Privacy Policy
Last updated: 16 October 2026
Shakeo ("the app", "we", "us") is a free cocktail recipe app for iOS published by Webgrup, Türkiye. This policy explains what information the app handles, why, and what choices you have.
In Short
- Shakeo has no accounts and no sign-up. Your bar, favorites, collections, own recipes, notes and shopping list stay only on your device.
- The app is for adults. You must be 18 or older to use it.
- Optional AI features (ingredient recognition from a photo, suggestions, substitutes, recipe import) work through a Webgrup server. Only after you give your explicit consent, what you submit is sent through our server to Anthropic (Claude) for processing. Our server does not store or log that content.
- To enforce the daily AI limit, our server keeps a random device ID, a device-integrity key and daily usage counters. These contain no name, e-mail or phone number, and the ID is not your advertising ID.
- The app is free and shows ads through Google AdMob.
- There are no in-app purchases or subscriptions.
Who Is Responsible
Shakeo is published by Webgrup, Türkiye. Contact: [email protected]. Webgrup is the data controller for the data handled by its AI server (device ID, counters, technical logs and, in passing, the content you send to an AI feature). Google, Anthropic, Apple and Cloudflare process data under their own policies, as described below.
Data That Stays on Your Device
Stored locally in the app's own storage:
- your bar (ingredients you own), custom ingredients, favorites, collections, your own recipes, notes, ratings and shopping list;
- settings (units, language, theme, alcohol-free mode, ad consent, age confirmation, AI consent);
- backup files, PDFs and CSV files you create. They are written on your device and go to the place you choose in the share sheet. We never receive them.
We cannot see, access or recover this data. Deleting the app deletes it. A device backup you make yourself (for example iCloud) may include it, under that provider's rules.
Permissions and Why We Ask
| Permission | Purpose |
|---|---|
| Camera | Only to take a photo for AI ingredient recognition. The app does not use the camera otherwise. |
| App tracking (iOS) | Only to show more relevant ads. See "Advertising". |
The app does not ask for access to your photo library (when you pick a photo, the system picker hands the app only the photo you choose), your location, microphone, contacts or motion sensors. You can revoke any permission in your device settings.
AI Features (Optional)
AI features are off until you read the notice shown on first use and accept it. They are never required to use the app.
What is sent, depending on the feature you use:
- Ingredient recognition: up to 3 photos you take or choose. The app shrinks and re-encodes each photo on your device before sending, which drops embedded metadata such as location.
- Suggestions: the ingredients in your bar and your preferences.
- Substitutes: the recipe, the missing ingredient and the ingredients in your bar.
- Recipe import: a web address (URL) or text you paste. For a URL, our server downloads the page and extracts the recipe text.
How it is handled:
- The app sends the request over an encrypted (HTTPS) connection to the Webgrup AI server, which sits behind Cloudflare.
- The server forwards the content to the Anthropic API (Claude) to produce the result and returns the result to your device.
- Our server keeps no copy of your photos, text, URLs or results, and does not write them to logs.
- Anthropic processes the content as our service provider and is subject to Anthropic's own policies, including how long it may retain API data. See https://www.anthropic.com/legal/privacy .
Please do not submit photos of people, or personal or confidential information. AI results may be wrong; see the Terms. You can withdraw your AI consent in the app's Settings at any time; the AI features then stay locked until you accept again.
Data Our Server Keeps
Only for the daily AI limit and abuse prevention:
| Data | Purpose | Retention |
|---|---|---|
| Random device ID (a UUID stored in the iOS Keychain; not the advertising ID) | Count your daily AI uses, link rewarded-ad credits to your device | Deleted after 90 days of inactivity |
| Device-integrity key (Apple App Attest public key) | Check that requests come from a genuine copy of the app on a genuine Apple device | Deleted after 90 days of inactivity |
| Daily usage counters (free uses, credits earned, total) | Apply the daily limit | Deleted after 90 days of inactivity |
| Technical log: time, feature used, success or error code, response time, token counts, estimated cost, and a hash of the device ID | Fix errors, watch costs, detect abuse | 30 days |
Technical logs contain no photos, text, URLs, results or IP addresses. Your IP address is used only momentarily, in the network layer (Cloudflare) and in our rate limiter, to slow down abusive traffic. We do not store it.
