Privacy Policy
Effective 15 October 2026
Bittermuse doesn’t collect anything about you. Your recipe book stays on your iPhone, and the app sends something off it only when you ask it to.
What Bittermuse keeps, and where
Your recipes (names, ingredients, directions, photos, glasses, garnishes, and tags) and your settings are stored on your iPhone, in Bittermuse’s own storage. There is no account and no sign-in. There are no analytics, no advertising, no tracking, and no crash reporting. We, Bittermuse’s developer, run no server that receives your recipes, and we can’t see your book.
Bittermuse doesn’t sync your book to iCloud. If you back up your iPhone to iCloud or a computer, the backup includes Bittermuse’s data as it does other apps’, under Apple’s privacy policy.
Photos and the camera
When you add a photo to a recipe or import a card from Photos, Bittermuse sees only the photo you pick. The camera is used only to scan a card’s QR code, and the code is read on your iPhone. Saving a card to Photos adds the image to your library; Bittermuse doesn’t read the rest of it.
Recipe cards and card links
A card is an image of a recipe with a QR code. It goes wherever you send it from the share sheet, and nowhere
else. The QR code holds a link to this site’s /r page with the recipe written after
the #, in the part of the link called the fragment. For a picture made with AI, it holds the
picture’s style, details, and provider, never the picture or a key.
A browser never sends the fragment to a server. When someone without Bittermuse opens a card link, their browser loads the page and reads the recipe out of the link itself. This site is hosted on Cloudflare Pages, and Cloudflare keeps its standard request logs of each page load (such as the IP address, the browser, and the page asked for, without the fragment), under Cloudflare’s privacy policy. The site sets no cookies and runs no analytics.
AI pictures, only with your own key
Bittermuse can draw a recipe’s picture with OpenAI’s image model (ChatGPT) or Google’s (Nano Banana). This is off unless you add your own API key from one of them in Settings.
- When you tap Generate, Bittermuse sends the recipe’s name, ingredients, glass, color, garnish, style, and details to the provider you chose, under your own account. Of the ingredients, only their names go, not the amounts. Restyle Photo sends the photo too, redrawn at no more than 1536 pixels on its long side, so its location and camera details stay behind. Nothing else from your book is sent.
- Each request goes straight from your iPhone to the provider, with your key. It passes through no server of ours, and we never see what you send or the picture that comes back.
- Before the first request to each provider, Bittermuse asks whether to send it. Settings then reads “Sending recipes to OpenAI: allowed” (or Google) with a Revoke button; after Revoke, the next Generate asks again.
- Your key is stored in the iOS Keychain, on this iPhone only, and is never synced. It leaves the iPhone only in requests to its own provider (to make a picture, or when you tap Test Key), and never appears in a card.
- What you send is handled under the provider’s terms and privacy policy, for your account: OpenAI’s privacy policy and Google’s privacy policy.
Tag suggestions
On an iPhone with Apple Intelligence turned on, Bittermuse suggests tags for a recipe with Apple’s on-device model. The recipe never leaves your iPhone for this.
The Library
The Library leaves out The Savoy Cocktail Book where it’s still in copyright. To know where that is, Bittermuse reads your App Store country (or, without one, your iPhone’s region) on your iPhone, and sends it nowhere.
Links to other sites
The Library’s credits, its scans of the 1930 Savoy Cocktail Book, and the key guides open other sites (Wikipedia, EUVS Vintage Cocktail Books, OpenAI, Google) in Safari. Their own privacy policies apply there.
Keeping and deleting
- Deleting a recipe deletes it from your iPhone.
- Remove, under a key in Settings, deletes the key from the Keychain. Revoke withdraws your permission to send recipes to that provider.
- Deleting the app deletes your recipes, photos, and settings. iOS keeps Keychain items after an app is deleted, so if you install Bittermuse again, its first launch deletes any keys and permissions the old copy left behind.
- Recipes and photos already sent to OpenAI or Google are kept under their policies; you can manage them through your account with that provider.
Children
Bittermuse is a cocktail recipe book for adults, and isn’t directed at children under 18 or under the legal drinking age where they live. It collects no personal information from anyone, children included.
Contact
Questions about this policy or your data: [email protected].