1. In short
Grimoire is a private recipe book on your phone. There is no account, no ads, no usage statistics, and no crash report sent. Your recipes, notes and photos stay on your device.
Three features, all optional and started by you, send something off your phone: importing a link, syncing with your Google Drive and AI assistance. They are described one by one in section 5.
2. Who is responsible
Pixware Studio (sole proprietorship, France). Full identity and address of the publisher in the legal notice (in French, as French law requires). Contact for any question about your data: privacy@pixware.app.
We do not receive, store or see any of your recipes.
3. What stays on your phone
In the app's private storage, which other apps cannot read:
- your recipes, their source (address, author, site name), the original text captured at import, your notes, your stars, your tags, your books;
- cover photos and the photos you take or choose;
- your settings;
- your API key, if you enter one for AI assistance, in the phone's secure keystore. It is never included in an export or a backup.
Uninstalling the app, or clearing its data in Android's settings, deletes all of it. Android's automatic backup does not carry your library.
4. What we do not do
We use no analytics, advertising, audience-measurement or crash-reporting service. We sell nothing, profile no one, cross-reference nothing. The app does not ask for your location, your contacts or your microphone.
One clarification: if you have allowed it in Android's settings ("Usage & diagnostics"), Google may receive crash data from your phone, as for any app installed from Google Play. It does not go through our code; we only see aggregated statistics in the Play Console.
5. What leaves your phone — feature by feature
5.1 Importing a link
When you share a link to Grimoire or paste it, your phone downloads the page (or caption) from the site concerned, as a browser would. That site sees your IP address, as in any ordinary visit. We are not an intermediary: none of these requests goes through a server of ours. Cover photos are downloaded the same way, then kept on your phone.
Grimoire only downloads links you gave it. It crawls nothing, follows no other link found in a page, and never comes back on its own.
5.2 Syncing with Google Drive (optional, off until you connect)
If you connect your Google account, Grimoire asks for a single permission, drive.appdata: a private app folder in your Drive that we cannot read, and that is visible neither in your file list nor to other apps. It holds your recipes, their original capture, your notes, tags, books and the trash state, so you can find them on your other devices. Photos you took yourself are not uploaded.
Your data stays in your Google account, under Google's terms. At any time you can tap "Erase the copy on Drive": Grimoire deletes everything it keeps there and withdraws its access. You can also revoke access from your Google account (https://myaccount.google.com/permissions).
5.3 AI assistance (optional, off by default)
It only works with your own API key, which you enter in settings. The provider is Z.AI, whose service is operated by JINGSHENG HENGXING TECHNOLOGY PTE. LTD., in Singapore (https://docs.z.ai/legal-agreement/privacy-policy). We have no access to these exchanges and receive no copy.
What Grimoire sends to Z.AI, only for the recipe concerned and only when assistance is turned on, depending on the action:
| Action | What is sent |
|---|---|
| Complete a recipe | the original text captured at import (twelve thousand characters at most), what has already been found, the app's language |
| Improve a recipe | its title, servings, total time, ingredients, steps, the language |
| Mix two recipes | the title, servings, ingredients and steps of both recipes, and the instruction you typed |
| Read a photo | the cropped photo you took or chose |
The original text may contain what the post's author wrote, including a name or a handle. Never sent: your identity, a device identifier, your e-mail address, your personal notes, your stars. The provider does see your IP address and your key, like any service called from a phone.
Before the first automatic spend, the app warns you and lets you turn it off. Each manual action may ask you to confirm. AI results are suggestions: depending on the action, they complete a recipe, replace its title and steps (never the quantities) or create a new recipe, and they may contain mistakes. Check them before cooking.
5.4 Sharing a recipe or a book
"Send" produces a file (or a web page) and opens Android's share menu: you choose the app and the recipient. The file contains the recipe and your notes; it does not contain your stars, how many times you cooked it, or the tags you wrote yourself.
5.5 Backup and export
"Export" and backup to a folder produce a file you put wherever you want (your Drive, another service, your computer). We have no access to it.
6. Android permissions, and why
| Permission | What for |
|---|---|
| Internet | importing a link, syncing with Drive, calling the AI if you turned it on |
| Camera | photographing a written recipe (read by the AI, if on); hand gesture in cook mode, only if you turn it on |
| Notifications | telling you when a timer rings, with the screen locked; asked at your first timer |
| Vibration, keeping the screen on | timers, cook mode |
| Device restart | rescheduling timers after a restart |
The camera in cook mode. The hand gesture only opens the front camera while cook mode is on screen with its switch on. Frames stay in memory for the length of one detection and are then discarded: never saved, never shown, never sent. Only the hand's position is used.
The clipboard. On opening, Grimoire may offer to import a link you just copied. It first reads only the description of the copied content, does not read the text of content flagged as sensitive, and downloads nothing until you tap "Import".
An error in the app. If a screen crashes, Grimoire offers to share the technical message through Android's share menu: nothing is sent unless you choose to, and the message does not contain your recipes.
7. How long, and how to erase everything
- On your phone: as long as you keep the app. A deleted recipe stays thirty days in the trash, then is erased.
- On your Drive: until you tap "Erase the copy on Drive".
- At Z.AI: according to its own policy, which we do not control.
8. Your rights
Under the General Data Protection Regulation, you can ask for access, rectification, erasure, restriction, objection and portability. Almost all of it works without us: your data is on your phone, export is free and readable, deletion is a tap. For any request, write to privacy@pixware.app.
You may also complain to a supervisory authority; in France, the CNIL (https://www.cnil.fr/fr/plaintes).
9. Children
Grimoire is meant for adults and knowingly collects no data from a child. [Align with the target audience declared in the Console.]
10. Transfers outside the European Union
There is only one, optional and started by you: sending Z.AI (Singapore) what section 5.3 describes. It only happens if you entered your own key and turned assistance on. If you use Google Drive, Google processes your data under its own terms.
11. Security
Network traffic uses HTTPS. Your API key is in the phone's secure keystore. The app's private storage is not readable by other apps.
12. Changes
If this policy changes materially, the new version will be published at this address and the date above updated. The app sends nothing without your knowledge: a change that widened what leaves your phone would be shown to you in the app.
13. Contact
Pixware Studio — privacy@pixware.app (your data) · contact@pixware.app (anything else) — identity and address in the legal notice.