Recipe Passport: Previous versions
The current Privacy policy and Terms of use describe the current version of the app. Each app version that had its own policy text is listed here, newest first, with the date, what changed compared with the version before, and the full text as it was for that version. Android builds are in testing (Google Play closed testing), follow the current text, and are not listed separately.
: version 1.5.2
Privacy policy only. When the app reads photos of a cookbook page, it now also looks for a QR code on each page, on your phone (ML Kit barcode scanning built into the app on Android, Apple’s on-device Vision framework on iPhone and iPad); what the code says stays on your phone. If the code holds a web link, the app shows the website’s name and offers to import from it, and fetches that page only if you choose it, the same way as a link you pasted; it never opens the link in your browser. On Android, ML Kit’s barcode code sends Google the same diagnostic information already described for text recognition, never the photo or what the code says. The ads section now lists the banner at the top of the review screen of a recipe you have just imported. The note on iOS Keychain items now says that versions after 1.5.0 clear them on the first start after a reinstall. Terms of use unchanged.
Full text: the current Privacy policy and Terms of use.
, later the same day
Privacy policy only. Added, for Android: a coming version will be able to read recipes with the phone’s built-in model (Gemini Nano, through Android’s AICore service and Google’s ML Kit GenAI code) on phones that have it, instead of a downloaded model file. A new paragraph under “What stays on your device” and item 9 under “Network requests” say what will and will not leave the phone: the text and the model’s answer stay on the phone; AICore downloads the model from Google if it is not already there; Google’s ML Kit code sends Google its own diagnostic and usage information when the built-in reader is used. It applies from the Android version that adds the feature, which is not yet released. Until then every Android build uses a downloaded model, and nothing changes for iPhone and iPad. Terms of use unchanged.
Full text as it was: Privacy policy; Terms of use (unchanged since).
: version 1.5.0, iPhone and iPad
The first public release (App Store, 7 November 2026; build 16). Full text as it was for this version: Privacy policy and Terms of use.
Compared with the text published ahead of release on 6 November: on an iPhone or iPad with Apple Intelligence turned on, the app reads recipes with Apple’s built-in on-device model instead of a downloaded model file; what it is given and that nothing is sent are described under “What stays on your device”. “iPhone and iPad” now says which small settings iOS may keep in the Keychain after the app is deleted, that they stay on your device (only the Diagnostics figures go into a report you send), and that the next update clears them on the first start after a reinstall. “Your rights” now states that we follow the Australian Privacy Principles and names the overseas recipients (Google, Cloudflare and Hugging Face, in the United States) for the data the policy already described. The sentences on ad income now read “Google shows the ads and pays us a share of the ad income”. Terms of use: section 2 and section 6 cover Apple’s built-in model; section 4 says photos of cookbook pages you import are for your own private use; section 5 says you are responsible for following the terms of the sites and video services you import from. No new data leaves your phone.
Also added for this version, earlier the same day: “From photos” in the privacy policy. It imports a recipe from photos of cookbook pages, taken with the camera or chosen with the system photo picker; the photos and the text read from them stay on your phone and are never in a report. On Android the text reader is Google’s ML Kit, built into the app; when it reads a photo, ML Kit sends Google its own diagnostic information about the phone and the app (never the photo or the text), listed in item 8 under “Network requests”; nothing is sent if you do not use the feature. On iPhone and iPad the text is read by Apple’s on-device text recognition and nothing is sent. The Android permissions list gains Camera (optional).
First published version, ahead of the app’s release. No public version of the app used this text: it was replaced by the 7 November text before the first public release. Earlier wording shown while the app was in closed testing is not listed.