Privacy Policy

What we keep

• Your account: email address, name and avatar color.
• Your household: its members, household size, cuisines you like or dislike, and each member's diet needs and allergies, which you choose to enter so meal suggestions are safe for everyone.
• Your ZIP code and budget per serving, if you enter them. The ZIP code is used to find a nearby store whose prices estimate what dinners cost.
• What you plan and cook: weekly meal plans, grocery lists, pantry staples, recipes you add, what you've cooked, ratings, and notes.
• Photos you add: a picture of a finished dish, or the cover picture of a video you saved a recipe from. They are stored on our server and shown only in your household's app. Each has a long random web address, so anyone you give that exact address to can open the picture, and nobody can find it by guessing. They are deleted when your household is deleted.
• If you link Kroger: your chosen store and the sign-in tokens Kroger gives us to add items to your cart. We never see your Kroger password.
• If you subscribe to Hearthplate Plus: whether your household has it and when it ends, and the identifier of the Apple subscription. Apple handles the payment; we never see your card or Apple account details.

Stays on your devices

On the iPhone, reading recipe photos, pasted text and TikTok captions, suggesting recipe names, answering questions about a recipe, suggesting substitutions, sorting a spoken grocery note, and reading photos of your fridge or pantry use Apple's on-device features. Photos of your fridge are never uploaded: only the item names you confirm are sent, to find dinners. The microphone is only used while you're asking or speaking a command in Kitchen mode, and when the iPhone supports it, speech is recognised on the device. Timers, dinner reminder times, and the data shown on the Apple Watch (sent from your iPhone) are stored only on your devices.

Services we use

• Clerk, for sign-in and your account.
• Kroger: product search, prices, and store lookup (your ZIP code is sent to find a nearby store), and, only if you link your account, adding your list to your cart.
• Anthropic, when you ask Hearthplate to write a new recipe or tidy up one you imported. It receives your request, your household's diet needs, allergies, disliked cuisines and size, and any recipe text or photo you imported. It doesn't receive your name or email. We also use it to check that stock photos match our shared recipes; no personal information is involved.
• Apple, for App Store subscriptions, Sign in with Apple, and the on-device features above.
• TikTok, when you save a recipe from a TikTok link: your iPhone asks TikTok for that public video's caption and cover picture. Only the video's link is sent, and the recipe is read on your iPhone.
• Pexels for recipe photos; no personal information is sent.
• DigitalOcean hosts our server and database, including the photos you add.

Who in your household sees what

Everyone in a household shares its meal plan, grocery list, pantry and cooking history, and can see each member's name and diet needs. Recipes you import from other websites stay private to your household.

Deleting your data

Delete your account any time from Settings → Delete account. That removes you from your households, and erases any household where you're the only member, with its plans, lists and recipes. Copies may remain in private server backups until those are cleared; email us to have them removed sooner.

Children

Hearthplate accounts are for adults. A household can list children's diet needs without them having an account.

Contact

Questions or requests: support@hearthplate.app.