Privacy Policy
GrillPilot ("the app", "we") is built by Scott Bedwell as an AI cook coach for grills, smokers, and flat tops. This policy describes what we collect and why.
The short version
- We collect the minimum we need to run the app.
- We do not sell your data, share it with advertisers, or use it for cross-app tracking.
- We do not use your photos or content to train AI models.
- You can delete your account and all associated data at any time, in-app, from Settings.
What we collect
When you sign in with Apple
- Your Apple-provided user identifier — an opaque string Apple gives us, not your Apple ID.
- Your email address. Apple may give us a private relay address (
…@privaterelay.appleid.com) — we use whatever Apple shares.
When you use the app
- Cook sessions you create (cut, weight, target temperatures, rub, ingredients, prep checklist, grill used, start/end time, status).
- Temperature readings you log during a cook.
- Grill profiles (names, models, fuel, notes).
- Recipes you create, generate with AI, scale, or save from a cook.
- AI Chef conversations — messages you send, responses from the model, timestamps.
- Photos you attach to AI Chef messages (Pro feature). Photos are scanned by an automated moderation model before storage; clearly off-topic or inappropriate uploads are rejected.
- Subscription state — your tier (Free or Pro), Apple subscription transaction IDs, and renewal status (received from Apple via App Store Server Notifications).
Product analytics and diagnostics
We use PostHog to track product usage (which features get used, which screens are viewed, which buttons are tapped) and to capture crash and performance data. PostHog events are linked to your account ID so we can debug issues you report. They are not shared with advertisers or used for cross-app tracking. You can opt out by emailing us.
What we do NOT collect
- Location data.
- Contacts, photo library, or health data.
- Device advertising identifiers (IDFA). We do not show the App Tracking Transparency prompt because we do not track.
- Any data from cross-app tracking SDKs.
- Payment card details. Subscription payments are handled by Apple; we never see card numbers.
How we use what we collect
- To run the app. Your cook data powers the live charts, history, recipe library, and AI Chef's awareness of your current cook.
- To personalize AI coaching. The AI Chef sees your current cook, recent readings, and prior context so its advice is relevant. Your data is included in prompts sent to Anthropic's Claude API for the duration of each request. We do not opt in to model training, and Anthropic does not train on customer API data by default.
- To gate Pro features. Apple's subscription receipts tell us whether to enable photo uploads and the higher prompt limits.
- To keep the service safe. Photo moderation prevents abusive uploads; rate limits and a daily cost ceiling protect the AI service.
Who we share data with
We send data to the following third-party services strictly to operate the app:
- Apple — Sign in with Apple, StoreKit subscriptions, App Store Server Notifications.
- Anthropic — your AI Chef messages, current cook context, and (for Pro photo uploads) image data are sent to Claude to generate responses. Anthropic's privacy policy: anthropic.com/privacy.
- Google Cloud Platform — Pro AI Chef photos are stored in Google Cloud Storage (single-region, US). Photos are not used for any purpose other than serving them back to you and to the AI Chef during your conversation.
- Fly.io — our backend host. Your account, cook, recipe, and conversation data live in a Postgres database on Fly.io infrastructure.
- PostHog — product analytics and crash/performance data, as described above.
We do not share your data with advertisers, data brokers, or any other third parties.
Data retention
- Your account and cook data are kept until you delete them.
- Photos uploaded to AI Chef are stored until you delete the conversation or your account.
- Backend server logs are retained up to 30 days for debugging and are not shared.
Deleting your data
You can permanently delete your account and all associated data from the app: Settings → Account → Delete account. This removes your cooks, readings, channels, recipes, AI Chef conversations, photos, and grill profiles.
If you'd rather email us, write to scott@grillpilot.ai with the subject "Delete my GrillPilot data" — we will delete your account within 30 days.
Children
GrillPilot is not intended for users under 13. We do not knowingly collect data from children.
Changes to this policy
If we change how we handle data, we'll update this page and bump the date at the top. Significant changes will be communicated in-app.
Contact
Scott Bedwell — scott@grillpilot.ai