Kikook
Last updated: August 22, 2026
Kikook is built and run by an independent developer based in France. There is no company behind it — one person.
That person is the data controller for the information described below, and you can reach them at contact@kikook.app for any privacy question or to exercise any of the rights set out here.
This policy explains, in plain language, what Kikook collects, why, who else sees it and how long it is kept. It covers the mobile app and the service behind it.
Your account. Your email address is required: it identifies your account and is how verification and password-reset messages reach you. Your password is stored only as a secure hash, never in readable form. If you sign in with Google or Apple, we store the identifier they give us, plus the name they share if they share one.
Your profile. A display name, dietary regime, allergies, cooking level, cooking goal and kitchen equipment. All of it is optional and can be changed or emptied at any time. It exists so generated recipes fit you.
Your pantry. The ingredients you add or scan, with optional quantities and expiry dates, so recipes can be built around what you actually have.
Your recipes. The text you type when asking for a recipe, the recipes generated for you, the ingredient names detected in your photos, and the follow-up questions you ask about a recipe.
Technical data. Your device sends its IP address with every request, as any internet connection does. It is used only to apply rate limits that keep the service available, and it is not stored in your account.
We do not collect your real name at signup, date of birth, phone number, postal address, location, contacts, or any advertising identifier.
If you tell Kikook about your allergies, that is information about your health. European law gives it particular protection, so we would rather be explicit about it than bury it in a list.
Providing your allergies is entirely optional and the app works without them. By choosing to enter them, you give your explicit consent for them to be used for one purpose: they are sent, with your other preferences, to the AI service that writes your recipes, so it can try to avoid ingredients you cannot eat. They are used for nothing else. They are never sold, and never shared for advertising.
You can withdraw that consent at any time by removing your allergies from your profile.
Please also read the food-safety section of the Terms of Service: allergen avoidance by an AI is a best effort and never a guarantee.
When you scan your fridge or your pantry, the photo is held in memory for the few seconds the analysis takes, sent to our AI provider for that analysis, and then discarded.
It is never written to disk, never saved in a database, never placed in any storage bucket and never written into a log file. There is no photo library on our side, and no way for anyone — including the developer — to retrieve a picture you scanned.
What is kept is the result: the list of ingredient names the analysis produced, which becomes your pantry items and part of your recipe history.
Kikook uses an artificial intelligence system to do its main job. Recipes, ingredient lists, cooking steps, answers to your follow-up questions, the explanations given when a request is declined, and the reading of your scanned photos are all produced by an AI model. No human writes or reviews them before you see them.
The model is operated by OpenAI and runs on their servers, not on your device. To produce a recipe we send it what you typed, the ingredients in your pantry, your dietary preferences and allergies, your kitchen equipment and, when you scan one, your photo.
AI-generated content can be wrong, incomplete or unsuitable. Treat every recipe as a suggestion to check, not an instruction to follow blindly.
We do not sell your data and we do not share it for advertising. There is no analytics, tracking or advertising software in this app — no Google Analytics, no Firebase, no advertising SDK. We do use one error-reporting tool, Sentry, described below, which records technical details when something goes wrong.
Kikook does rely on a small number of service providers, each receiving only what it needs:
Each of these providers processes the data on our behalf, under its own data-processing terms.
You can try Kikook without creating an account. In that mode nothing is stored on our servers: no account, no pantry, no recipe history. The single free recipe is tracked by a flag saved on your own device, not by us.
Your request is still processed, which means the text you type and any photo you scan are still sent to our AI provider in order to produce a recipe. They are simply not saved afterwards.
We would rather be straightforward here than flattering.
Your account and everything attached to it — profile, pantry, recipe history, follow-up conversations — are kept for as long as your account exists. There is no automatic clean-up: a recipe generated a year ago is still stored. Deleting your account is what removes it, and you can do that at any time from your profile.
If you never verify your email address, the account still remains until you delete it.
Two internal caches store recipe titles and stock-photo results so the same lookup is not repeated. They contain no account identifier and are not linked to you.
Server logs kept by our hosting providers, for their own limited periods, may contain IP addresses.
If you want your recipe history cleared without deleting your account, write to us and we will do it.
Deleting your account from the profile screen is immediate and permanent. There is no grace period and no way for us to undo it.
It removes your account record, your profile and preferences, your entire pantry, your whole recipe history and every follow-up conversation attached to those recipes.
If you signed in with Apple, we also ask Apple to revoke the token linking your Apple ID to Kikook, so the connection is cut on their side too.
A subscription bought through the App Store or Google Play is not cancelled by deleting your account: it belongs to your store account and must be cancelled there.
Under the GDPR you can ask to see the data held about you, correct anything wrong, have it deleted, receive a copy in a portable format, object to a use, or ask that a use be restricted.
Deletion is built into the app and takes one tap. For everything else, write to contact@kikook.app. There is no automated export tool yet, so access and portability requests are handled by hand — we will answer within one month, as the law requires.
Where your allergies are concerned, our legal basis is your explicit consent, which you can withdraw at any time by removing them from your profile. For the rest, we process your data to provide the service you asked for.
If you believe your data has been mishandled, you may lodge a complaint with your national data protection authority. In France that is the CNIL (cnil.fr).
Your login tokens are kept in your device's secure storage — the Keychain on iOS, encrypted storage on Android. A few plain preferences sit alongside them: your chosen language, whether you are in guest mode, and whether the free guest recipe has been used. Nothing sensitive is stored unprotected.
The app also caches recipe photos it has already downloaded, so they need not be fetched twice.
On the web version, signing in uses secure cookies that are strictly necessary to keep you logged in. There are no advertising or tracking cookies of any kind.
Your account, your pantry and your recipe history are stored in a database hosted in Ireland, inside the European Union. That stored data does not leave the European Economic Area. Technical error reports are likewise stored inside the European Union, in Germany.
Some of the providers listed above are based in the United States, and data does leave the European Economic Area when it reaches them:
Cloudflare operates a global network and forwards your requests through whichever of its locations is closest to you, which may be inside or outside the European Economic Area depending on where you are.
Those transfers rely on the safeguards the providers offer, such as the European Commission's standard contractual clauses. Sentry, our error-reporting provider, stores its data in the European Union but is a United States company, and its staff may access that data to provide support, under its data processing terms. If you are not comfortable with your recipe requests being processed in the United States, Kikook is not the right app for you, because recipe generation cannot happen without it.
Kikook is not directed at children. You must be at least 16 years old to create an account and use the service.
We do not currently ask your age, so we rely on you being honest about it. If you believe a child under 16 has created an account, write to us and we will delete it.
This policy will change as Kikook grows: a new feature or a new provider means a new version. The date at the top always tells you when it last changed, and significant changes will be announced in the app.
Any question about any of this? Write to contact@kikook.app.