CookSmart privacy policy
Last updated: 27 September 2026
Who is responsible
KDK Consulting AB, Gothenburg, Sweden, is responsible for the personal data processed to provide CookSmart. Contact info@kdkconsulting.se with privacy questions or requests.
Photos and recipe requests
You choose which photos to submit from your camera or photo library. CookSmart sends those photos to its processing service, hosted on Railway, and to OpenAI to identify ingredients. The ingredient list you approve and recipe instructions are sent to OpenAI to generate recipe suggestions.
We use this information to provide the analysis and recipes you request. Only submit food photos. Avoid images containing people, personal documents or other sensitive information.
Storage and technical information
CookSmart processes submitted photos in server memory and does not save them to a server photo library or database. We disable OpenAI API response storage for both ingredient analysis and recipe generation.
This does not mean that all service-provider records are immediately deleted. OpenAI may retain content in safety and abuse-monitoring logs, normally for up to 30 days, with exceptions under its policy. These logs are separate from API response storage. See OpenAI’s data controls documentation.
Technical information such as IP addresses and request details may be processed to deliver the service, limit excessive requests and investigate failures. Our server error logs do not intentionally include submitted photos or the contents of provider error messages. Hosting providers may maintain their own operational and security logs.
Photos you already have in your device’s photo library remain under your control. The app may also create temporary image files on your device while preparing photos for analysis.
Service providers
Railway provides backend hosting and OpenAI provides AI processing. Processing can take place outside Sweden and the EU/EEA, including in the United States. Their data-handling information is available in the Railway privacy policy and OpenAI privacy policy.
Accounts, advertising and support
The current CookSmart app does not require an account and does not use advertising tracking. We do not sell your personal data.
If you contact support, we use your email address and the information you send to respond and follow up on your request. We retain support correspondence only as long as needed for that purpose or applicable legal obligations. The KDK Consulting website privacy policy also explains website visits and email enquiries.
Your choices and rights
You can stop submitting photos and manage camera and photo permissions in your iPhone settings. Contact us to request access, correction or deletion of personal data we hold about you, or to raise an objection or request restriction or portability where applicable. We may need information to identify the relevant support request; CookSmart has no user account to identify your previous recipe requests.
You can also complain to the Swedish Authority for Privacy Protection, IMY, or your local data-protection authority.
Changes and contact
We will update this page when CookSmart’s data handling changes. For help with the app, visit CookSmart support.