Legal
Privacy Policy
Last updated · July 16, 2026
The short version: Wrap stores your account email, the recipes you import, and (if you turn on notifications) a push token. Imported links are processed by AI services to extract the recipe. We don't run ads, we don't use third-party analytics, and we never sell your data. Delete your account any time and your data goes with it.
Who we are
Wrap is a recipe-keeping app for iOS ("Wrap", "we", "us"). This policy explains what data Wrap collects, why, and what control you have over it. Questions? Email [email protected].
What we collect
Account information
- Email address and password — if you create an account. Authentication is handled by Supabase; we never see or store your password in plain text.
- Guest accounts — you can use Wrap without registering. A guest account is an anonymous identifier with no email attached.
Content you save
- Links you import — the URLs of posts and pages you share to Wrap.
- Extracted recipes — titles, ingredients, steps, timing, servings, and cover images produced from your imports, plus any edits you make.
- Organization — your collections, favorites, and photos you attach to recipes.
Device data
- Push notification token — only if you enable notifications, so we can tell you when an import finishes. Managed through Apple Push Notification service.
- Import job status and error logs — technical records of whether an import succeeded, used to fix failures and improve extraction. These are tied to the import, not to advertising identifiers (we don't use any).
How imported links are processed
When you import a link, our servers fetch the publicly available post — the caption, and where needed the video itself. To turn it into a recipe:
- The caption text is sent to an AI language-model provider (OpenAI and/or Anthropic) to extract the recipe.
- If the caption isn't enough, the video's audio may be transcribed, and video frames may be analyzed to read on-screen text — also via those AI providers.
These providers process the content under their API terms, which do not permit them to use it to train their models. Only the content of the post you imported is sent — never your email, contacts, or anything else on your device.
Where your data lives
- Supabase — database, authentication, and image storage.
- Fly.io — runs the media-processing worker for video imports.
- Apple — delivers push notifications.
- OpenAI / Anthropic — AI recipe extraction, as described above.
We share data with these processors only as needed to run the service. We do not sell your data, share it with advertisers, or use third-party analytics or tracking SDKs. This website loads no trackers and makes no third-party requests at all.
How long we keep it
Your recipes and account data are kept until you delete them. Deleting a recipe removes it and its images. Deleting your account removes your profile, recipes, images, import history, and push tokens.
Your controls
- Delete recipes — any time, in the app.
- Delete your account — in the app under Settings, or email us and we'll do it for you.
- Notifications — opt in or out in iOS Settings at any time.
- Access or export — email [email protected] and we'll send you a copy of your data.
Content removal
If you're a content creator and believe an image or recipe sourced from your post should be removed, contact [email protected] and we'll handle it promptly.
Children
Wrap is not directed at children under 13, and we don't knowingly collect data from them. If you believe a child has created an account, contact us and we'll delete it.
Changes
If this policy changes in a way that matters, we'll update the date above and note the change in the app. Continued use after a change means you accept the updated policy.
Contact: [email protected]