Privacy Policy

1. What we collect

You provide:

• Account data — email address, display name, authentication credentials (managed by our authentication provider; we never see your password).
• Household data — household name, member profiles you create (names/labels, optional birthdays, dietary tags). You are responsible for having permission to enter details about other people.
• Content — recipes, notes, photos you upload, meal plans, shopping lists, collections, and messages you send to the AI assistant.
• Imports — URLs, text, or photos you submit for recipe import.

Collected automatically:

• Usage and device data — logs of requests (IP address, timestamps, user agent, pages/endpoints), errors, and coarse feature usage. We use this for security, debugging, and capacity planning.
• Cookies — strictly necessary cookies for authentication/session state. We do not use advertising cookies or sell ad targeting data.

2. How we use it

• Provide the Service: sync your recipes, plans, and lists across your household and devices.
• Power AI Features: content you submit for import, search, or drafting is sent to AI model providers to produce the result you asked for (see §4).
• Operate and secure the Service: authentication, rate limiting, abuse prevention, debugging.
• Communicate with you about the Service (transactional email such as verification and password reset).
• Improve the Service using aggregate, de-identified usage patterns.

We do not sell your personal information, and we do not use your private recipes, photos, or chat messages to train our own or third-party AI models.

3. Sharing within the Service

• Household members see shared household content (meal plans, shopping lists, household recipes).
• Community sharing is opt-in per recipe. If you share a recipe to the community, its content (not your email) is visible to other users and may be saved by them.
• Everything else is private to you and your household by default.

4. Service providers (subprocessors)

We use third parties to run the Service. They process data only to provide their service to us:

AI providers receive only the content needed for the specific request (e.g., the page text or photo you asked us to import, or the message you sent the assistant).

5. Data retention and deletion

• Account and content data are retained while your account is active.
• If you delete content, it is removed from active systems promptly and from backups within their rotation window (up to 30 days).
• If you delete your account, we delete or de-identify your personal data within 30 days, except: content you shared to the community that other users have saved (which is disassociated from your identity), and records we must keep for legal, security, or accounting reasons.
• You can request deletion or a copy (export) of your data at dkapellusch@gmail.com.

6. Security

Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Access to production systems is limited and credentialed. No system is perfectly secure; if we learn of a breach affecting your personal data, we will notify you as required by law.

7. Your rights

Depending on where you live (e.g., EEA/UK GDPR, California CCPA/CPRA), you may have rights to access, correct, delete, export, or restrict processing of your personal data, and to non-discrimination for exercising them. Contact dkapellusch@gmail.com; we will respond within the legally required timeframe. EEA/UK users: our legal bases are contract performance (providing the Service), legitimate interests (security, improvement), and consent where required. You may lodge complaints with your supervisory authority.

8. Children

The Service is not directed at children under 13, and we do not knowingly collect personal data from them. Household member profiles for children are entered by adult account holders and used only to provide household features (e.g., serving counts, dietary tags).

9. International transfers

Our infrastructure is located in the United States. If you use the Service from elsewhere, your data is processed in these locations under appropriate safeguards.

10. Changes

We will post updates here and, for material changes, give notice in-app or by email. The “Last updated” date reflects the latest revision.

11. Contact

Mise en Place (operated by Dan Kapellusch)

dkapellusch@gmail.com