What we never have
Everything you put into the Heirloom app — the photographs of the cards, the transcriptions, the notes in the margins, the provenance lines, and the book you set from them — is stored only on your device, behind your device passcode and biometrics.
There is no Heirloom account, no cloud sync, and no server of ours holding a copy. We cannot read your family's recipes, cannot recover them, cannot export them on your behalf, and cannot be compelled to produce them, because they never touch infrastructure we operate. When you export the file or print the book, that copy goes where you choose and nowhere else.
What we do collect
- Email address — only if you join the register on this website. Used once, to tell you Heirloom has shipped. This is the only personal data our servers hold.
- Payment information — handled by the App Store or by Stripe. We never see or store your card number.
- Standard website server logs — IP address, user-agent and request paths, kept no longer than thirty days for security and debugging.
What we do not do
- No advertising anywhere in the app, so no advertising identifiers and no ad SDKs to carry them.
- No analytics SDKs and no third-party trackers inside the app.
- No selling, renting or sharing of personal data, at any price, to anyone.
- No training of any model on your family's recipes, your photographs, or your notes. We do not have them to train on.
- No profile of your household, your dishes, or your relatives, because we never receive one.
The photographs of the cards
Card images are read from your camera or your photo library with your permission, and they stay in the app's own storage on the device. They are not uploaded, not backed up to us, and not processed on any machine of ours.
If your phone backs itself up to your own iCloud or Google account, the app's data goes with it, under your own account and your own encryption — an arrangement between you and that provider, which we are not party to and cannot read.
This website
The register form on this site sends the email address you type, deliberately, and only when you submit it. There is no analytics script and no advertising tag on these pages.
A referral parameter in the link that brought you here may be recorded alongside a signup so we know which piece of writing was worth doing. It is not an identifier, and it is not attached to anything else about you.
If we shut down
Nothing happens to your cookbook. The app works offline and does not depend on our servers; what you have transcribed exports to a plain file and a print-ready book, both readable with no software of ours involved.
This is the sheet's only real promise, and it is deliberately not a promise: it is what the design already forces to be true. It does not stop working if the company does.
Your rights
Ask us to delete your register email at any time — write to [email protected] and it goes, promptly, with no questions asked.
For the cookbook itself there is nothing for us to delete and nothing for you to request: remove the app, or delete recipes inside it. Deletion is in your hands because possession always was.
Children
Heirloom is not directed at children and we do not knowingly collect personal data from anyone under 13, or under 16 in the European Union.
Changes
If we make a material change we will update this sheet and the effective date at its head, and write once to anyone on the register. We will not weaken the on-device promise, because it is the product.
Contact
[email protected] — Ruzylo Cloud, LLC, Thousand Oaks, California.