Privacy Policy

Account basics from Google sign-in: your name, email address, and profile picture. We never see your Google password, and we do not request access to your Gmail, Drive, or any other Google data.

Household content you create: recipes, pantry items, meal plans, votes, grocery lists, favorites, Table-tested marks, invite codes, and your household's dietary restriction settings. Restriction settings can reveal health-related information (for example, an allergy) — you provide them voluntarily, and we treat them as sensitive: they are used only to run the app's safety checks for your household and are never sold, shared for marketing, or used for advertising.

Safety acknowledgment: the date and time each member accepted the in-app safety agreement.

Technical basics: standard logs (such as IP address and browser type) kept by our hosting provider for security and reliability. We use only the cookies needed to keep you signed in and to complete invite links — no advertising or cross-site tracking cookies, and no third-party analytics trackers.

To run the Service: signing you in, showing your household its own kitchen, applying your restriction settings, generating AI recipes you request, sharing original and AI-created recipes to The Commons with your household name, honoring invite codes, and enforcing plan limits. We also use data to secure, debug, and improve the Service, and to contact you about it. That's all.

Your household's content is visible only to your household's members. Two exceptions, both by design: original and AI-generated recipes you save are shared to all Cleared Table households in The Commons, attributed with your household name (never your email), and someone opening one of your invite links sees your household's name. Recipes clipped from other websites, your pantry, plans, settings, restriction choices, and everything else stay private to your household.

We use a small set of service providers to run the app, each receiving only what their job requires: Google (sign-in), Vercel (hosting), Neon (database), Anthropic (AI recipe generation — requests include your recipe preferences and your household's cleared ingredient list, never your name or email), and Kroger's product API (product search terms only — no personal data). We do not sell personal information and we do not share it with advertisers or data brokers. We may disclose information if required by law or to protect the Service and its users.

We keep your data while your account exists. When a household admin removes a member, that member loses access within the hour. To delete your account or your household's data entirely, email us at the address below and we will complete the deletion within 30 days, except for records we must keep for legal or security reasons. Commons recipes previously shared may remain, attributed to a generic name, unless you ask us to remove them too.

You can request a copy of your data, corrections, or deletion at any time by emailing us. Depending on where you live (for example, under the CCPA or GDPR), you may have additional rights, including the right not to be discriminated against for exercising them — we honor these requests regardless of where you live. We do not “sell” or “share” personal information as those terms are defined in the CCPA.

The Service is not directed at children under 13, and we do not knowingly collect their personal information. Household accounts belong to adults; if we learn a child under 13 holds an account, we will delete it.

Data is encrypted in transit, stored with reputable providers, and access is limited by the household model described above. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law.

If we make material changes, we will announce them in the app or by email and update the effective date above.

Privacy questions and requests: ztben123@gmail.com.