1. Introduction
Dishlo is a mobile application that helps you save recipes, plan meals, and generate grocery lists. Dishlo is operated by Cicero Holdings LLC ("we," "our," or "us"), which is responsible for the personal information described in this policy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
By using Dishlo, you agree to the practices described in this policy.
2. Information We Collect
2.1 Account Information
Dishlo requires an account to use its features. When you create an account, we collect:
- Email address — used to identify your account and send verification and password-reset emails
- Full name — used to personalize your experience
2.2 Content You Create
Content you create inside Dishlo is stored and associated with your account:
- Recipes — names, ingredients, instructions, serving sizes, recipe type, nutrition information, source URLs used as references, and AI-generated concept images
- Meal plans — dates, meal times, servings, and the recipes assigned to each slot
- Grocery lists — items, quantities, units, categories, notes, and check-off status
- Recipe tags — labels you create to organize your recipes
"Your Items" — a personal catalog of custom grocery items — is stored only locally on your device and is not transmitted to or stored on our servers.
2.3 Uploaded Files
If you use the scan-a-recipe feature, you may upload screenshots, photos, or PDF files containing recipe content. These files are temporarily processed to perform text extraction and are deleted promptly after processing completes, whether processing succeeds or fails. When you select a photo or PDF, your device also places a temporary copy in Dishlo’s private storage area on the device; Dishlo deletes that copy once you save the recipe, and also if you leave the add-recipe screen without saving. We do not retain the original filenames of the files you upload, and the files are not used for any other purpose.
2.4 Purchase and Subscription Information
Dishlo offers a paid subscription. Payments are processed by the Apple App Store or Google Play — we never see or store your payment card details. To manage subscriptions, we use RevenueCat, a subscription management service, which receives your Dishlo account identifier, device identifiers, and purchase information (such as your subscription status, free trial status, and transaction records) from the app stores on our behalf.
2.5 Automatically Collected Information
Beyond the subscription information described in Section 2.4, we do not collect location data, contacts, advertising identifiers, or behavioral tracking data. Reminders shown by Dishlo are generated locally on your device; we do not collect push notification tokens.
When your device communicates with our servers, our hosting and infrastructure providers may process limited technical information, such as your IP address, in server logs for security, abuse prevention, and operational purposes. We do not use this information to track you or build a profile of you.
2.6 Local Data on Your Device
To support offline use and app performance, Dishlo stores a local copy of your data (such as recipes, meal plans, grocery lists, and "Your Items") on your device, along with a randomly generated identifier used solely to organize that local data. This local data is private to your device. When you sign out, Dishlo clears the local data that could otherwise be visible to the next person who signs in on that device. When you delete your account, Dishlo removes its local data from the device, as described in Sections 5 and 6.
3. How We Use Your Information
We use your information to provide and improve Dishlo's features:
- To operate your account — authenticate you, store your data, and sync it across your devices
- To parse and structure recipes — when you paste or type actual recipe text, we send that content to OpenAI's API to extract structured recipe data (name, ingredients, instructions, and servings), to organize ingredients for grocery-list generation, and to estimate approximate nutrition information
- To extract text from photos and PDFs — when you upload a screenshot, photo, or PDF, we send the file to Google Cloud Vision to read the text
- To generate recipe images — we send a short description of your recipe (its title and key ingredients) to Google's Gemini API to generate an original concept image
- To generate grocery lists — we aggregate ingredients from your planned meals within our own servers using deterministic logic; no AI is involved in generating the grocery list itself
- To manage your subscription — validate purchases and determine your access level, as described in Section 2.4
- To send transactional emails — verification emails and password-reset links via Firebase
Service Improvement and Diagnostics
We may review data generated by your use of app features — such as how a recipe was parsed, how ingredients were categorized, or how a grocery list was assembled from your planned meals — in order to diagnose errors, correct inaccurate parsing or categorization, and improve the quality and accuracy of Dishlo's features. When we use app function data this way, we work with the minimum data needed, in de-identified or aggregated form wherever practical. We do not use this data for advertising, we do not sell it, we do not share it with third parties, and we do not use it to build a profile of you. Improvements derived from this analysis (for example, better ingredient categorization rules) benefit all users but never expose any user's personal content.
