Privacy Policy

1. What we collect

• Account: email address, a salted hash of your password (never the password itself), household name and size, timezone, and your generation schedule.
• Food preferences: dietary rules, pantry items, meal ratings, recipe tweaks, weekly notes, and your plan history.
• Notification settings: your webhook URL, email preference, and — only if you opt in — your mobile number and the timestamp of your SMS consent.
• We do not use analytics trackers, advertising cookies, or fingerprinting. The only cookie is the session that keeps you signed in (30 days).

2. How we use it

To run the product: generate your weekly plans, maintain your pantry and shopping lists, and send the notifications you asked for. That's it. We do not sell your personal information, and we do not share it with anyone for advertising.

3. Mobile numbers & text messaging

If you opt in to text alerts, we collect your mobile phone number and the date and time of your consent, and we use them for exactly one thing: sending the OurKitchen meal-plan alerts you signed up for.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Messaging program disclosures: OurKitchen meal-plan alerts are recurring automated text messages sent when your weekly plan is ready. Message frequency varies — typically 1–2 messages per week. Message and data rates may apply. Consent is not a condition of any purchase. Reply STOP to cancel at any time or HELP for help; you can also remove your number on your Account page. Opt-in happens only through an express-consent checkbox on our website — never pre-checked, and never as a result of a purchase.

4. AI processing

To generate plans and macro estimates, the relevant context — your dietary rules, household size, recent meals, ratings, pantry staples, and notes — is sent to Anthropic's Claude API. Per Anthropic's commercial API terms, this data is not used to train their models. Your email, password, and phone number are never included in AI requests.

5. Service providers

• Cloudflare — hosting, database, and storage for everything above.
• Anthropic — AI plan and macro generation (see §4).
• Resend — email delivery, if you enable email notifications.
• Twilio — SMS delivery, if you opt into texts; processes messages on our behalf solely to transmit them and may not use your information for anything else.

Each receives only what it needs to do its job.

6. Retention & deletion

Your data is kept while your account exists. Deleting your account permanently erases everything — rules, pantry, ratings, tweaks, plans, history, and notification settings — immediately and irreversibly. Login sessions expire after 30 days.

7. Security

Passwords are stored as salted PBKDF2 hashes, sessions are HttpOnly cookies, and all traffic is HTTPS. No system is perfectly secure, but we treat your data like we'd want ours treated.

8. Children

OurKitchen is not directed to children under 13, and we don't knowingly collect their information.

9. Changes & contact

Material changes to this policy will be flagged here with a new effective date. Questions or data requests: support@ourkitchen.ai