Privacy Policy
This is a translation. If there are any discrepancies, the German version prevails.
Last updated: 30 October 2026
1. The essentials at a glance
Triplato is built so that I, as the provider, do not receive your data:
- There is no user account with me and no server of mine that stores your data.
- Recipes, meal plans, shopping lists and settings are stored on your device and in your iCloud.
- The app contains no advertising, no analytics tools and no tracking.
- AI features communicate directly from your device with the AI provider you have chosen yourself. Allergies, intolerances and calendar event details are never transmitted.
The sections below explain exactly which data is processed where.
2. Controller
Florian Niemeier, Langer Weg 15/1, 73650 Winterbach, email: hallo@triplato.app
No data protection officer has been appointed because the legal requirements for doing so are not met.
3. Data in the app: on your device and in your iCloud
Everything you create in Triplato (recipes and photos, meal plan, shopping list, rules, pantry items, exclusions such as allergies, settings) is stored by the app on your device. If you use iCloud, Apple syncs this data with your other devices via your iCloud. This is based on your own contract with Apple, and Apple's privacy policy applies. I have no access to this data.
Shared household: If you share a household, all members can see the shared content: recipes, plan, list, rules, pantry items and exclusions. They can also see the members' names, their role (manager or member) and who checked off or changed what. The shared data is stored in the iCloud storage of the person who created the household. Each invitation is sent to a specific person; Apple processes the contact details the invitation is sent to.
Health information: Allergies and intolerances that you enter as exclusions remain on your devices and in the shared household. The app only uses them to exclude recipes when planning and never transmits them to an AI provider.
Backup and export: If you wish, the app saves a weekly backup to your iCloud Drive. You save or share exports yourself. Backups and exports never contain the AI access credentials.
Deletion: You can delete individual content at any time. Under "Manage household → Delete all my data" you remove all your data and end all shares.
4. AI features
For meal planning and some other features, Triplato uses an AI service that you choose yourself and with which you have your own contract. The current options are OpenRouter, OpenAI, Anthropic, Google, Mistral AI, and your own or local models.
How the transfer works: The app sends requests directly from your device to the chosen provider over an encrypted connection. Requests do not pass through any server of mine, and I receive neither the request nor the response. As with any internet connection, the provider sees your IP address.
Which data is transmitted:
- Meal planning and suggestions: key data of your recipes (internal identifier, title, categories, preparation time, calories, child-friendliness, side dish, rating), your planning rules, your wishes for the planning run and the dishes of the past 14 days
- Shopping list: individual ingredient lines that the app cannot match by itself
- Rule from text: the text of the rule you enter
- Recipe import: the text of the web page, the pasted text or the photo you import
- Estimates (e.g. calories): the recipe concerned
Not transmitted: allergies and intolerances (the app filters out affected recipes itself beforehand), the content of your calendar events, the names of household members and your recipe photos (except for photo import). If you use terms such as "allergy" in a free text, the app points this out to you before sending.
Signing in with the provider: If you choose "Connect AI account", you sign in on the provider's website. The app then receives an access key. It stores this key in your device's keychain and, so that all managers of your household can plan, end-to-end encrypted in the shared household. I never receive the key.
Legal basis: The app only transmits data to an AI provider after you have given your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time under "Settings → AI" by removing the AI access. This does not affect transfers that have already taken place.
Provider's responsibility: Processing by the AI provider is subject to that provider's terms and privacy policy, for example regarding retention periods and whether requests are used for training. Please read them before choosing a provider.
Providers at a glance (as of 30 October 2026)
| Provider | Contracting party and registered office | Privacy policy | Transfer to the USA |
|---|---|---|---|
| OpenRouter | OpenRouter, Inc., USA | openrouter.ai/privacy | Servers in the USA; not certified under the EU-U.S. Data Privacy Framework; OpenRouter refers to the European Commission's standard contractual clauses. OpenRouter forwards your request to the provider of the model you use |
| OpenAI | for users in the EU: OpenAI Ireland Limited, Ireland | openai.com/policies/eu-privacy-policy, for the API also openai.com/api-data-privacy | Further processing in the USA by OpenAI based on standard contractual clauses; not certified under the Data Privacy Framework |
| Anthropic | for users in the EU: Anthropic Ireland, Limited, Ireland | anthropic.com/legal/privacy, for the API also anthropic.com/legal/commercial-terms | Further processing in the USA by Anthropic based on standard contractual clauses; not certified under the Data Privacy Framework |
| Google (Gemini) | Google LLC, USA | policies.google.com/privacy, ai.google.dev/gemini-api/terms | Google LLC is certified under the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission |
| Mistral AI | Mistral AI, Paris, France | legal.mistral.ai/terms/privacy-policy | Registered office in the EU; service providers outside the EU only with standard contractual clauses |
| Own or local model | you, or the provider you have entered | – | A local model in your own network does not leave your network |
Transfers to third countries: With OpenRouter, the data goes directly to a company in the USA for which no adequacy decision applies. This transfer is therefore based on your explicit consent (Art. 49(1)(a) GDPR). Please note: the level of data protection in the USA may be lower than in the EU, and authorities there may be able to access data without you having effective legal remedies. For Google, the adequacy decision on the EU-U.S. Data Privacy Framework applies. For users in the EU, OpenAI and Anthropic contract through their Irish companies and transfer data to the USA themselves; they are responsible for doing so.
