Privacy policy
Last updated 7 September 2026
This policy explains what DACCAA Ltd collects when you use the Crumbfolio website and the Crumbfolio app, why we collect it, and what we do with it. It is written to be read rather than to be survived.
Who we are
Crumbfolio is a product of DACCAA Ltd, a company registered in England and Wales (company number 14639674), registered office 11 Othello Close, Stafford, ST17 9ZN, England. We are the data controller for the personal data described here. You can reach us at [email protected].
What we collect
When you join the early access list
We store the email address you give us, plus the date you signed up. We use it for one purpose: to tell you when Crumbfolio is available. Every message includes an unsubscribe link. We do not sell or rent your address to anyone. The lawful basis is your consent, which you can withdraw at any time.
When you use the app
- Your recipes. Recipes you save, write or generate, including ingredients, method, notes, tags and the web address you saved them from.
- Your cooking history. Photos you attach, notes you add about how something turned out, when you cooked a recipe, and timer adjustments such as stopping a bake early because it was ready.
- Your preferences. Units, the oven and equipment adjustments Crumbfolio learns, and your shopping list.
- Account details. If you create an account, the identifier and email address associated with it.
- Diagnostics. Crash reports and basic, aggregated usage counts so we can find what is broken. These are not used to build a profile of you.
When you visit this website
This site is hosted on Cloudflare Pages. Cloudflare processes standard server request data, including IP address, in order to serve the site and protect it from abuse. We do not set advertising cookies and we do not track you across other websites.
Artificial intelligence features
Several Crumbfolio features are powered by AI: importing a recipe from a web page, generating a new recipe, answering questions about a recipe, scaling, substituting ingredients and tidying up an imported method.
That processing happens on your device wherever possible. On-device models handle what they can without any of your content leaving your iPhone at all.
When a request needs more capability than the device can provide, it is sent to Apple's Private Cloud Compute. Private Cloud Compute runs on Apple silicon servers built for the purpose, and Apple states that data sent to it is used only to fulfil your request, is not stored, is not made accessible to Apple, and is not used to train models. The software running on those servers is published so that independent researchers can verify these guarantees.
In practice this means we do not ship your recipes, your questions or your cooking history to a third-party AI company, and there is no general-purpose model being trained on what you cook.
Importing a recipe from a web address is the one case where a request leaves your device by necessity: the page has to be fetched from the website you saved it from. That fetch reaches the site in question in the ordinary way, and the recipe is then processed as described above.
What we never do
- We do not sell your personal data.
- We do not share your recipe collection with advertisers.
- We do not use your cooking history to target advertising.
- We do not send your recipes to a third-party AI provider.
- We do not train models on your content, and nor does anyone else.
How long we keep things
Your recipes and cooking history are kept for as long as your account exists. Delete a recipe and it goes. Delete your account and we remove your personal data within 30 days, except where we are legally required to keep records — billing records, for example, must be retained for six years. Early access email addresses are deleted when you unsubscribe or when the list is retired after launch.
Where your data is processed
We use service providers in the United Kingdom, the European Economic Area and the United States. Where personal data leaves the UK or EEA, we rely on the UK International Data Transfer Addendum or Standard Contractual Clauses to protect it.
Your rights
Under the UK GDPR you have the right to access your data, correct it, delete it, restrict or object to how we use it, and receive a portable copy. To exercise any of these, email [email protected]. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first so we can put it right.
Children
Crumbfolio is not directed at children under 13, and we do not knowingly collect their personal data.
Changes to this policy
If we change this policy in a way that materially affects you, we will say so on this page and, where the change is significant, tell you directly. The date at the top always reflects the current version.