Privacy policy

Last updated: October 19, 2026

Bocal is a kitchen app: it keeps track of your food stock, your recipes and your shopping list. This page explains what data Bocal handles, why, and what you can do about it. The short version: no ads, no tracking, no selling of data. Without an account, everything stays on your phone.

Who is responsible

Bocal is made by an independent developer, who is the data controller for the Bocal app and this website. Contact: hello@bocal.me.

Using Bocal without an account

Your stock, recipes, shopping list, photos and taste preferences are stored only on your device. We don't receive them. Deleting the app deletes them.

Using Bocal with an account

An account is needed for Bocal Pro. When you have one, we store:

• Your email address and password. The password is stored hashed; we can't read it.
• Your Bocal data: stock, recipes, shopping lists, taste preferences (diet, foods to avoid, number of servings) and the photos you add. They are kept so your jar stays in sync and safe if you change phones.
• A daily count of your AI requests, to keep the service's costs under control. It holds only a number per day, not the content of the requests.

When you sign in, the data you created on the phone without an account moves into your account.

AI features (Bocal Pro)

When you use an AI feature (recipe ideas, reading a receipt, importing an Instagram recipe, planning your shopping), Bocal sends what that request needs to our server, which forwards it to Anthropic (the company behind Claude) to produce the answer. Depending on the feature, that can be the products in your stock, your taste preferences, a photo of a receipt or a dish, or the text of an Instagram post. Anthropic processes it to answer and, under its commercial terms, does not use it to train its models.

Don't photograph anything on a receipt you wouldn't want processed, such as a loyalty card number.

Instagram imports

When you share an Instagram post to Bocal, the app loads that public post directly from Instagram to read its caption and image. Instagram sees that request like any web visit, under its own privacy policy.

Subscriptions

Payments are handled by Apple; we never see your card details. We use RevenueCat to check whether your Bocal Pro subscription is active. RevenueCat receives your account's ID and your purchase history from Apple, but not your email.

Camera and photos

Bocal asks for camera and photo access only when you choose to take or pick a picture (a dish, a recipe, a receipt). It never reads your photo library on its own.

Service providers

• Supabase: accounts, database and photo storage.
• Anthropic: AI answers (Bocal Pro only).
• RevenueCat: subscription status (Bocal Pro only).
• Apple: App Store and payments.

Each one handles data only to provide its service to Bocal. Some of them are based in the United States; transfers rely on the safeguards they provide, such as the EU Standard Contractual Clauses.

Website

bocal.me uses no cookies and no analytics. It loads its font from Google Fonts, which sees your IP address when you visit.

How long we keep data

As long as your account exists. When your account is deleted, your Bocal data, photos and AI request counts are deleted with it. Backups held by our providers roll over within a few weeks.

Your rights

You can ask to access, correct, export or delete your data, or object to how it's used. Write to hello@bocal.me from your account's email address; we answer within a month. To delete your account, write to the same address and we'll delete it and all its data. If you're in the EU and unhappy with our answer, you can complain to your data protection authority (in France, the CNIL).

Children

Bocal isn't aimed at children under 15 and we don't knowingly collect their data.

Changes

If this policy changes, we'll update this page and its date. If the change is significant, we'll tell you in the app.