Dishlo does not scrape websites or fetch recipe content from URLs. Source URLs are saved only as references to help you remember where a recipe came from.
We do not use your data for advertising. We do not sell or share your data with third parties for their own marketing purposes.
4. Third-Party Services
Dishlo uses the following third-party services to function. Each has its own privacy policy:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Google Firebase | Authentication, database, and file storage | firebase.google.com/support/privacy |
| OpenAI | Recipe text parsing, ingredient structuring, and nutrition estimation | openai.com/policies/privacy-policy |
| Google Gemini | Recipe concept image generation | policies.google.com/privacy |
| Google Cloud Vision | OCR text extraction from screenshots, photos, and PDFs | policies.google.com/privacy |
| RevenueCat | Subscription management and purchase validation | revenuecat.com/privacy |
| Render | Hosting for Dishlo's backend servers, which process your requests | render.com/privacy |
When you use features that involve these services, relevant data such as recipe text, generated recipe descriptions, or uploaded files is transmitted to them. We do not send your account information, such as your name or email address, to OpenAI or Google as part of the AI or OCR processing features; only recipe content is sent. Content submitted to OpenAI and Google through Dishlo is transmitted via their business APIs, which do not use API-submitted content to train their models by default.
5. Data Storage and Security
- Your recipes, meal plans, grocery lists, tags, and profile are stored in Google Firestore, hosted in Google Cloud.
- A local copy of your data may be cached on your device to allow offline use. This data is private to your device. Signing out clears the local data that could otherwise be visible to the next person signing in on that device, and deleting your account removes Dishlo’s local data from the device.
- Uploaded photos and PDFs used for OCR are temporarily stored and deleted promptly after text extraction is complete.
- AI-generated recipe concept images are stored in Google Cloud Storage and served through a private link containing a long, randomly generated token. The link does not expire on its own; the token cannot be guessed, and anyone who does not have the link cannot access the image. When you delete a recipe or your account, the underlying image file is deleted, which permanently disables its link.
- All communication between the app and our servers uses HTTPS encryption.
- Your recipes, meal plans, and grocery lists are private to your account. No other Dishlo user can see them.
6. Data Retention and Deletion
Your data is retained while your account is active. You can delete individual recipes, meal plans, and grocery lists at any time from within the app.
To delete your entire account and all associated data, use Account → Delete Account in the app. When you do, we remove your profile, recipes, meal plans, grocery lists, tags, and stored recipe images, delete your local data from the device, and delete your authentication record. Your data is removed from the app right away; residual backup copies retained by our storage provider are permanently purged within a short period (generally within about 7 days). If you no longer have the app installed, email us at the address in Section 10 and we will process your request within 30 days. See our account deletion page for details.
Subscription and transaction records held by the app stores and our subscription processor may be retained as required for financial reporting, fraud prevention, and legal compliance.
Files uploaded for text extraction are deleted promptly after processing completes and are not retained with your account.
7. Age Requirement
Dishlo requires users to be at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has created an account, please contact us and we will delete it promptly.
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate information
- Delete your data
- Object to or restrict certain processing
To exercise any of these rights, contact us using the information in Section 10. We do not discriminate against you for exercising your privacy rights.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If changes are material, we will notify you within the app. Continued use of Dishlo after changes take effect constitutes acceptance of the updated policy.
10. Contact Us
If you have questions or concerns about this Privacy Policy, or to request data access or deletion, please contact:
Cicero Holdings LLC (operator of Dishlo)
Email: dishlo.app@gmail.com
This policy applies to the Dishlo mobile application.