Repas

Privacy policy

Last updated 12 October 2026

Repas is a cooking app: keep the recipes and meals you love, plan your week, see what friends are cooking, and eat the way you need to. This page says, in plain words, what Repas keeps about you, who can see it, who else touches it, and how to download or delete all of it. There are no ads in Repas, your data is never sold, and there are no third-party trackers or analytics services: what Repas measures about how the app is used stays in Repas's own database (section 1). Repas is run by an independent developer in France, who is responsible for your data (the "controller"); see Contact.

1. What Repas keeps

Your account

• Your email address, used to send you a sign-in code or link. There is no password. You can also try Repas without an email: a trial account is created with no email at all.
• If you sign in with Google: your email address and name from your Google account, and Google's id for you, so the same Google account opens the same Repas account. Nothing else from Google, and Repas can't read your Gmail, contacts or anything else there.
• If you add a passkey: its public key, a name for it, and when it was added and last used. The private half stays on your device or in your password manager; your fingerprint or face never leaves your device and Repas never sees it.
• The name you choose to show friends, and a colour for your avatar.

What you put in

• Recipes you add or import, including their ingredients, steps, notes and any photo you take for them.
• Your meal diary: what you ate, when, how many servings, where (if you say), any note or photo, and ratings.
• Saved recipes, collections (including the words you describe them with), cookbooks you share with others, your weekly plans and shopping lists.
• Friends you add, friend requests, and people you've chosen to mute.
• Cooking videos you save from Watch, and the recipes drafted from them.

Health-related information

If you choose to, you can tell Repas about diets and health goals — diet profiles (for yourself or someone you cook for), foods to leave out, allergies, nutrient targets, and doctor's or dietitian's notes. This is sensitive, so it is treated that way: only you can see it. It is never shown to friends, never shared, and never used for anything except sorting and checking recipes for you. All of it is optional, and Repas keeps it only with your explicit agreement: the first time you add any, you're asked to tick a box saying so, and when you did is kept. You can delete any of it at any time in Settings. If you add a profile for someone you cook for, do it with their agreement.

How you use Repas

To make your own suggestions better, Repas records what it suggested to you and what you did with it — for example that a suggestion was shown and then saved or cooked, which ingredient swaps you kept, which cooking videos you watched, saved or skipped, and how you edited a collection's description. These records are yours alone: they are stored with your account, readable only by you, and used for your suggestions. Where Repas learns from many people at once (for example, which ingredient swaps cooks tend to keep), it only ever uses counts across at least five different people, never anything about one person.

How the app is used

To find what's broken, see what's useful and make Repas better, the app records how it is used: the pages you open, what you type into the search box and which results you open, the buttons and links you press (by their label), errors the app runs into, and how quickly pages load. With it come a few facts about the visit: screen size, browser and system, language and time zone, and the site or campaign link that brought you, if any. Nothing you type anywhere else is recorded, and never your diet profiles, notes or allergies.

These records are kept in Repas's own database, not by an analytics company. Once you're signed in they're linked to your account; before that, to a random id your browser keeps (so a first visit and the account made after it can be seen as one path). They are used to improve Repas, including training its own models for suggestions and search, which learn from how everyone uses the app. They are never sold or shared, and nobody else can read them. Nothing is recorded until you say yes: the first time you open Repas in a browser, it asks, and "No" is as easy as "Yes". You can change your answer for that browser at any time: Settings → Your data → Help improve Repas.

Feedback you send

If you use "Send feedback", Repas keeps what you write, the email address you give for a reply (if any), and, so a problem can be understood, the page you were on, your browser and screen size, and any error the page hit. If you report a problem with a recipe, Repas keeps which recipe, what you said was wrong with it, and your note.

2. What it's used for

• To run the app for you: keep your recipes, diary, plans and collections, and show them to you on any device.
• To suggest recipes you're likely to enjoy, and check them against your diets and allergies.
• To show friends what you've chosen to share with them.
• To send you the notifications you've asked for (for example, a friend request), by push.
• To keep the service working and secure.

