Legal

Privacy Policy

Effective Date: April 20, 2026 · Last Updated: April 20, 2026

The short version: LockPot doesn't collect any personal data or phone home to its developer. No analytics, no crash reports, no tracking. Your recipe and meal-plan data flows between your device and the Mealie server you configure. When you import a recipe by URL, your device may additionally fetch the page directly from that recipe website if your Mealie server can't scrape it. Optional iCloud sync is described below.

Overview

LockPot ("the App") is a native macOS, iOS, and iPadOS application that serves as a client for Mealie, a self-hosted recipe manager that you or a third party operate. This privacy policy describes how the App handles information.

Information We Collect

LockPot does not collect any personal information. The App does not:

Collect your name, email address, or any other identifying information
Transmit any data to the App developer or third parties (aside from the Mealie server and recipe websites you explicitly configure, see below)
Use analytics, crash reporting services, or tracking tools
Access your contacts, photos, location, or any other system data beyond what you explicitly share (e.g. a photo you pick for a recipe or timeline event)
Create user accounts managed by the developer, or require registration with the developer
Collect or process any payment or financial information

Network Data

LockPot communicates with exactly two kinds of network endpoints:

Your Mealie server. You configure its URL and API token in the App. All recipe, meal-plan, shopping-list, cookbook, and timeline data flows directly between your Device and the Mealie instance you chose, never through any server operated by the App developer. Your Mealie server URL is never shared with anyone else.
Recipe websites you import from. When you use the Import from URL feature, the request to scrape the page is sent by your Mealie server. If Mealie's server cannot reach the page (for example, because the site is behind Cloudflare), the App falls back to fetching the page from your Device with a standard Safari user-agent and sending that HTML to your Mealie server for parsing. You control when these requests happen by choosing to import a URL.

No telemetry, usage data, crash reports, or diagnostics are transmitted to the App developer at any time.

On-Device AI Features

Ingredient parsing and AI-powered tag / category suggestions use Apple's on-device Foundation Models framework, available on compatible Apple devices running macOS 26 / iOS 26 or later with Apple Intelligence enabled. All processing happens locally on your Device. No ingredient text, recipe content, or other User Data is transmitted to Apple, to LockPot's developer, or to any third-party AI service. On devices without Apple Intelligence support or with it disabled, these features are hidden; no cloud AI service is ever used as a fallback.

Data Storage

The App maintains a local database on your Device for offline use (a SQLite file at ~/Library/Application Support/LockPot/lockpot.sqlite). It contains your recipe cache, hero images, meal plans, shopping lists, sync metadata, and app preferences. This database never leaves your Device unless you explicitly export it via the Export & Import feature.

If you enable iCloud Sync, your preferences (sort order, display mode, favorites filter) sync across your Apple devices via Apple's iCloud Key-Value Store, in accordance with Apple's Privacy Policy. Your server URL and API token are stored only on your device, in the Keychain, and are never synced to iCloud.

iCloud Sync can be turned off at any time in Settings → iCloud Sync. No configuration data or recipe content is ever transmitted to the App developer.

Third-Party Services

LockPot does not integrate with any advertising networks, analytics platforms, crash reporters, or third-party cloud services, except for Apple's iCloud, which is used solely for optional preference sync as described above, and solely when you opt in.

Children's Privacy

LockPot does not knowingly collect any information from anyone, including children under the age of 13.

Changes to This Policy

If this privacy policy changes in a future version of the App, the updated policy will be published at this URL and the "Last Updated" date above will be revised. Continued use of the App after any changes constitutes acceptance of the updated policy.

Contact

Questions, issues, and feature requests are tracked publicly at the project's GitHub repository.