us to delete your personal data.
• Opt out of the sale of personal data. We don’t sell personal data.
• Not be discriminated against for exercising your rights.

To exercise any of these rights, contact us at [email protected].

International data transfers

Your information may be transferred to and processed in countries outside your own, including the United States. OpenAI and Microsoft may process data in the United States and other countries. We work with services that offer GDPR-compliant data processing terms for these transfers, and we use EU servers where a service offers them, as with PostHog and LangSmith.

Children’s privacy

The Service is only for people 18 and older. We do not knowingly collect personal data from anyone under 18. If we learn that a minor has given us personal data, we will delete it promptly. If you believe a child under 18 has given us personal information, contact us at [email protected].

Third-party links

The Service may link to websites and services we don’t run, such as recipe sources, cooking resources and grocery delivery services. We are not responsible for their privacy practices, so review their privacy policies before giving them your personal data.

Updates to this Privacy Policy

We may update this policy from time to time. We will tell you about material changes by email or in the Service. The “Last updated” date at the top of this page shows when it last changed.

If you keep using the Service after a change takes effect, you accept the updated policy. If you don’t agree with it, stop using the Service and delete your account.

Dispute resolution

Any disputes about data privacy or this Privacy Policy will be resolved through the process described in our Terms and Conditions.

Contact us

If you have any questions about this Privacy Policy, contact us at [email protected].