Repas does not show ads, sell or rent your data, share it with advertisers or data brokers, or use it to train general-purpose AI models. Repas never hands your data to an AI company: the AI features run on your own device (section 6). Repas's own models (suggestions and search) learn from how everyone uses the app, as described in section 1, so they work better for everyone; they stay Repas's, and aren't given to anyone.

The legal basis for each use

• To provide the service you signed up for (your account, what you put in, sharing with friends, your suggestions, the emails and notifications you asked for): it's necessary to run Repas for you.
• Your consent: health information (diets, allergies, notes) and the records of how the app is used. You can withdraw it at any time, as described in section 1; that doesn't affect what was done before.
• Repas's legitimate interest in keeping the service secure and free of abuse: the automatic safety checks, reports, and feedback you send.
• A legal obligation: keeping and reporting content that appears to be illegal (section 3).

3. Who can see what

• Recipes and ratings have a visibility you choose: only you, your friends, or everyone. Recipes you import from a website stay private or friends-only.
• Friends see what you share with friends: recipes, meals and ratings you've marked for them, and cookbooks you keep together. A shared collection can also be opened by anyone you send its link to: they can read its name, who started it and the names of what is in it without an account, and joining lets them add recipes and read what the others add. You can turn the link off at any time.
• Everyone sees ratings you mark public, as part of a recipe's community score, and your display name on them. A recipe you make public can be opened by anyone with its link, whether or not they use Repas, with your display name on it; a shared link's preview (in a chat, say) shows its name, a line about it and its picture. A public rating with a photo you choose to share (“Share what you made”) opens the same way, with your display name, your stars, your words and your photo, once it has passed the safety check. Friends-only and private recipes never open from a link for anyone else.
• Only you see your diet profiles and notes, allergies, collections, plans, saved videos, your settings, and every record of how you use Repas.
• People can find you to add as a friend only if you allow it (Settings → Being found).

Keeping it safe

• Photos are private files. A photo you upload is opened through a link that works for about an hour, and only for people allowed to see what it's attached to.
• Automatic checks. Every photo you upload, and anything you write that others can see (recipes, ratings' notes, collection names, your display name), is checked automatically for sexual, violent, hateful or self-harm content, using AI models run by Cloudflare (see 4). Until a photo has passed, only you can see it. Something flagged is kept private to you, and you'll see why; you can tell us if we got it wrong. Things you shared before these checks began weren't checked when they were shared, and may be checked later.
• Reports. Anyone who can see something of yours can report it. Reports go to the people who run Repas, never to you with the reporter's name. Something several people report is hidden until we've looked at it.
• Illegal content. A photo flagged as sexual is removed from view straight away, including from you; a clearly sexual one also pauses the account while we look into it. Content that appears to be child sexual abuse material is kept, not deleted, and reported to the authorities (in the US, the National Center for Missing & Exploited Children), as the law requires.

4. Services that help run Repas

Repas relies on a few companies to run. They process your data only to provide their service to Repas, under their own security and privacy commitments:

• Supabase — the database, sign-in and photo storage. Your account and everything you put in is stored here, protected so that each person can only read what they're allowed to.
• Cloudflare — hosts the website and app, and delivers them to your browser. Its Workers AI service also runs the safety checks on photos you upload and words you share with others (see Keeping it safe): only the photo or the words are sent, never your name or account, and Cloudflare doesn't store them or use them to train any model, under Cloudflare's Workers AI data terms.
• Google — only if you choose "Continue with Google". Google's sign-in button is loaded on the sign-in screen (and nowhere else in the app), which lets Google know you opened it; if you sign in that way, Google tells Repas who you are, under Google's privacy policy.
• Resend — sends the sign-in emails with your code, and the invitation you ask Repas to send when you invite someone to plan and shop with you (their address is used only to send it, and isn't kept). Notifications are sent by push, not email; the unsubscribe link in any older Repas email still works.
• Your browser's push service (Google, Apple or Mozilla) — delivers push notifications if you turn them on. The notification Repas sends carries no personal content; it only says there's something new.

When you paste a link to import a recipe, Repas fetches that page for you and keeps the recipe, with a link back to the site. Recipe photos from websites are shown from the site they came from, so that site can see that the picture was loaded.

