Privacy Policy

Hugo— iOS & Android

Last updated: June 24, 2026

This policy describes how Hugo ("we," "us") handles information when you use the Hugo mobile app on iOS and Android. We describe what we collect, why, who we work with, and what choices you have.

If you also use our public website at https://usehugo.app (for example to learn about Hugo or follow links), the same policy applies to information collected through that site as described here. See Section 17 below for the small set of cookies and analytics the website uses, and how to control them.

1. What Hugo is

Hugo is a recipe app for iPhone and Android. You can save and organize recipes, import from links you provide, adapt recipes and create your own versions, use collections, add private notes, and use optional AI help for cooking Q&A. Free and paid tiers may differ as shown in the app.

2. Information we collect

Depending on your choices and the features you use, this may include:

• Account and profile — if you create an account: email address, display name, and any other identifiers you provide.
• Your recipe library — text, structure, and media you add or import, links you submit for import, notes, favorites, collections, and relationships between recipes when you adapt one or create your own version.
• Import feature— when you paste a URL, we or our systems may request that content to extract recipe data. We process what is needed to run the import; we do not control third parties' own sites, cookies, or terms.
• AI features— when you start a chat or ask for help, your message, the recipe or context you attach, and the model's response are sent to a third-party AI provider (see Section 12). Do not send information you are not comfortable having processed for that purpose. You may avoid this entirely by not using the AI feature.
• Service operations — data needed to run, secure, and improve the app, such as device or app identifiers, IP address, timestamps, and diagnostic or error data.
• Error and crash reporting (Sentry) — we use Sentry to capture crashes and runtime errors so we can fix bugs. Reports may include device and OS information, app version, stack traces, a pseudonymous identifier, IP address, and the screen or action that triggered the error. We configure Sentry to avoid capturing your recipe content, notes, or AI prompts.
• Product analytics (PostHog) — we use PostHog to understand how features are used so we can improve Hugo. PostHog receives a pseudonymous identifier, app version, device and OS type, approximate region from IP, and event metadata describing which screens you open and which features you tap. We do not send your recipe content, notes, or AI prompts to PostHog.
• Advertising and attribution (Meta) — under your control — to understand which of our ads bring people to Hugo, we can use Meta's (Facebook / Instagram) advertising tools. How this works depends on your device: on iOSit is off unless you choose "Allow" on Apple's App Tracking Transparency prompt; on Androidthere is no separate prompt, so it follows your device's Google advertising settings, which you can reset or turn off at any time. When it is active, we may use a device advertising identifier (Apple's IDFA or Google's advertising ID), a pseudonymous identifier, and a limited set of app events (for example, that the app was installed or opened, or that a key action occurred). We do not send your recipe content, notes, or AI prompts to Meta. See Section 11 for how to turn tracking off on each platform.

3. Lawful bases for processing

Where the GDPR or UK GDPR applies, we rely on the following lawful bases:

• Contract performance (Art. 6(1)(b)) — providing the account, recipe library, import, and subscription features you signed up for.
• Legitimate interests (Art. 6(1)(f)) — security, fraud prevention, service diagnostics, and improving Hugo, where those interests are not overridden by your rights.
• Legal obligation (Art. 6(1)(c)) — complying with applicable law, tax obligations, and lawful government requests.
• Consent (Art. 6(1)(a))— AI chat and cooking Q&A features, and advertising measurement and attribution through Meta, all of which you initiate or allow voluntarily. Advertising tracking is requested through the App Tracking Transparency prompt on iOS and is off unless you allow it. You may withdraw consent at any time by not using those features or by turning off tracking in your device settings.

4. How we use information

We use information to provide and improve Hugo, process imports and AI requests, operate free and subscription features, communicate about the service, secure accounts, comply with law, and enforce our terms. We do not sell your personal information for monetary consideration. With your permission, we use a limited set of advertising identifiers and app-event data for advertising measurement and attribution through Meta (see Sections 2, 6, and 11). You control this on both platforms — on iOS through Apple's App Tracking Transparency prompt, and on Android through your device's Google advertising settings — and you can turn it off at any time.