Advertising
Shakeo is free and shows banner, interstitial and rewarded ads through Google AdMob (Google Mobile Ads SDK). AdMob may collect and use your device's advertising identifier, IP address and ad interaction data to deliver, measure and limit ads, and to prevent fraud. For how Google uses data, see https://policies.google.com/technologies/partner-sites .
- iOS: the app asks for App Tracking Transparency permission. If you decline, only non-personalized ads are shown.
- EU/EEA, United Kingdom and Switzerland: a consent form from Google's User Messaging Platform (UMP) asks for your choice. You can change it later in Settings ("Manage ad consent").
- Rewarded ads: you can watch a video to get extra AI uses. To confirm that you watched it, the app gives AdMob your random device ID as the user ID, and Google then tells our server that the reward was earned (server-side verification). The same ID is not used for any other advertising purpose.
We receive only aggregated advertising reports from Google (such as impressions and earnings), which do not identify you. We do not send your recipes, bar or notes to advertisers.
Sharing
We do not sell your personal data. Data leaves your device only in these cases:
- AI features, with your consent: Webgrup's AI server and Anthropic, as described above.
- Advertising: Google AdMob.
- Device integrity: Apple (App Attest).
- Network and security: Cloudflare passes requests to our server and may process technical connection data under its own policy (https://www.cloudflare.com/privacypolicy/).
- Your own actions: when you share a backup, PDF, CSV or recipe, it goes to the app or person you pick.
These providers may process data in countries other than yours, under their own safeguards and policies.
Legal Bases
- AI features (content you submit): your explicit consent, given in the app's notice. You can withdraw it at any time.
- Daily limit and abuse prevention (device ID, key, counters, logs): our legitimate interest in running the service fairly and securely, and keeping costs under control.
- Personalized advertising: your consent (ATT, UMP).
- Camera: your consent through the system permission prompt.
Retention
Content on your device stays until you delete it or the app. Server-side retention periods are in the table above. Webgrup does not keep AI content. For data held by Anthropic, Google, Apple or Cloudflare, see their policies.
Your Rights
Depending on where you live, you may have rights under the GDPR (EEA), the UK GDPR, the KVKK (Türkiye, Law No. 6698), the CCPA/CPRA (California) and the LGPD (Brazil). These include access, correction, deletion, restriction or objection, withdrawal of consent, and complaint to a supervisory authority.
- Data on your device: delete the app, or use "Reset data" in Settings. We have no copy of it.
- Data on our server: in the app, open Settings > Request data deletion. It opens an email to [email protected] that already contains your device ID; send it to ask us to access or delete the counters linked to it. We reply within 30 days. Without the ID we cannot tell which records are yours.
- AI consent: withdraw it in Settings.
- Ad choices: use "Manage ad consent" in Settings or the iOS tracking setting. See also your Google account's ad settings.
California residents: we do not sell personal information for money. Ads served by Google may count as "sharing" or targeted advertising under some US state laws. You can limit this by declining tracking or personalization.
Children
Shakeo is for adults and is not directed at anyone under 18. We do not knowingly collect data from minors. If you believe a minor has used the app, contact us and we will delete any related server records.
Security
Requests travel over encrypted connections. Our server accepts requests only from verified app installations, keeps no AI content, and limits what it stores. On your device, your data is protected by the device's own security (passcode, encryption). No method is completely secure.
Changes
We may update this policy. The date at the top shows the latest version. For material changes we will give notice in the app or on this page.
Contact
Webgrup, Türkiye — [email protected]