Privacy Policy

Last updated: June 3, 2026.

Data entered in the app

Receitorio lets users register information such as recipes, ingredients, packaging, categories, establishments, costs, production, purchases, inventory, sales, deleted items, and confectionery settings. This data is used to provide the app's features and remains under the user's control.

Account, profile, and authentication

Sign in with Apple is optional. When users use this feature, the app may store the opaque identifier returned by Apple, as well as the name and email provided by Apple when available. Users can also keep a local profile without Sign in with Apple. This data is used to identify the profile inside the app.

Sign in with Apple on the website

On the website, the subscription and account pages use Sign in with Apple to link a purchase made on the web to your account. When you sign in, Apple issues an identity token that is verified on our servers only to confirm it is authentic. From that token we use only Apple's opaque identifier, which is needed to locate your access; the website does not create its own accounts, never sees your password, and does not keep an account database. When Apple provides a name or email on first sign-in, it may travel in the token, but the website does not store it.

Storage and iCloud

App data may be stored locally on the device. When iCloud sync is available and enabled for the user's Apple account, data may be synced through the user's private iCloud, subject to Apple's terms and policies. Simple settings may be synced through iCloud key-value storage (NSUbiquitousKeyValueStore). Receitorio does not use its own server to store the app's main data.

Purchases, subscriptions, and unlocks

Purchases can be made in two ways. Through the App Store, purchases, subscriptions, free trials, cancellations, and refunds are processed by Apple. Through the website, the purchase is processed by RevenueCat (Web Billing) together with Stripe, which handles checkout and payment processing. In both cases, Receitorio does not receive complete card or payment data: that data is handled by Apple or Stripe depending on the channel. RevenueCat receives a user identifier (based on Apple's opaque identifier) and purchase and subscription status, used to unlock, restore, or restrict paid features. A purchase made on the website unlocks access in the app when you sign in with the same Apple ID.

Camera, photo library, files, and local network

The app may request camera access to scan invoices, QR Codes, and barcodes. The app may open the system photo picker so the user can choose images from the library, without broad access to the photo library. The app may request file access when the user imports or exports data. The app may request local network access to transfer data directly between nearby devices running the same version of the app. Users can manage permissions in system settings.

Online invoice and product lookups

When the user chooses to scan or look up an invoice, QR Code, NFC-e, or barcode, the app may send the invoice key, NFC-e URL, barcode, or related terms to lookup services and public or third-party databases to automatically fill in data before user review. These services may include ConsultaDANFE, official NF-e/NFC-e pages from state tax authorities, Open Food Facts, and GTINHub. Users can review, edit, or enter data manually whenever they prefer.

Diagnostics and usage metrics

Receitorio uses TelemetryDeck to understand app usage at an aggregated and anonymous level. The identifiers sent to TelemetryDeck are processed in a way that does not allow individual users to be tracked across devices or services.

Website, cookies, and analytics

The Receitorio website may use cookies and analytics tools, such as Google Tag Manager and Google Analytics, to measure visits, understand accessed pages, and improve product communication. When required, the website presents consent controls for privacy preferences.

Contact form and support

When you use the website's contact form, we collect the name, email, and message you provide in order to respond to your support request. This data is sent to our support message processing service. To reduce spam and abuse, the form uses Cloudflare Turnstile, which may process technical signals such as IP address and browser information to tell humans from bots.

Data sharing

We do not sell users' personal data. Data may be processed by service providers necessary for the operation of the app and website, such as Apple (sign-in, App Store, and iCloud), RevenueCat and Stripe (website purchases and subscriptions), Cloudflare (website hosting and contact-form protection), Google (website analytics), and the online lookup services described in this policy. Some of these providers may process data outside Brazil; in those cases, we seek to ensure processing complies with applicable law. These third parties process the data according to their own policies and the applicable purpose.

Retention and deletion

Data entered in the app remains while the user keeps that data on the device, in iCloud, or in associated backups. Users can delete all data inside the app, which removes local app data and syncs the removal if iCloud is active. Additional requests can be sent through the contact available here.

Data subject rights

Under applicable law, users may request access, correction, confirmation of processing, portability, anonymization, blocking, deletion, or information about sharing of their personal data. Requests must be sent through the contact available here.

Security

We adopt reasonable measures to protect data processed by Receitorio, including the use of local storage protected by the system when available. Even so, no system is completely immune to failures, attacks, or unavailability. Users should keep their devices, Apple account, and credentials protected.

Children and teenagers

Receitorio is not directed to children. We do not intentionally collect personal data from children.

Changes to this policy

We may update this Privacy Policy to reflect changes to the app, website, legal requirements, or operational practices. The version published on this page will be the current version.

Contact

Privacy questions can be sent through the contact available here.

This Privacy Policy explains how Receitorio handles personal data. The app is developed and distributed by Rafacst Consultoria LTDA, registered in Brazil under CNPJ 66.424.919/0001-10.