5. Subscriptions

On iOS, paid plans are processed by Apple through your Apple ID. On Android, paid plans are processed by Google Play through your Google account. We use RevenueCat as the subscription management layer to read your entitlement status across platforms. We may receive subscription status or transaction identifiers from Apple, Google Play, or RevenueCat to unlock features; we do not receive your full card number from Apple or Google for that purchase flow. Prices and currency are set by the App Store and Google Play for your region and may vary by country.

6. Sharing

We use service providers to run Hugo, including hosting, authentication, import services, AI inference (see Section 12 for the AI providers we currently use), Sentry for error and crash reporting, and PostHog for product analytics. These providers are permitted to use data only to provide services to us and are bound by data processing terms consistent with this policy. We may disclose information if we believe in good faith it is required by law, or to protect the rights, property, or safety of users, Hugo, or the public.

Separately, and subject to your tracking choice, we share a limited set of advertising identifiers and app events with Meta Platforms (Facebook / Instagram) so we can measure and attribute our advertising. Unlike the providers above, Meta acts as an independent advertising partner rather than a processor acting only on our behalf. On iOS this happens only if you allow tracking; on Android it follows your device's Google advertising settings. Either way you can turn it off at any time — see Sections 2 and 11.

7. Retention and deletion

We keep your information for as long as your account is active and as needed to provide the app, unless a longer period is required for security or legal compliance.

You can permanently delete your account directly in the app, from Settings → Delete account. This permanently removes your sign-in (you cannot recover the account), cancels any active subscription, and anonymizes your profile data so it can no longer be linked to you. Any recipes, notes, and collections associated with your account are de-identified through this anonymization so they are no longer tied to your identity.

Alternatively, you can request deletion by email at chefhugoapp@gmail.com with the subject "Account deletion request." We will process emailed requests within 30 days. Backups may retain data for a short additional period required for security, and we keep limited records where required by law.

8. Security

We use reasonable technical and organizational measures. No system is perfect; use strong authentication and keep your device updated.

9. Your rights

Depending on where you live, you may have the following rights regarding your personal data. To exercise any of them, email chefhugoapp@gmail.com. We may need to verify your identity before acting on a request.

• Access — obtain a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — request erasure of your personal data, subject to legal retention obligations.
• Portability — receive your data in a structured, machine-readable format.
• Restriction — ask us to restrict processing of your data in certain circumstances (e.g. while a dispute is resolved).
• Objection — object to processing based on legitimate interests. We will stop unless we have compelling legitimate grounds.
• Automated decision-making — you have the right not to be subject to a decision based solely on automated processing that produces significant legal or similarly significant effects. Hugo does not make such decisions about you; AI features provide suggestions only and are not used to make binding decisions.
• Withdraw consent — where we rely on consent (e.g. AI features), you may withdraw at any time by discontinuing use of that feature.

EEA and UK users may also lodge a complaint with their local supervisory authority. EU users: if you are unable to resolve a concern directly with us, you may contact the supervisory authority in your EU member state. An EU/EEA representative as required under GDPR Art. 27 is being appointed and will be listed here once confirmed.

10. LGPD — Brazilian users

Hugo is operated by Dowhile, a Brazilian company. Processing of personal data is therefore also governed by Brazil's Lei Geral de Proteção de Dados (LGPD — Law No. 13,709/2018). We rely on the following legal bases under LGPD Art. 7:

• Execution of a contract (Art. 7, II) — providing the account, library, import, and subscription services.
• Legitimate interests (Art. 7, IX) — security, fraud prevention, and service improvement, balanced against your rights.
• Compliance with a legal obligation (Art. 7, II) — fulfilling obligations under applicable Brazilian and international law.
• Consent (Art. 7, I) — AI features, and advertising measurement and attribution through Meta, which you initiate or allow voluntarily and may stop at any time by turning off tracking in your device settings.

Under LGPD Art. 18, Brazilian residents have the right to: confirmation that processing exists; access to their data; correction of incomplete, inaccurate, or outdated data; anonymization, blocking, or deletion of unnecessary or excessive data; portability; deletion of data processed with consent; information about entities with which data has been shared; information about the consequences of not providing consent; and revocation of consent. To exercise these rights, email chefhugoapp@gmail.com.

Complaints may be lodged with Brazil's national data protection authority, the Autoridade Nacional de Proteção de Dados (ANPD).

