Privacy policy
Last updated 19 October 2026
Panzuko is a cooking app. This page says, in plain words, what it collects, why, who helps us run it, and how you can delete everything.
What we collect
- Your account. Your email address, or your Apple or Google sign-in if you use one. Passwords are stored only as a secure hash by our database provider. You can use Panzuko as a guest without an account; a guest's progress stays on the phone.
- Your profile and setup answers. Your name, how you look in the app, your cooking level, goals, the cuisines you like, allergies and foods you avoid, and your time zone (to know when your day starts). We never ask for your location.
- What you cook. The recipes you cook, your streak, points, leagues, cook-offs and plans. If you have an account, it also keeps a backup of your kitchen so nothing is lost when you change phones: the recipes you add yourself (typed, pasted, from a photo or a video, with their picture), your Menu, your cooking history, coins, cats, pantry, shopping list and app settings. Only you can see it.
- Photos you take in the app. The photo of a finished dish, and photos you show Pan while cooking (“is it ready?”), your fridge or a recipe, are checked by our AI helper and not kept. Photos you post as stories are kept and shown only to your friends.
- Friends. The people you add, your stories, messages and invites. If you choose to find friends from your contacts, the phone numbers are scrambled (hashed) on your phone before anything is sent, and we keep only the matches.
- Videos you share. When you share a TikTok, Instagram or YouTube video to Panzuko, we read that video's link, caption and spoken words to write the recipe. If you're signed in and the recipe passes our checks, it can join Panzuko's shared recipe library so other cooks can find it too. The library shows only the recipe and how many people shared that video, never who shared it or anything you typed.
- What's popular. To suggest good recipes we count, per recipe, how many people cooked it, cooked it again, saved it or shared it. Only those totals are used; nobody can see what you cooked or saved.
- How the app is doing. The first time the app runs it makes up a random ID for that install. With it, the app tells us what it is running on (the phone's model, iPhone or Android and its version, the app's version, and the language, region and time zone the phone is set to), which days it was opened, and which steps were reached: each page of setup, making an account or signing in, finishing a cook (on your own, with a friend, or your first), and opening the plans page. It says which step was reached — not your answers, not which recipe, nothing you typed. This happens for guests too, and once you sign in the ID is linked to your account. We use it only to see how the app is doing, like where people stop in setup and which phones it has to work on. The ID is not your phone's advertising ID, and none of this is shared with advertisers. We also count when monthly recap invitations and saved recaps are shown, and when invitations are dismissed. These counts include the recap month and measurement version, but no money amounts or report contents.
- Bug reports. Only when you send one: what you write, a screenshot if you add it, and — unless you switch it off — the app's recent log (the screens you visited, and any warnings, errors or crashes), your app version, phone model, operating system, language and app settings. Passwords, sign-in tokens and email addresses are removed from the log on your phone before it is sent. We use reports only to find and fix problems.
- Purchases. If you subscribe, Apple or Google handles the payment; we never see your card. We receive which plan you have, when it started and whether it renews, linked to your account.
- Your voice. Hands-free commands like “next step” are heard by your phone's own speech recognition (Apple's or Google's). When you talk with Pan or Gam Gam, your voice is streamed to ElevenLabs while the assistant is open, so it can understand you and answer out loud, together with your recipe step, the cooking preferences that matter and the recent conversation. Voice recording is switched off, and ElevenLabs is set to delete the conversation within one day.
- Notifications. If you allow notifications and are signed in, we keep your phone's notification address (a push token) with your account, to tell you when a recipe from a video you shared is ready. Reminders, like the monthly recap, are scheduled on your phone. For the monthly recap we also note the month, when it was planned and which phone planned it (a random code, not a phone ID), so you get it only once even with two phones.
What we don't do
- We don't sell your data.
- We don't use advertising networks or third-party analytics or tracking.
- We don't track you across other apps or websites.
Who helps us run Panzuko
These services process data for us, only to provide the app:
- Supabase — our database, sign-in, photo storage and bug reports.
- Fly.io — runs our server, which passes requests to the services below.
- OpenAI — checks cooking and story photos, answers cooking questions and turns shared videos into recipes. We ask OpenAI not to store these requests; its own retention rules still apply.
- ElevenLabs — hears and answers you when you talk with Pan or Gam Gam: it turns your voice into words, writes the reply with an AI model and speaks it.
- Supadata — fetches the spoken words of a video you share.
- Instacart — only when you choose to send a grocery list there.
- Apple and Google — sign-in if you use it, subscription payments, notifications, and speech recognition on your phone.
- Expo — passes the notifications our server sends to Apple and Google, which deliver them to your phone.
- RevenueCat — keeps track of your subscription across your devices.
- Resend — sends account emails, like password resets.
How long we keep it
We keep your account data while you have an account. When you delete your account, your profile, cooks, your own recipes and the backup of your kitchen, friends, stories, messages, photos and bug reports are deleted straight away. The record of how the app was used (“How the app is doing”, above) is not deleted with your account: it is detached from it straight away and kept with no account on it, as anonymous counts, and the phone you delete your account from starts again under a new random ID. A guest's bug report is kept until the problem it describes is fixed, and at most a year. Apple and Google keep their own records of purchases.
Delete your account
In the app: Profile → Settings → Delete account. It deletes your account and everything in it, including your photos. If you can't open the app, email us at support@panzuko.com from the address on your account and we'll do it for you.
Children
Panzuko is not directed at children under 13, and we don't knowingly collect data from them. If you think a child under 13 has an account, email us and we'll delete it.
Your rights
You can ask for a copy of your data, ask us to correct it, or delete it. Email support@panzuko.com.
Changes
If this policy changes, we'll update the date at the top and tell you in the app if the change matters.
panzuko