Data outside the EU

Supabase, Cloudflare, Resend and Google are based in the United States, so your data can be processed there. Each is certified under the EU–US Data Privacy Framework or bound by the European Commission's standard contractual clauses, which require them to protect it to EU standards.

5. Services you choose to use

Cooking videos (Watch)

Watch plays public cooking videos from TikTok, YouTube and Instagram through each platform's own video player. When a video plays, your browser connects to that platform, which may set its own cookies and follows its own privacy policy (YouTube's player is its privacy-enhanced version). Repas records which videos you watched, saved or skipped, and the channels you follow — for your own feed only, as described above. If you tick "Suggest this video to others", the link is kept so the video can be considered for everyone's feed; your name is not attached to it.

6. What stays on your device

• The AI features run entirely on your device: reading a photo of a recipe (printed or handwritten), naming a dish from its photo, listening to a cooking video you upload, and writing a recipe you describe. The photo, the video and your words aren't sent anywhere for that. The models they use are downloaded once, from this site or from the Hugging Face model hub, and kept in your browser. If you connected an AI provider's key in an earlier version, it has been deleted from your device.
• Your sign-in, so you don't have to sign in each time you open Repas; it stays until you sign out. This device also remembers the email address you last signed in with, and how, so it can say "welcome back" — tap "Not you?" on the sign-in screen to forget it.
• A few conveniences (for example, the visibility you last picked) are remembered in your browser. The app keeps a copy of itself in your browser so it opens quickly and works offline.

• Whether you said yes or no to the usage records described in section 1 and, only if you said yes, a random id for this browser, used to connect those records before and after you sign in.

Repas uses no advertising or tracking cookies, and no cookies at all for its usage records.

7. How long it's kept

Your data is kept for as long as you have an account, so it's there when you come back. When you delete your account, everything in it is deleted straight away — see below. Records of how the app was used are kept while they help improve Repas and are deleted with your account; feedback and reports you sent are kept without the link to you. The one exception to deleting is content removed as possibly illegal (see Keeping it safe): it's kept, out of everyone's sight, for as long as the law requires (at least a year), and then deleted. Copies can remain in the hosting provider's routine backups for a short time (up to 30 days) before those are overwritten.

8. Your data, your choices

You can, at any time, without asking anyone:

• See and correct what you've put in — everything is editable in the app.
• Download a copy of all of it — Settings → Your data → Download my data, as a file you can keep or take elsewhere.
• Delete your account — Settings → Your data → Delete my account. This deletes your account and everything in it: recipes, meals and ratings, plans, collections, diet profiles and notes, photos, friendships, saved videos and every usage record. It can't be undone. (Only content removed as possibly illegal is kept, as section 7 explains.)
• Choose what's shared — change any recipe's or rating's visibility, turn notifications off, and stop people finding you, in Settings.
• Make Repas forget what it learned — Settings → What Repas has learned lets you remove anything it has learned about your taste.

Depending on where you live (for example in the EU, UK or California), you have legal rights over your data, including to access, correct, delete, and receive a copy of it, and to object to how it's used. The tools above let you do this directly; for anything else, see Contact. You also have the right to complain to a data protection authority: in France, the CNIL (cnil.fr), or the authority where you live.

9. Security

Everything travels over encrypted connections (HTTPS). In the database, every table is protected so that each person can only read and change what they're allowed to — your private data can't be read by other users. Photos are private files, opened through short-lived links only by people allowed to see them. Sign-in uses one-time codes rather than passwords. No system is perfectly secure, but Repas is built to keep your data yours.

10. Children

Repas is for people 16 and older, and you confirm you are when you create an account. If you believe a child has one, email the address under Contact and the account will be deleted.

11. Changes to this policy

If this policy changes, the new version will be posted here with a new date. If a change affects how your existing data is used, you'll be told in the app before it applies.

12. Contact

Repas is run by an independent developer in France, a private individual, who is the controller of your data. The legal notice has the host's details. Everything this policy says you can do with your data — see it, correct it, download it, delete it — you can do yourself, straight away, in the app under Settings → Your data.

For any other question or request about your privacy or your data, email repas.pag@gmail.com.