GoodMeasure Privacy Policy

Last updated: 12 November 2026

GoodMeasure is published by AlmondConfluent. This policy explains what information the app handles and the choices you have. Contact: almondconfluent@gmail.com.

The short version

Information the app handles

Recipes, settings, and checkmarks

Recipes you save, tags, ingredient checkmarks, appearance and language settings, and the last search/filter state are stored in the app's private storage on your device. You can delete individual recipes in the app, or remove all local data by clearing the app's storage or uninstalling it. The app's export feature writes a recipe-book file to a location you choose; that file is then under your control.

Optional account and cloud backup

You can use GoodMeasure without an account. If you create one with an email address and password, or with Google Sign-In, Firebase Authentication processes your email address, a Firebase user identifier, your sign-in provider, and whether your email is verified. If you use Google, Google also provides the name and profile picture associated with the scopes the app requests; GoodMeasure uses the email address to identify your account and does not display the name or picture.

When you choose Back up to cloud, or turn on automatic daily backup, the app stores the text of your recipe book in Google Cloud Firestore under your user identifier: recipe titles and content, tags, ratings, favourites, cooking history, source links, adaptation choices, and external recipe-page image URLs. Photo files you add to recipes are not uploaded. Backups are private to your account by security rules. Restoring a backup replaces the recipes on the device; photos already stored locally are not included in the restore.

To tell you when an email has no GoodMeasure account before you share a recipe or sync a shopping list, GoodMeasure keeps a lookup-only directory in Cloud Firestore with one entry per account email. The entry holds only a creation time. The directory cannot be listed in bulk; a signed-in user can only look up one exact address at a time. The entry is deleted when the account is deleted.

Shared shopping lists

If you share your shopping list with an email address, Cloud Firestore stores the list, your account email as its owner, the invited email address, and the user identifiers of people who accept. The invited person can read the list before accepting, and accepted members can add, check off, and delete items. Other members can see the owner's email address, the invited email addresses, and the items. Do not put sensitive information on a shared list. You can stop using cloud sharing by signing out or deleting the list; deleting your account removes your owned list and your membership of other people's lists.

Recipes shared with another account

When you choose Share with another user and enter an email, Cloud Firestore stores the recipe title and content, tags, source link, adaptation choices, page image URL, your account email, and the recipient's email. Personal metadata (rating, favourite, cooking history, ingredient checks) and device photos are removed before sending. The recipient sees the recipe in the app and can view, save, or discard it; saving creates a copy in their local recipe book. The pending share is deleted when they save or discard it, or when either account is deleted. It is not a public link and is not indexed by search engines.

Loading recipe pages

Some websites cannot be read directly. When that happens, the app loads the page you asked for in a browser built into the app, out of sight, and reads the recipe from it. That page loads from the website as it would in any browser, so the site and the services it uses can see your IP address and can store cookies in the app, including to remember that you passed a security check. Those cookies stay on your device until you clear the app's storage or uninstall it. The page is then handled in the same way as any other recipe page.

Unsaved adaptations

Recipes you have adapted but not yet saved or discarded, and links or text still waiting to be adapted, are kept on your device so they are still there when you reopen the app.

Bug reports

If you use Report a problem, GoodMeasure stores the text you write, the page you were on, the app version and build number, device model, Android version, and device language in Google Cloud Firestore. Reports are create-only from the app and readable only by the developer; they are not linked to your account and are not used for advertising. Please do not include personal information in a report. Reports are kept until they have been reviewed and are no longer needed for triage.

Deleting your account and cloud data

Use Settings → Account → Delete account in the app. The app asks you to confirm with your password or Google, then deletes your cloud backup, your account-directory entry, the shopping list you own, your membership of and invitations to other lists, recipe shares you sent or received, and your Firebase Authentication account. Bug reports are anonymous and are not linked to your account, so they are not removed by account deletion. Recipes and photos stored only on the device remain until you delete them or uninstall the app. If you cannot use the app, follow the instructions at goodmeasure-app.web.app/delete-account or email almondconfluent@gmail.com from the account's address. We aim to complete verified requests within 30 days.

