Privacy

Last updated October 23, 2026

Nakiri keeps track of a household's kitchen: what's in the fridge, freezer and pantry, the shopping list and the recipes. It is run by Samuel Colao. This page says what Nakiri keeps about you, who else sees it, and how long it stays. Nakiri has no ads, runs no analytics or tracking, never sells anything about you, and never uses what you keep in it to train AI models.

What Nakiri keeps

• Your account: a username and your password, stored only as a hash that can't be turned back into the password, and which of the app's tips you've used, so they aren't shown again. Nakiri doesn't ask for your email, phone number or real name.
• If you sign in with Google or Apple: the account number it gives Nakiri and the email address it shares (Apple's may be a private address that forwards to you). Your first name, if it shares one, becomes your username. They're used only to sign you in; Nakiri sends that address nothing. With Apple, Nakiri also keeps a token Apple gives it, used only to tell Apple when your account is deleted or you unlink Apple, so Apple stops listing Nakiri under your Apple Account. An account made this way has no password until you set one.
• Your kitchen: the foods you add, with amounts, places and the day each came in; your shopping list; your saved recipes; the foods you want kept out of recipes; and what you bought, with prices and stores when a receipt shows them.
• Recipe ideas you report: when you tap Not a fan? Report on one of the chef's ideas, that idea, what you asked for, and your kitchen's foods and foods to avoid at that moment, kept so the suggestions can be made better.
• Home-screen widgets: only a hash of the key in each widget's link, which reads your shopping list and nothing else. Ended when you sign out of the app, change your password or delete your account. The phone keeps the list it last showed, for while it is offline.
• If you use the Nakiri phone app: a token that lets Nakiri send the app notifications, whether the phone runs Android or iOS, and its time zone, so they come at your own hour. Removed when you sign out of the app, change your password or delete your account. Also which notifications you turned off, and the day each was last sent.
• Assistants you connect: each one's name and what you allowed it, with only a hash of its key or of the sign-in tokens it holds (a key is shown to you once and not kept), plus a one-line record of each change an assistant makes.
• Usage records: when you used a feature that calls an AI service, and what that call cost. These keep each person within a daily limit.
• Signing in: one cookie that keeps you signed in. The server keeps only a hash of it. The app also remembers a few display choices on your device.
• Server logs: your IP address, the address asked for and the time, kept for fixing problems and stopping abuse, and cleared regularly.

Voice recordings and photos are not kept. They are sent to be turned into text or a list of foods, and only the result you choose to save is stored. What they were read into is held in the server's memory for up to an hour, so the app can still show it if your connection drops, and is then forgotten.

Who else sees it

• Your household. Everyone in your Nakiri kitchen sees and can change the same kitchen, list and recipes.
• Samuel Colao, who runs Nakiri, can see usage records, is emailed the username of each new account and how it was made, can reach the server to keep it running, reads the recipe ideas you report, and looks at a household's kitchen only to fix a problem someone in it reports.
• The services below, each only for its own job, under its own terms.
• A new owner, if Nakiri is ever sold or merged into another company. Your data would move to them only under this policy's promises, and the app would tell you first, so you could delete your account before it moved.
• The government or anyone else asking for your data, only when the law requires it, such as a valid subpoena or court order. Each request is checked to make sure it's valid, and only the data it actually covers is given. Nakiri tells you before sharing anything, unless the law forbids it. Requests are not answered for anyone else, including people in your household.

Services Nakiri uses

• OpenAI and Anthropic (AI models): the text of what you say or type, photos of receipts and food, the names of your foods to sort them into categories, and your foods, list and recipes (the chef's recent ideas too) when you ask for suggestions or a recipe check. Nakiri uses only one of the two at a time. Neither trains its models on what is sent through its API.
• Deepgram (speech to text): your voice recordings.
• Backblaze (backups): an encrypted copy of the database each night. Backblaze can't read it.
• Oracle Cloud (hosting): the server Nakiri runs on.
• Cloudflare (domain): directs nakiri.app to the server and forwards email sent to support. It doesn't see what you do in the app.
• Resend (email): sends Samuel an email when an account is made, with its username and how it was made: on the site, by whose invite, or with Google or Apple. Nothing else of yours goes through it.
• Amazon (shopping): if you tap Find on Amazon on your shopping list, Amazon gets that item's name as a search, with Nakiri's Associates tag so Nakiri may earn a commission on what you buy. Nothing else of yours is sent, and Amazon's own privacy policy applies once you're there.
• Google (sign-in and email): if you choose Continue with Google, Google tells Nakiri who you are, and sees that you signed in to Nakiri. Messages you send to support, and the emails about new accounts, arrive in a Gmail inbox.
• Apple (sign-in): if you choose Continue with Apple, Apple tells Nakiri who you are, sees that you signed in to Nakiri, and is told when your account is deleted or you unlink Apple.
• Firebase, Google's (notifications): if you use the Nakiri phone app, the token it gave your phone and the words of each notification, to deliver it, by Apple's service on an iPhone. The words say nothing of your kitchen beyond a meal's name.

Assistants you connect

You can let an assistant such as Muse, Claude or ChatGPT reach your kitchen, by signing in to Nakiri from the assistant or with a key you make in Nakiri. It can read, and if you allow it change, your kitchen, shopping list, recipes and foods to avoid. It never sees who else is in your household, your invites, keys or account. What the assistant does with what it reads is up to its maker, under its own privacy policy. Every change it makes is listed under Settings. You can revoke a key at any time, and the assistant is shut out on its next try.

What Nakiri receives from or sends to a connected assistant is used only to answer it and to make the changes it asks for. Nakiri never sells it, never passes it to anyone else, and never uses it to train AI models. An assistant's requests aren't sent to any AI service by Nakiri: they're answered from your kitchen directly.

How long things stay

• Your kitchen, list and recipes, and the ideas you report: for as long as your account exists.
• Recently deleted: things you delete can be put back for 30 days, then they're gone.
• What assistants changed: 30 days, and at most the newest 500 per household.
• Backups: nightly copies are kept on the server for 14 days and off-site for 30. The off-site copies are locked so that no one can delete them sooner. Something you delete can therefore stay in a backup for up to 30 days. Backups are used only to recover from a failure.

Deleting your account

Settings → Delete your account erases your account, and any Google or Apple sign-in linked to it. Your kitchen goes with it, unless someone else shares it, in which case it stays theirs. The usage records of what your AI calls cost are kept for the service's accounts, under "account" and a number, never your username. Copies in backups expire within 30 days.

You can also change what Nakiri keeps at any time in the app. For a copy of your data, write to support@nakiri.app.

Keeping it safe

Everything travels over HTTPS. Passwords, sign-in cookies, invites and assistant keys are stored only as hashes. Backups are encrypted before they leave the server. Each household's data is kept apart from every other's.

Children

Nakiri is not meant for children under 13, and doesn't knowingly keep anything about them.

Changes

If this page changes, the date at the top changes with it. A change that matters will be pointed out in the app.

Questions

Write to support@nakiri.app.