Built for a cookbook that stays yours.

Your private cookbook

Matton is local-first. Recipes, notes, images, cookbook organization, groceries, meal plans and settings stay on your device by default. We do not automatically receive your cookbook or diagnostics.

Optional iCloud Sync stores encrypted copies of your library, profile name and photo in your private iCloud database. Matton does not receive that content. Turning sync off leaves your local library intact. Password-encrypted backups are exported and imported locally; we do not keep your passphrase.

In the iPhone app, pasted recipes and scans are processed on your device, including optional on-device assistance. They are not sent to a remote AI or text-recognition provider. A scan is not automatically saved as artwork. Cover photos are saved when you tap Save; taking one does not add it to Photos.

Recipe-link sharing

Publishing sends us a separate copy of the selected recipe’s title, description, ingredients, steps, timings, servings, source attribution and link, and optional photo. Recipe notes and section notes are excluded. Anyone with the link can access the shared content, pass it on and save a copy. The web page is a preview; the complete shared recipe is available through Matton.

In the iPhone app, the upload happens before the share sheet opens. Cancelling that sheet, editing your cookbook or deleting a local recipe does not remove the published copy. Publishing changed content creates a new link.

Where guest sharing is available, you can connect ChatGPT and publish without the Matton app or a Matton account. Matton receives the recipe, preparation instructions and selected photo or file link supplied through its tools, rather than general access to your conversations or private cookbook. Review what you send. Uploaded and generated photos are handled alike; we use the supplied generated-image declaration to label them. Matton does not generate these images or sell image generation.

We strip embedded metadata, including GPS location, from shared photos. Anything visible in the image remains visible. We cannot control copies that recipients, search services or other providers retain.

We count shared-recipe views and completed saves into Matton. Save reports contain the share identifier and a temporary random code, not private edits, local recipe identifiers or reader/device identities. These approximate counts do not use tracking cookies or create reader profiles.

Other information we receive

Support requests include your message, attachments, supplied contact details and any diagnostics you choose to send. Diagnostics are off by default and exclude recipe text, notes, grocery text, source URLs, images and raw imported text.

Hosting providers may keep request logs containing IP addresses, URLs, referrers, browser or device details and timestamps. Cookies and session data support connection consent, private removal links and administrative access. Existing pre-launch signup details and correspondence are retained for communications, support, recordkeeping and legal obligations; new signups are closed.

How we use and disclose information

We use information to operate sharing and connections, measure subscriptions and sharing activity, provide support, prevent abuse, troubleshoot, maintain records and comply with law. We do not sell personal information or use it for advertising tracking.

Providers may process information to host, secure, support and communicate about Matton. We may disclose information at your direction or for legal compliance, fraud prevention, protection of rights, enforcement of agreements or a business transfer. We may send service and support messages and, where permitted, product or marketing messages with an opt-out. Materially different uses receive any notice or choice required by law.

RadioReformation operates from the United States. Information may be processed there or in countries where our providers operate.

Other services and subscriptions

Importing from or opening another website sends ordinary request information to that site. ChatGPT and image providers handle your conversations and files under their own terms and privacy practices. Connecting Matton does not change those practices.

Apple provides iCloud and processes App Store purchases. The app checks subscription status through StoreKit. Apple’s subscription updates give us transaction identifiers, plan and status, renewal settings and purchase, expiry, refund and billing dates. We use these to measure subscriptions, without joining them to publishing identities. We do not receive payment card details or your Apple Account name or email. Subscription identifiers are not anonymous.

Publishing and connection security

For iPhone publishing, Apple App Attest helps verify genuine app requests. We store an installation identifier, verification keys and security records. Guest connections instead use a random publishing identifier, the approved client and permissions, consent time and policy version, expiry and revocation records, and hashed authorization credentials. A guest permission lasts up to 30 days and may end sooner if revoked or restricted.

For both, publication identifiers, content fingerprints, request and activity records, removal credentials or their hashes, and usage counts help verify requests, enforce limits and prevent duplicate uploads. These records can associate publications with the same publisher; they do not verify a person’s identity or ownership of content.

We use secure connections, restricted access and request verification, but cannot guarantee perfect security. Protect your devices, backup passwords and private removal links. Anyone holding a private removal link can use it. We respond to security incidents and provide notices as required by law.

Retention, removal and your choices

We keep information as reasonably needed to provide Matton, protect security, maintain records and backups, resolve disputes and meet legal obligations. Hosting logs and backups are retained separately from active service data.

For app-published recipes, use Shared Links in Settings. Removal details stay on the publishing iPhone and are not included in iCloud Sync or recipe backups. For guest publications, keep the private removal link; the same active connection can recover access while its permission remains valid. Revoking or losing a connection does not remove published recipes, and existing private removal links remain usable. If you lose removal access, contact us with the public link; we may need evidence of your authority and cannot guarantee recovery.

Shared links currently expire after 30 days without qualifying activity. Opening the recipe page or full recipe in Matton renews activity; images, status checks and known automated previews do not. Preview filtering is best effort. Existing links receive a grace period when the inactivity period changes.

Removal or expiry blocks access to the recipe and photo and deletes recipe text from the active sharing database. Photo files are deleted by cleanup, with retries for failures. This cannot recall saved copies. Keep your own copy; the sharing service is not a backup.

Limited publisher and removed-link records, including identifiers, fingerprints, credential hashes and removal times, have no automatic deletion schedule and prevent old requests from recreating removed links. Expired guest credentials, sessions and permissions are pruned in batches; publisher records needed for existing or removed links remain. Cleanup is not immediate.

Temporary counting records expire after seven days and are removed during cleanup or link removal. Aggregate totals remain with link records. Subscription notification receipts are pruned after 180 days as updates arrive; subscription status records have no automatic deletion schedule, helping prevent old updates from restoring expired or refunded subscriptions.

Depending on your location, you may have rights to access, correct, export or delete personal information, restrict or object to processing, withdraw consent or appeal a decision. Email privacy@radioreformation.com, including the share link for a removal request. We may verify your identity or authority and retain information where permitted or required for security, legal, financial, backup or recordkeeping purposes. We do not discriminate for exercising applicable rights.

Children’s privacy

Matton is not directed to children under 13. We do not knowingly collect their personal information for our own business purposes. If we learn that information was collected in violation of applicable law, we take appropriate steps to delete or handle it.

About this policy and contact

This policy covers the Matton app, website, sharing service and related communications, operated by RadioReformation, LLC (“Matton,” “we” or “us”), PO Box 42, Dahlonega, GA. The company privacy policy may apply to other RadioReformation services.

Privacy: privacy@radioreformation.com. Support: dev@matton.app. We update this date when the policy changes and provide additional notice where required by law.