Recipe adaptation with AI

When you adapt a recipe, the app sends the recipe webpage's content, its source URL, and your selected instruction language, country, and shopping language to GoodMeasure's server, a Google Cloud Function. The server checks your plan's limits using your Firebase authentication identifier (anonymous if you are not signed in, otherwise your account identifier) and App Check attestation, then sends the recipe text and those choices to Anthropic's Claude API, or to Google's Gemini API on Vertex AI if Claude is unavailable. Your account identifier, email address and IP address are not sent to Anthropic or to Gemini.

Anthropic and Google process this text to produce the adaptation. Under their commercial terms they do not use it to train their models, and they keep it only for a limited time for safety and abuse monitoring. Do not submit sensitive information. The server does not store your recipes; it only records how much AI processing each request used.

Plans and subscriptions

To apply the limits of each plan, Cloud Firestore stores how many new recipes your sign-in has adapted and how much AI processing (measured in tokens and priced in US dollars) it has used this month and today, together with your plan: when your free period started and how long it lasts and, if you subscribe, when your paid period ends. If you subscribe, Google Play handles the payment and we do not receive your card details. We ask Google to confirm that the purchase belongs to your account and when it expires, and the app sends Google a one-way code derived from your account identifier so the two can be matched. Deleting your account removes these records, apart from the usage record described next.

So that allowances and the free month of Premium are not started again by deleting an account or reinstalling the app, the server also keeps this month's usage figures, and a note that the free month has been used, under a one-way code: one derived from your verified email address when you are signed in, or, without an account, from the identifier Android gives GoodMeasure on your phone (the app sends only a one-way code of that identifier, never the identifier itself). The codes cannot be turned back into your email address or the phone's identifier, are not linked to your recipes, and are used only to apply these limits. They are kept after account deletion for that purpose.

Tips

If you choose to leave a tip, Google Play handles the payment. We do not receive your card details. A tip does not unlock any feature.

Grocery affiliate links

For supported shopping countries, a saved recipe or your shopping list can show a Shop online action. When you tap an item, the app opens that supermarket's website and includes the item's name in the search URL. Only links marked as affiliate links can earn us a commission. The retailer and its affiliate network may process your IP address, device information, cookies, and purchase information under their own privacy policies. We may receive commission reports or aggregate information about qualifying purchases; we do not receive your payment-card details. Tapping the link is optional.

Recipe webpages

The app fetches the recipe page directly from the website whose URL you enter. That website may see your IP address, user agent, and request time, just as it would if you visited it in a browser. We do not control those websites.

How information is used

We use information to:

Sharing

We do not sell your personal information. Information is shared with:

Retention

Recipes, settings, and checkmarks stay on your device until you delete them, clear the app's storage, or uninstall the app. Cloud backups and shared-list data stay in Cloud Firestore until you delete them or delete your account. A pending recipe share stays until the recipient saves or discards it, or until either account is deleted. Deleting your account removes your backup, your owned shopping list, your memberships and invitations, your sent and received recipe shares, and your authentication record as described above. Google and Anthropic may retain limited logs and backups under their own policies and the terms of their services. We do not maintain a separate GoodMeasure recipe database.

Your choices and rights

Children

GoodMeasure is not directed to children under 13 (or the higher minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided information, contact us.

International transfers

Google and its service providers may process information in countries other than yours, including the United States, using safeguards described in Google's privacy policy.

Security

Recipe data is kept in Android's app-private storage, and cloud data is protected by Firebase Authentication and Firestore security rules that limit each backup to its owner and each shared list to its owner, accepted members, and invited email addresses. Network requests use HTTPS. Passwords are handled by Firebase Authentication and are not stored by GoodMeasure. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Changes

We may update this policy when the app or legal requirements change. The updated date at the top will change, and material changes will be communicated in the app or store listing where appropriate.

Contact

AlmondConfluent
almondconfluent@gmail.com