Clean Crave privacy policy

Effective October 8, 2026.

Clean Crave is a brand of Zoe Ophelia Holdings LLC, a Washington company. This policy describes the Clean Crave app for iPhone and Android, and the small server that reads a label when you ask it to.

Contact: hello@cleancravekitchen.com
Zoe Ophelia Holdings LLC, P.O. Box 1275, Twisp, WA 98856

There is no account in this version. The app does not ask for your name, email, phone number, or address. The email above is how you reach us. It is not collected by the app.

What stays on the phone

These stay in a database on the phone (SQLite). In the browser demo they stay in local storage on that browser. They are not uploaded.

• Saved scans and the history of labels you have already read.
• The pantry: item name, category, and an optional quantity.
• The avoid list.
• Shopping lists. The free plan keeps them only on the phone. Plus keeps that same copy on the phone and may also sync it, described below.
• A cached Instacart link for a list, until the items on that list change.

Uninstalling the app deletes this on-phone database. On iPhone, the install id described below is kept in the Keychain and can survive an ordinary reinstall. That is not a promise. On Android, the install id is derived from the Android ID. It survives reinstall and resets if the phone is factory reset.

Photos

The camera and photo library are used only when you photograph or choose a label, a receipt, a shelf, or a single item.

In live mode, that image is sent to the Clean Crave server and then to the model provider so it can be read. The server does not save the image. The only things written down from that request are a monthly scan count for the install id, and, if the read succeeds, whatever you choose to keep on the phone.

In demo mode, when the server has no model key, the photo is not forwarded. The app shows a labeled sample instead.

A photo that is empty or too large is refused and not stored.

Text that goes with a read

When live mode has to explain an ingredient that is not already in the on-phone library, the server sends that ingredient name to the model. When it writes a recipe that is not already in the house list, it sends the product name and the ingredient names. Those requests are not saved as a history. Demo mode does not send them to a model.

The notes are educational. They are not a medical record, and the app does not collect health or fitness data. A rating is the Clean Crave ingredient standard, not a diagnosis.

Install id and the monthly cap

The app creates an install id on first launch and sends it with requests as X-Install-Id. On iPhone it is a random id in the Keychain. On Android it is and_ plus the Android ID. In the browser demo it is a random id in local storage.

The server stores one counter for that id: the calendar month, in UTC, and how many label scans have been used. The free plan allows 5 label scans in a month. Plus allows 300, which is the fair-use cap. When the month changes, the counter is replaced. There is no separate analytics log.

The id is not your name. It is not used for ads, and it is not used to track you across other companies' apps or websites.

Shopping lists

Every plan keeps the shopping list on the phone.

Plus can also store a copy on the server, keyed only by the install id. The server keeps up to 50 lists for that id. About has "Delete synced lists from the server." That removes the server copy. The copy on the phone remains until you delete it there. The free plan does not sync.

Instacart

Send to Instacart is on every plan. Nothing is sent to Instacart until you tap the button.

The tap sends the list title and the names of items that are not already marked as in the pantry. The server asks Instacart for a grocery link and returns that link. The phone does not hold the Instacart key. Instacart may pay Clean Crave a commission. You pay Instacart, not the app. The screen under the button says so.

If you tap again and the items have not changed, the phone opens the link it already saved and does not send the list again.

Purchases

Apple and Google process the payment. The app does not collect card numbers.

The store receipt is read through RevenueCat so the app can tell the free plan from Plus, Founder Lifetime, and a recipe pack. RevenueCat is given the same install id. A missing expiration date on the Founder product is treated as lifetime access. If RevenueCat cannot be reached in a store build, the app stays on the free plan until it can.

Public RevenueCat SDK keys are in the app. The RevenueCat secret key stays on the server.

What we do not collect

• Name, email, phone number, or postal address.
• Location.
• Contacts.
• Health, fitness, or medical records.
• Browsing history or search history.
• Crash reports or analytics. The app has no analytics SDK and no crash-reporting SDK.
• Advertising identifiers. There are no ads.

A short rate limit for the API lives in server memory and is not saved.

Who receives data

Only as needed to do the thing you asked for:

• The model provider configured on the server. The default is OpenAI. A photo, an unknown ingredient name, or a recipe request is sent only in live mode, and only for that read.
• Netlify, which hosts the API. It stores the monthly scan counter and, for Plus, synced shopping lists.
• RevenueCat, Apple, and Google, for purchase status.
• Instacart, only after you tap Send to Instacart.

We do not sell personal information. We do not share it for advertising or tracking.

How long it is kept

• Photos are not kept by Clean Crave.
• The scan counter is the current month's count. It is replaced when the UTC month changes. It is not deleted by an in-app button, because it is what enforces the monthly cap.
• Synced Plus lists stay until you delete them in About, or until you ask us to delete the server data for that install id. The server keeps at most the latest 50.
• On-phone scans, pantry, avoid list, and lists stay until you delete them or uninstall the app.
• Apple, Google, and RevenueCat keep purchase records under their own policies. We cannot delete a store receipt.

Deletion requests

Email hello@cleancravekitchen.com from the address you want us to reply to. Tell us the install id if you have it, or the store account you used to buy Plus, and what you want removed.

We can delete the scan counter and any synced lists stored under an install id. We cannot delete Apple or Google purchase records. Those companies handle that request.

Children

Clean Crave is a cookbook and a label reader. It is not directed at children under 13. It does not knowingly collect personal information from children under 13. It is not in Apple's Made for Kids program or Google's Designed for Families program. The store age rating is 4+ / Everyone because the material is recipes and ingredient notes, not because the app is made for children.

Changes

If this policy changes, the page at https://cleancravekitchen.com/privacy will change, and the effective date at the top will change with it.