All policies

Privacy Policy

Last updated 10-29-2026

This policy explains what information cookingplan.app collects, how it is used, and your choices. We collect what is needed to run a household meal plan and nothing more.

What we collect

  • Account information: your name, email address and a password hash (we never store your password itself).
  • Household information: household name, members and roles, time zone, unit preference, diet settings, allergies, exclusions and dislikes, and per-person serving profiles.
  • Kitchen content: recipes and recipe versions, meal plans, grocery lists, purchases, inventory lots and their history, substitution approvals, alerts and notification preferences.
  • Uploads: recipe photos you choose to import. Photos are re-encoded on upload, which removes embedded metadata such as camera location, and stored privately.
  • Session and security data: a session record (creation and expiry time, a truncated browser user-agent), sign-in times, and an audit trail of significant actions such as membership changes, deletions and billing events.
  • Billing records: plan, subscription status and verified events from the billing provider. Billing is in sandbox mode today; when live, card details go to the payment provider and never to us.

Sensitive information: allergies and diets

Allergies and dietary choices can reveal health or religious information. We use them only to filter recipes, flag conflicts and rank substitutions for your household. They are visible to members of your household and are never used for advertising or shared with third parties for their own purposes.

How we use information

  • To run the Service: calculate grocery lists, track inventory, show alerts, and keep household members in sync.
  • To keep the Service secure: authenticate sessions, rate-limit abuse, investigate incidents.
  • To operate optional features you or your household turn on, such as AI recipe import or email digests.
  • To communicate with you about your account, security and material policy changes.

Store links and commissions

Some store links (such as Walmart add-to-cart links) are affiliate links: if you buy through them, MarKen Technologies, Inc. may earn a commission from the store. It costs you nothing extra and never changes which product is picked — picks are the lowest price that covers what your list needs. WALMART.COM SM is a service mark of Wal-Mart.com USA, LLC and Wal-Mart Stores, Inc.

What we do not do

  • We do not sell or rent personal information.
  • We do not use advertising or cross-site tracking cookies.
  • We do not use household data to train AI models.
  • Platform operators do not have default access to private household content; support tools show job and account status, not your recipes or inventory.

Service providers

We use providers only where a feature needs them, under contracts that limit their use of data: hosting and database infrastructure; if AI import is enabled with a cloud provider, the pasted text or photo being imported (and nothing else from your household) is sent to that provider to produce the draft — a deployment can instead use a locally hosted model so content does not leave our servers; if email digests are enabled, an email delivery provider; when live billing starts, a payment processor. If you press Price my list at Walmart, the names of the items still to buy are sent to Walmart's product search (nothing about your household) to find products and prices. If you tap a Find at … store link (Whole Foods Market on Amazon, or Walmart), your browser opens that store's site with the item's name as the search (the store's terms and privacy policy apply there; nothing else is sent). If you press Send to Instacart, the item names and amounts on that grocery list (and nothing else from your household) are sent to Instacart to create a shopping page; anything you then do on Instacart, including ordering and payment, is governed by Instacart's own terms and privacy policy.

Who in your household can see what

Everything in a household — recipes, plans, lists, inventory, serving profiles and allergies — is visible to that household's members. Only the owner can see billing and manage members. Database row-level security keeps each household's data separate from every other household's.

Retention and deletion

See the Data Retention Policy. In short: household data stays until you delete it; the owner can export everything as JSON and delete the household; backups containing deleted data roll off in about 35 days.

Your choices and rights

  • Access and portability: the owner can download a JSON export of household data from Household settings.
  • Correction: you can edit your information in the app at any time.
  • Deletion: the owner can delete the household. To delete your individual account or for any request you cannot complete in the app, email [email protected].
  • Email: digests are opt-in and every email includes an unsubscribe link.
  • Depending on where you live (for example, the EU/UK or California), you may have additional rights. We will honor verified requests within the time the law requires and will not discriminate against you for exercising them.

Children

The Service is not directed at children under 16, and we do not knowingly collect their personal information. Household serving profiles may describe a child (for example, a name and diet) as entered by an adult household member.

Security

See the Security page for how we protect accounts and data.

Contact

MarKen Technologies, Inc. · [email protected]

All policiesNext: Cookie Policy