Your family's names never reach the AI

Servi is a personal, family-scale app, and it handles very little. Here is all of it.

What stays on your device

Your recipe library, week plan, shopping list, cooking notes and family roster are stored on your phone or iPad. They are not uploaded to us for backup. Deleting the app clears that device; with Servi Plus sync on, the copy in your own iCloud stays until you remove it there.

Recipe titles, their ingredients and categories, and the meals planned for the coming fortnight are also offered to your device's own search, so you can find a recipe from the Home Screen. That index is built and kept by iOS on the device — your cooking notes and the steps are never part of it, and you can turn the whole thing off in Settings.

Your library stays on your device — with Servi Plus it also lives in your own private iCloud and syncs between your iPhone and iPad, never touches our servers, and you can export everything any time.

Names are replaced before anything is sent

When you use Ask or Discover, the app sends your question along with the context needed to answer it — the titles in your library, what's planned this week, and your household's allergies and food preferences.

Names are not part of that. Each family member's name is swapped for a placeholder ("P1", "P2") before anything leaves the device, and the real names are put back on your device when the answer is shown. The copy Google's Gemini API processes says that someone in your household cannot eat peanuts. It never says who.

Your phone loads the recipe page, not our server

When you import from a link, your device fetches the page and sends us the contents to read. Our server does not visit recipe sites itself (a TikTok link is the exception: our server asks TikTok for the caption), and nothing about the page is kept afterwards — the finished recipe is saved on your device only.

When you bring in recipes from another recipe app and your device doesn't recognise its export format, up to 15 sample recipes (the first five from each of up to three files) are sent, with a free account as well as with Servi Plus. Photos are never sent; the samples can include image web addresses, the author and the source link, and each piece of text is cut to 500 characters, which our server enforces. They are sent so our server can check them against the formats it already knows. That check uses no AI and nothing is kept. With Servi Plus, if no known format fits, the samples are sent once to learn it, and if you choose to, each imported recipe is sent once to be enhanced. What we keep is a description of the format, never the recipes, and it is deleted after a year without use.

Also with Servi Plus, recipe documents you import (PDFs, text files) are sent to find and read the recipes in them, and are not stored afterwards. Scanned pages are read on your device first: text recognition happens on your iPhone, and only the recognised text is sent.

No ads, no tracking, no data brokers

There is no advertising in the app, no advertising identifier is read, no profile is built about you, and nothing is sold or shared with third parties for their own purposes. The app does not track you across other apps or websites.

What we do collect

Being straight about this is the point of the page. Servi has no sign-in, so we do not collect your name or email address. To keep your credits, family links and shared list working, the app sends Apple's signed record of the app's installation on your Apple Account; its identifier stays the same for your Apple Account, identifies the installation rather than you, and is what our server keys your data on. (If you used Servi before 21 October 2026 and had an account, our server forgets the email address you gave the first time the updated app talks to it, and on 15 November 2026 at the latest.)

The app also reports crashes through Firebase Crashlytics, without that identifier, and Google keeps them for 90 days. Basic usage events such as "a recipe was added" or "the week was changed" go to Firebase Analytics only if you turn them on in Settings → Privacy. That is diagnostics, not advertising, and it is the one thing on this page that is a trade: it is how a bug that only happens on somebody else's phone ever gets fixed.

Family links

With Servi Plus, each family member gets a private web link for rating meals, which needs no account and no app. That page shows the household's first names, the meals planned for the next few days, and the ratings already left. Anyone holding the link can see that much and can rate as that member, so treat it like a shared photo album link. You can replace any link at any time from Settings, which immediately invalidates the old one.

Allergies are never part of it. What goes to that surface is a first name and a few meal titles — nothing about who can eat what.

Leaving

Export your whole library to a file whenever you want, from Settings. Delete My Data removes everything our server holds for your Apple Account. That is permanent. Deleting the app clears that device; with Servi Plus sync on, the copy in your own iCloud stays until you remove it there.