Cesta

Privacy policy

Last updated: 25 September 2026

Cesta is an app for your shopping list, recipes, meal calendar and supermarket receipts. This policy explains what data it handles and where it goes. The short version: your data stays on your iPhone. There are no accounts, no server of our own, no advertising, no analytics and no tracking.

Who is responsible

Cesta is developed by Rafa Torres García, as an individual. For anything about privacy you can write to hello@rafatorresgarcia.com.

What is kept on your iPhone

Your list, your categories, recipes, calendar, receipts, shops, the barcodes you scan, the settings and the character are kept only on your iPhone, in the app's storage. We have no copy of them and no access to them.

When something leaves the iPhone

Only in two cases, and both are optional.

1. Artificial intelligence, if you turn it on

Cesta can use an artificial intelligence service to sort the list into categories, understand quantities, read recipes and understand the lines of a receipt. It is off by default. To use it you have to:

  1. choose a provider (Groq, Cerebras, OpenAI or OpenRouter),
  2. enter your own key for that provider, and
  3. expressly agree in the app to data being sent to it.

Then Cesta sends directly to that provider, without going through any server of ours:

Never sent: the shop, date, time or total of a receipt, or your location.

What the provider does with that data is governed by its own privacy policy, which we recommend you read before agreeing. Your key is kept in the iPhone's Keychain, not in the app or on any server.

You can withdraw your permission at any time in Settings › AI › Send to the AI. Without it, the app works the same, just without AI.

2. Open Food Facts, if you scan a barcode

When you scan a product's barcode, Cesta looks it up on Open Food Facts, an open, collaborative database, to suggest its name, brand and size. Only the barcode number is sent, nothing else about you. With no connection, the code is kept anyway with the name you type.

What we don't do

Diagnostics

If something fails, the app notes it in a log that stays on your iPhone (Settings, long-press the version, › Diagnostics). By default it only notes the kind of failure, not your content. It only reaches us if you copy it and send it to us, and only what you decide to send.

Deleting your data

Your rights

Since your data is on your iPhone and not on our servers, you are fully in control: you can see it, change it and delete it from the app. If you have any question or want to exercise your data protection rights, write to hello@rafatorresgarcia.com. You can also complain to the Spanish Data Protection Agency (AEPD) or to the authority in your country.

Children

Cesta is not aimed at children under 14 and does not knowingly collect data from them.

Changes

If this policy changes, you will see it here with its new date. If the change affects what leaves your iPhone, the app will ask you again before sending anything.