This Privacy Policy explains how we collect, use, store, protect, and share your personal information when you use the Quillo application. It's important that you read this entire policy, but here's a summary to get you started.
Quillo is a food technology app developed by Reisen AI Labs Ltd, a company registered in England and Wales. We built Quillo to solve a genuinely frustrating problem: you do a big shop, you put it all in the fridge, and then you have no idea what to make. By the end of the week, things go off and you throw food away.
Quillo solves this in two ways. You can scan any grocery receipt and the app reads the ingredients you bought and generates personalised recipes from exactly what is in your kitchen. Or you can browse any recipe in the world, find something you want to make, and the app builds a shopping list of everything you need. The more you use it, the better it understands your preferences.
Our services include the Quillo mobile application available on iOS and Android, our website at quillo.co.uk, and any additional features we introduce over time. When we say "services" in this policy, we mean all of these things together.
We are registered with the Information Commissioner's Office (ICO) as a data controller.
We collect information in three ways: information you give us directly, information we collect automatically, and information we receive from other sources.
If you sign in with Apple or Google, we receive basic profile information — name and email — to create or log into your account.
We need a lawful basis under UK GDPR for processing your personal data. Here is how we use your information and the basis we rely on.
We use your information to process receipt scans, generate personalised recipes using AI, enable recipe browsing and shopping lists, personalise your feed based on your preferences and scan history, sync your data across devices, and send essential account notifications. Legal basis: Contract (Article 6(1)(b)).
We monitor for bugs, crashes, and fraudulent activity to keep the app reliable for everyone. Legal basis: Legitimate interests (Article 6(1)(f)).
We use anonymised and aggregated usage data to understand how people use the app and to develop better features. This data cannot identify you individually. Legal basis: Legitimate interests (Article 6(1)(f)).
We use device identifiers to enable AdMob advertising for free tier users. You can opt out through your device settings. Subscribing to Premium removes all advertising. Legal basis: Legitimate interests (Article 6(1)(f)); Consent (Article 6(1)(a)) for personalised advertising where required.
With your explicit, separately obtained consent, we include anonymised and aggregated purchase pattern data in our commercial data programme. This data contains no personally identifiable information, cannot identify you individually, and is always aggregated across thousands of users before being shared with food industry partners or supermarket businesses.
You can opt in or out at any time through Settings → Privacy → Commercial Data. Opting out does not affect any feature of the app. Legal basis: Explicit consent (Article 6(1)(a)).
We do not sell your personal data. Here is when and how we do share information.
When you scan a receipt or ask for recipe suggestions, you are asking us to send that data to our processing services. We only share your data with third parties as necessary to deliver the features you are actively using.
We share data with companies that help us run Quillo. They process data only on our instructions under data processing agreements:
We may disclose information if required by law, a court order, or a regulatory authority. Where permitted, we will attempt to notify you first.
If we believe in good faith that disclosure is necessary to prevent death or serious harm, we may share information.
If Reisen AI Labs Ltd is acquired or merges with another company, your data may transfer as part of that transaction. We will notify you and your rights will be protected.
We may share aggregated, anonymised statistics that cannot identify you — for example, how many recipes Quillo users have generated or what the most scanned supermarket is.
We keep your data for as long as we need it for the purpose we collected it for. Receipt images are deleted automatically after 90 days. Account data is retained while your account is active and for a reasonable period afterwards in case you wish to return.
We take security seriously. Here is what we do to keep your data safe.
If there is a data breach that could affect your rights, we will notify the ICO within 72 hours. If there is a high risk to you personally, we will contact you directly as quickly as we can.
No system is perfectly secure and we cannot guarantee absolute security. But we take every reasonable step to protect your data and will always be transparent if something goes wrong.
We believe you should have real control over your information — not just a policy that says you do. Here is how.
Go to Settings → Dietary Preferences to view, update, or completely remove your dietary data at any time. Removing this data does not stop you from using Quillo.
Go to Settings → Privacy → Commercial Data. You can change your mind as many times as you like. There is no difference in what the app can do for you whether you are in or out.
On iPhone: Settings → Privacy & Security → Tracking → turn off Allow Apps to Request to Track.
On Android: Settings → Privacy → Ads → Opt out of Ads Personalisation.
Or subscribe to Premium — this removes all advertising from Quillo entirely.
You have the following rights regarding your personal data. There is no charge to exercise any of them and we will respond within 30 days.
We are based in the United Kingdom. However, several of our service providers are based in the United States, which means your data may be transferred outside the UK.
Every international transfer is covered by appropriate safeguards — Standard Contractual Clauses (SCCs) approved by the ICO, or the EU-US Data Privacy Framework where applicable.
US-based processors that may receive your data include: Supabase, OpenAI, Anthropic, RevenueCat, OneSignal, and Sentry. All have signed data processing agreements with us.
You can request more details about transfer safeguards by emailing hello@quillo.co.uk.
Quillo integrates with third party services to deliver recipe content and features. These include:
These services have their own privacy policies. When you use features powered by them, their policies apply to data they handle on their own platforms. We only control what we send to them as described in this policy.
Quillo is operated by a UK company and this Privacy Policy complies with UK GDPR and the Data Protection Act 2018.
If you are based in the European Economic Area, the EU GDPR may also apply to you. The rights described in Section 8 are consistent with both UK and EU GDPR.
If you are based in the United States, California's CCPA may give you additional rights. We honour data access and deletion rights for all users regardless of location.
If you are based in another jurisdiction, contact us at hello@quillo.co.uk with any questions about your specific rights.
We will update this Privacy Policy as Quillo grows and as legal requirements change. We always update the effective date at the top when changes are made.
For significant changes — a new type of data, a new third party processor, a change to how we use your information — we will send an email to your registered address and show a notice in the app at least 30 days before the changes take effect.
For smaller updates that do not materially affect your rights, we will update the policy quietly. Continuing to use Quillo after changes take effect means you accept the updated policy.
13. Contact Us
If you have any questions about this Privacy Policy, how we handle your data, or want to exercise any of your rights — we would love to hear from you. We are a small team and we take every message seriously.