Privacy
The short version
- No account. We never ask for your name, email or phone number.
- Your recipe library lives on your iPhone.
- Your voice recording never leaves your iPhone. Speech becomes text on the phone.
- To turn a link, photo or text into a recipe, and for Mario to talk, we send recipe content to our server and to two AI providers. We list them below.
- No ads, no tracking, no analytics or crash-reporting SDKs. This website sets no cookies.
- Settings › Delete my data wipes the app and our server records tied to your phone.
Who we are
No Pasta For You is made by Travela Ltd. (company no. 516998853), registered office Neve Reim 14, Ramat HaSharon 4726514, Israel. Questions about this policy or your data: privacy@nopasta.app.
Your phone, not an account
When you first open the app, our server gives your install a random ID. On a real iPhone, Apple's App Attest proves the requests come from the genuine app. The ID and its keys sit in your iPhone's Keychain, are not in backups and do not move to other devices. If you delete and reinstall the app, you get a new ID.
What leaves your phone, and why
| What | When | Why |
|---|---|---|
| A recipe link, and the text your phone reads from that page (or a video's caption and subtitles) | When you import a link | To pull out the ingredients, steps and timers |
| Text you paste or share (for example a WhatsApp message) | When you import text | Same |
| Text read from a photo on your phone. If you pick 2 to 4 photos of one page, the photos too (resized, up to 1568 px) | When you import photos | Same. A single photo sends only its text; the photo stays on your phone |
| For some videos: up to 24 small still frames (512 px) and a transcript made on your phone | Only when the caption is not enough | To read a recipe that is only shown or said in the video |
| The recipe you are cooking | When you open a recipe or start cooking | So Mario can read the steps aloud and answer questions about it quickly |
| The text of what you say to Mario, or type to him | When you name him (“Mario, …”). With “Always listen to me” on, also cooking talk that a check on your phone flags as meant for him. Commands like “next” and “repeat” stay on the phone | So he can answer or change the recipe when you ask |
| Your App Store purchase receipt (signed by Apple) | When you buy or restore No Pasta Plus | To unlock Plus |
| Your install ID and the app version | With every request | To run limits, prevent abuse and fix problems |
Your IP address reaches Cloudflare with every request, as it does with any website. Our code uses it only for rate limits against abuse and does not store it.
The app downloads recipe pages and videos directly from the site you picked, so those sites see your IP address as they would in a browser.
Who processes it
- Cloudflare runs our server, storage and database. Your requests and the data above pass through it.
- Anthropic (Claude models) turns imports into recipes and writes Mario's answers. Requests go through Cloudflare's AI Gateway with logging turned off. We do not send your install ID to Anthropic.
- ElevenLabs makes Mario's voice. It gets the text he speaks: recipe steps and his answers. Not your ID, and not your voice.
- Apple handles App Attest, purchases and subscription notices.
- TikTok, YouTube and Pinterest: for public links from these sites, our server asks the site's public embed service about the link, to check the caption before we cache the recipe.
We do not sell your data or share it for advertising.
What we keep, and for how long
| Data | How long |
|---|---|
| Photos, video frames and transcripts you upload for an import | Deleted after use, and in any case within 1 day |
| The page text or caption of an import | Cleared when the import finishes |
| The finished recipe and its link, tied to your install ID | Until you use Delete my data |
| Recipes from public links, in a shared cache so the next person importing the same link gets it fast | 90 days |
| A still frame from an imported video, used as the recipe cover | No set end date yet |
| Mario's answers as text | Not stored on our server. Your conversation is saved on your phone |
| Voice audio of recipe steps, and of Mario's answers | 180 days and 7 days. The files are named by a fingerprint of the text, not by who asked |
| Your install ID, its keys and when it was last seen | Until you use Delete my data |
| Usage counts per day (imports, questions, cost), with your install ID | Daily counts: until Delete my data. Usage statistics: about 3 months |
| How many recipes you saved on the free plan, and whether you used the free Mario taste | Kept so the free limits stay fair, also after Delete my data |
| Purchase records (transaction IDs, product, dates) | Kept as purchase records |
| Server logs | A 10% sample of requests, with IDs and error codes, never recipe text or what you said. Kept for Cloudflare's standard log period |
If your install hits a spending limit, the operator gets an alert email with the install ID and no content.
What stays on your phone
Your recipe library, versions, notes, your conversations with Mario, cook progress, timers, settings and the downloaded voice clips stay on your iPhone. iCloud sync is not turned on.
Your choices
- Export: Settings › Export library as JSON saves all your recipes as a JSON file.
- Delete: Settings › Delete my data erases your library on this phone, Mario's saved audio, your install ID and its keys, and on our server your install record, imports and daily usage. Deleting the app erases the local data too, but not the server records; use Delete my data first.
- Microphone: you can say no, or turn it off in iOS Settings. You can cook by tapping. Turn off “Always listen to me” so only “Mario, …” reaches him.
- Questions or requests about your data: privacy@nopasta.app.
Children
No Pasta For You is not made for children and we do not knowingly collect data from them. Mario talks clean by default. Full mode, where he swears, asks you to confirm you are 18 or older.
This website
nopasta.app is a static page. It sets no cookies, runs no scripts and loads nothing from other companies. Cloudflare serves it and sees your IP address to do so.
Changes
If we change what we collect, we update this page and the date at the top before the change ships in the app.