11. U.S. state privacy (e.g. California)

California residents (and residents of other U.S. states with applicable privacy laws) may have the right to know what personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing. Hugo does not sell your personal information for monetary consideration. If — and only if — you allow tracking, Hugo shares a limited set of identifiers (such as a device advertising identifier) and app events with Meta for advertising attribution and measurement, which California law treats as "sharing" for cross-context behavioral advertising. You can opt out at any time: on iOS, decline the App Tracking Transparency prompt, or later turn it off under Settings → Privacy & Security → Tracking; on Android, reset or delete your advertising ID and opt out of ad personalization in your device settings. You may also email us to opt out. We will not discriminate against you for exercising your privacy rights. To submit a request, email chefhugoapp@gmail.com.

12. AI data processing

When you use the AI cooking assistant, your message and any recipe context you attach are sent to one or more third-party AI inference providers. We currently use services from OpenAI, Anthropic, and Google. All three are based in the United States. Under their standard API terms, data you submit through the API is not used to train their models. We will update this section if we add, change, or remove providers.

If you are not comfortable with your queries being processed by these providers, do not use the AI feature. It is entirely optional and the rest of Hugo works without it.

13. International transfers

Dowhile is based in Brazil. If you use Hugo from the EU, UK, or another country, your data may be transferred to and processed in Brazil or the United States (where our AI providers and certain other service providers operate).

For transfers of personal data from the EU or UK to countries without an adequacy decision, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission under GDPR Art. 46(2)(c), and the equivalent UK mechanism under UK GDPR. For international transfers under Brazilian LGPD, we apply contractual safeguards with our providers consistent with LGPD Art. 33.

14. Children

Hugo is not directed at children. The minimum age to use Hugo is:

• 13 in the United States (as required by COPPA).
• 16 in the EU/EEA, or the lower age permitted by your member state (minimum 13) under GDPR Art. 8.
• Parental or guardian consent required for minors in Brazil under LGPD Art. 14.
• The minimum age applicable in your country in all other regions.

We do not knowingly collect personal information from children below these ages. If you believe we have, contact us at chefhugoapp@gmail.com and we will delete it promptly.

15. Third-party links

Import and sharing features can involve other sites. Their privacy practices are their own.

16. Changes

We may update this policy. We will change the "Last updated" date and, for material changes, provide additional notice in the app or by email where the law requires. If we add or change third-party SDKs, we will update this policy and the app's store privacy labels before those changes go live.

17. Marketing website — cookies and analytics

This section covers only the public marketing website (https://usehugo.app). The Hugo iOS and Android apps are described in the sections above.

We use Google Analytics 4 to understand how visitors find and use the site so we can improve it. Google receives a pseudonymous identifier, the pages you visit, referral source, approximate region derived from your IP, device and browser type, and basic interaction events (clicks on the App Store and Google Play badges, FAQ expansions, section scroll depth, and language switches). Google Analytics is configured with IP collection retained only at country/region granularity, advertising features off, and no data sharing with Google Ads. We do not run third-party advertising on the site and we do not use the site to build cross-site behavioral profiles.

The website uses the following small set of cookies and local storage entries:

• hugo_consent (local storage) — remembers your cookie choice so we do not ask again. Strictly necessary; set only after you click Accept or Reject.
• hugo_locale (cookie, 12 months) — set if you manually pick a language in the footer, so the site stops trying to redirect you to a different language. Strictly necessary.
• _ga, _ga_*(cookies, up to 13 months) — set by Google Analytics 4 to distinguish unique visitors. Created only after you click Accept on the cookie banner. If you click Reject, GA4 runs in "consent denied" mode and these cookies are not written.

We also receive a CloudFront-Viewer-Country header from Amazon CloudFront on the first request, used only to decide whether to redirect a visitor at the root URL to a localized version of the homepage. This header is not stored.

To change your choice, clear the hugo_consententry from your browser's local storage for this site and reload — the banner will reappear. You can also clear all site cookies through your browser settings, or email chefhugoapp@gmail.com and we will help.

18. Contact

Data controller: Dowhile (CNPJ 24.931.801/0001-39), Brazil. Privacy questions: chefhugoapp@gmail.com. You can also use the support options listed in the App Store, on Google Play, or in the app.