GrillPilot — Privacy Policy
Last updated: April 26, 2026
GrillPilot ("the app", "we") is built by Scott Bedwell as an AI-coached barbecue and grilling companion. This policy describes what we collect and why.
The short version
- We collect the minimum we need to run the app.
- We do not sell your data, share it with advertisers, or use it for cross-app tracking.
- You can delete your account and all associated data at any time, in-app, from Settings.
What we collect
When you sign in with Apple
- Your Apple-provided user identifier — an opaque string Apple gives us, not your Apple ID.
- Your name and email if you choose to share them on first sign-in. Apple may give us a private relay email (
…@privaterelay.appleid.com) — we use whatever you share.
When you use the app
- Cook sessions you create (cut, weight, target temperatures, rub, ingredients, prep checklist, grill used, start/end time, status).
- Temperature readings you log during a cook.
- Grill profiles (names, models, fuel, notes).
- Recipes you create, generate with AI, scale, or save from a cook.
- AI Chef conversations — messages you send, responses from the model, timestamps.
- Photos you attach to AI Chef messages (Pro feature). Photos are scanned by an automated moderation model before storage; clearly off-topic or inappropriate uploads are rejected.
- Subscription state — your tier (Free or Pro), Apple subscription transaction IDs, and renewal status (received from Apple via App Store Server Notifications).
Anonymous product analytics
We use PostHog to track aggregate, non-identifying product usage (which features get used, which screens are viewed, which buttons are tapped). This helps us improve the app. PostHog events are tied to your account ID but are not shared with advertisers or used for cross-app tracking. You can opt out by emailing us.
What we do NOT collect
- Location data.
- Contacts, photos (other than ones you explicitly attach to AI Chef), or health data.
- Device advertising identifiers (IDFA).
- Any data from cross-app tracking SDKs.
How we use what we collect
- To run the app. Your cook data powers the live charts, history, recipe library, and AI Chef's awareness of your current cook.
- To personalize AI coaching. The AI Chef sees your current cook, recent readings, and prior context so its advice is relevant. Your data is included in prompts sent to Anthropic's Claude API for the duration of each request.
- To gate Pro features. Apple's subscription receipts tell us whether to enable photo uploads, more prompts, and community recipes.
- To keep the service safe. Photo moderation prevents abusive uploads; rate limits protect the AI service from misuse.
Who we share data with
We send data to the following third-party services strictly to operate the app:
- Apple — Sign in with Apple, StoreKit subscriptions, App Store Server Notifications.
- Anthropic — your AI Chef messages, current cook context, and (for Pro photo uploads) image data are sent to Claude to generate responses. Anthropic's privacy policy: anthropic.com/privacy
- Google Cloud Platform — Pro AI Chef photos are stored in Google Cloud Storage (single-region, US). Photos are not used for any purpose other than serving them back to you and to the AI Chef during your conversation.
- Fly.io — our backend host. Your account, cook, recipe, and conversation data live in a Postgres database on Fly.io infrastructure.
- PostHog — anonymous product analytics, as described above.
We do not share your data with advertisers, data brokers, or any other third parties.
Community recipes
If you choose to publish a recipe to the GrillPilot community, your display name and the recipe content (title, cut, ingredients, prep steps, stages, notes) become visible to other Pro users. You can unpublish a recipe at any time. Your private cooks, AI Chef conversations, and uploaded photos are never made public.
Data retention
- Your account and cook data are kept until you delete them.
- Photos uploaded to AI Chef are stored until you delete the conversation or your account.
- Backend server logs are retained up to 30 days for debugging and are not shared.
Deleting your data
You can permanently delete your account and all associated data from the app: Settings → Account → Delete account. This removes your cooks, readings, channels, recipes, AI Chef conversations, photos, grill profiles, and any community recipes you've published.
If you'd rather email us, write to scott@sbedwell.net with the subject "Delete my GrillPilot data" — we will delete your account within 30 days.
Children
GrillPilot is not intended for users under 13. We do not knowingly collect data from children.
Changes to this policy
If we change how we handle data, we'll update this page and bump the date at the top. Significant changes will be communicated in-app.
Contact
Scott Bedwell — scott@sbedwell.net