Training via OpenRouter: For requests via OpenRouter, Triplato only requests model providers that, according to their own statements, neither store your inputs nor use them for training.
5. Permissions on your device
The app only asks for permissions you need for a feature, and only when you use that feature. You can revoke them at any time in the iOS settings.
- Calendar: The app reads events from the calendars you select to detect meals you will not be home for. It only evaluates whether an event overlaps with a mealtime. Event titles and details stay on your device; only the status "busy" is shared with the household.
- Camera: only for taking photos of recipes and dishes.
- Photos: To select photos, the app uses the iOS photo picker; it only sees the images you select.
- Notifications: for timers in cooking mode and reminders you set.
- Clipboard: The app only reads the clipboard when you tap "Paste".
6. Importing from web pages
When you import a recipe from a web page, the app retrieves the page directly from your device, just like a browser. The operator of the web page sees your IP address and technical details of your connection; their privacy policy applies. The app does not run any scripts from the page.
7. Purchase
The trial and purchase are handled via Apple's App Store; Apple's terms and privacy policy apply. Apple only provides me with aggregated sales figures without any information about you as a person.
8. Version check
At most once a day, the app retrieves a small file from my website triplato.app that specifies the minimum app version required. This allows me to ask you to update in the event of a serious security vulnerability. No data from the app is sent. As with any request, my hosting provider processes your IP address and the time in the server log (see section 11). The legal basis is my legitimate interest in the security of the app (Art. 6(1)(f) GDPR).
9. Crash reports and app statistics
If you have agreed in iOS to share analytics data with app developers (Settings → Privacy & Security → Analytics & Improvements), Apple provides me with crash reports and aggregated usage statistics. These contain no information that allows me to identify you. The legal basis is your consent given to Apple (Art. 6(1)(a) GDPR); you can withdraw it there at any time.
10. Contact by email
If you write to me, for example via "Send feedback" in the app, I process your email address and the content of your message in order to answer your request (Art. 6(1)(b) GDPR for questions about the app, otherwise point (f)). The app only pre-fills the app version and the iOS version; you see the message before sending it. I delete messages once the request has been dealt with, at the latest after 12 months, unless statutory retention obligations apply.
11. Website
The website triplato.app is hosted by ALL-INKL.COM – Neue Medien Münnich (Inhaber René Münnich, Hauptstraße 68, 02742 Friedersdorf, Deutschland). When you visit it, the hosting provider processes technically necessary data in server logs: IP address, date and time, page accessed, amount of data transferred, browser and operating system. This data is deleted after 7 days. The legal basis is my legitimate interest in a secure and functional service (Art. 6(1)(f) GDPR). A data processing agreement is in place with the hosting provider.
The website sets no cookies, uses no analytics or tracking tools and loads no third-party content, including fonts.
12. Children
Triplato is intended for shared use within families. Children can take part as members of a household; like all other data, their data stays on the household's devices and in its iCloud. I do not collect any data from children. AI features are only available to managers; the AI provider may require a minimum age for its account.
13. No automated decision-making
The app's suggestions, for example for the meal plan, are drafts that you can accept or change. No automated decision-making within the meaning of Art. 22 GDPR that produces legal effects concerning you takes place.
14. Your rights
Insofar as I process data about you (mainly for email contact and on the website), you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). To do so, write to hallo@triplato.app.
Right to object: Where I process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to that processing at any time on grounds relating to your particular situation (Art. 21(1) GDPR). I will then no longer process the data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
You control the data in the app yourself: you can export and delete it at any time.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for me: Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI), Lautenschlagerstraße 20, 70173 Stuttgart, www.baden-wuerttemberg.datenschutz.de.
15. If you live in Switzerland
The Swiss Federal Act on Data Protection (FADP) also applies to you. This policy applies accordingly, with the following additions:
- Countries to which data may be transferred: The website is operated by ALL-INKL.COM – Neue Medien Münnich (Inhaber René Münnich, Hauptstraße 68, 02742 Friedersdorf, Deutschland) in Germany (section 11). For the AI features, data goes to Ireland, France or the USA, depending on the provider you choose (section 4). The Swiss Federal Council has recognised Germany, Ireland and France as providing adequate data protection. For the USA, this applies only to companies certified under the Swiss-U.S. Data Privacy Framework (of the AI providers listed, currently only Google). For the other providers, the transfer is based on your explicit consent (Art. 17(1)(a) FADP); the providers themselves rely on standard contractual clauses.
- Health data: Allergies and intolerances are sensitive personal data. They stay on your devices and in your iCloud and are never sent to an AI provider (section 4).
- Your rights: In particular, you have the right of access (Art. 25 FADP), the right to receive or transfer your data (Art. 28 FADP), the right to rectification and erasure, and the right to object to processing. To exercise them, write to hallo@triplato.app.
- Supervisory authority: You can contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, edoeb.admin.ch.
16. Changes
I update this privacy policy when the app or the legal situation changes. The version published in the app and on the website applies; I will point out significant changes in the app.