Grimoire (“the app”, “we”) is a cookbook that fills itself when you share a link. This policy describes the data the app handles, where it lives, and what can — or cannot — leave your phone.
Guiding principle: local-first, private by default. Your library, your photos, your notes and your history stay on your device. Grimoire has no server that stores your recipes, requires no account, and embeds no advertising, analytics or crash-reporting tool.
In one sentence: as of today, Pixware Studio receives, stores and sees no data from Grimoire. The only network activity is what you trigger yourself: downloading the page behind a link you share, and — if you enable it — sending a text or a photo to the AI provider you configured with your own key.
1. What works without an account or a network
- The library (recipes, ingredients, steps, photos, notes, tags, books, cooking notes, trash) is stored in a SQLite database on the device.
- Search, editing, cook mode, unit conversion, nutrition estimates (the ANSES CIQUAL table ships inside the app) and export all work fully offline.
- Settings (language, display preferences, AI options) are stored locally.
In this mode, we collect nothing, because no data reaches us.
2. Importing a link
When you share a link to Grimoire — an Instagram reel, a blog post, a recipe-site page — your phone downloads the page itself, exactly as a browser would, then extracts the recipe on the device.
- The request goes from your device to the source site. It does not pass through our servers. The source site sees your IP address, as for any visit; its own privacy policy applies to that visit.
- The link, the fetched content (text, structured data) and the cover photo are kept locally. That is what makes “see the original” available at any time and lets an improved parser re-analyse the recipe later. The cover is cached on the device, because social-network image links expire after a few days.
- Bulk import from an export archive (for example the official export of your Instagram data) is processed entirely offline. If you choose to retry a post whose archive lacked a caption, the fetch happens online, from your phone, as above.
3. Sharing from other apps
Grimoire registers as an Android share target for text, links, images and archives. What you share is processed locally and only kept if it results in a recipe — or an entry in the import log (§8).
4. Photos and camera
- You can illustrate a recipe with your own photos (gallery or camera). The corresponding permissions are requested only when you use the feature. Those photos stay on the device.
- Photographing a written recipe to turn it into a card requires AI assistance (§5). In that case, and only if you have enabled that assistance, the photo is sent to the provider you chose. With AI assistance off, nothing leaves.
5. Optional AI assistance — with your own key
The vast majority of imports is handled by a deterministic extractor, on the phone, with no artificial intelligence. For the cases where it fails (empty caption, recipe present only in the video) and for a few assistance features (complete an import, improve a card, blend two recipes, read a photo), Grimoire offers AI assistance that is off by default.
- It works with your own API key, at a provider of your choice among those supported (currently Anthropic and Z.AI). The key is stored in the system's secure storage (Android Keystore) and is never transmitted to Pixware Studio.
- What is sent to the provider, only when you trigger the action: the text to analyse (caption, title, ingredients and steps of the recipe concerned) or the photo you submit. Never your whole library, your settings or your identity.
- These calls go directly from your phone to the provider. Pixware Studio is not an intermediary and does not see these exchanges. Processing is governed by the privacy policy and terms of the provider you chose.
- A weekly quota, counted on the device, and the option “Warn me before each expense” (on by default) show the measured cost and what remains before anything is sent.
- AI assistance never rewrites a recipe's quantities.
A hosted AI tier run by Pixware Studio, usable without a personal key, is under consideration. If offered, it will be optional, precisely described in this policy before activation (data transmitted, provider, retention), and the “last updated” date at the top of this page will change.
6. Timers and notifications
In cook mode, timers schedule local notifications so they ring even when the screen is locked. They are created on the device: no push token, no server, no network activity. The notification permission is requested when you start your first timer — never on first launch.
7. Export and sharing
You can export your library (versioned ZIP archive, printable web page, .paprikarecipes file, schema.org JSON-LD) or share a recipe through your device's share sheet. The destination of those files is entirely your choice and under your control. Restoring an export works offline and without an account.
8. Import diagnostics
When a link could not become a recipe, Grimoire records it in an import log with the reason, so you can retry. This log is local, viewable by you and never transmitted. We receive no telemetry, anonymous or otherwise.
9. What Grimoire does not do
- No advertising, no ad SDK.
- No analytics, no tracking, no crash reports sent.
- No mandatory account; no cloud sync is active today.
- No selling, renting or sharing of data with third parties.
10. Your rights (GDPR)
- Local data: you control it directly. Deleting a recipe, emptying the trash, clearing the app's data or uninstalling it removes the corresponding information from your device.
- Data sent to an AI provider (if you enabled that option): it is processed under that provider's responsibility, under the contract between you and them. Exercise your rights directly with them.
- Since Pixware Studio holds no data about you originating from the app, an access or erasure request addressed to us would, as of today, have nothing to return. We nevertheless answer any question at the address below.
11. Children
Grimoire does not knowingly collect personal data from children. The app contains no advertising and no social features.
12. Planned developments
Optional backup and multi-device sync features are being considered. If offered, they will remain optional and will be described here before activation, listing the data involved and the processors concerned.
13. Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected by an updated date at the top of the page. Continued use after an update constitutes acceptance of the revised policy.
14. Contact and data controller
For any privacy question or to exercise your rights:
Email: privacy@pixware.app
Data controller: Pixware Studio (sole proprietorship, France). The publisher's full identity and contact details are in the legal notice (in French).
Grimoire contains no advertising and no tracking. Its imports are unlimited, free, and work offline by design.