Privacy Policy

Account information. When you create an account we collect your email address and a password (stored in hashed form by our authentication provider — we never see or store your actual password). If you explore as a guest, the Service creates a temporary anonymous account with no email attached; anything you make is stored against that temporary account and carries over if you later sign up.

Content you create. Recipes (including recipes you import from web pages or photos), meal plans, calendars, pantry and shopping data, notes, what you log as eaten, feedback you submit through the in-app widget, and survey responses. This content can reveal things about you — for example dietary requirements you enter — so we treat all of it as personal information.

Usage and device information. Pages visited, feature usage events (for example that a cook plan was generated), approximate timing, and error reports when something in the app breaks. We also use Microsoft Clarity, which records how sessions interact with pages (clicks, scrolling, movement) to help us find usability problems.

Payment information. Subscriptions are processed by Stripe. Your card details go directly to Stripe and are never stored on our systems; we see only subscription status and non-sensitive payment metadata.

Notifications. If you enable reminders, we store a push subscription token for your browser or device so we can deliver them. You can turn notifications off at any time in your browser or profile settings.

• To provide the Service: storing your recipes and plans, generating cook plans and suggestions, sending reminders you have asked for, and processing subscriptions.
• To power AI features you invoke: when you generate, modify or import a recipe, or ask the sous-chef for help, the relevant recipe text and request are sent to our AI provider (Anthropic) to produce the result. This content is processed to provide the feature and is not used by us to train AI models.
• To improve the Service: aggregated usage analytics and error reports tell us which features work, which fail, and where the app needs fixing.
• To communicate with you: service emails such as account confirmation and password resets, and responses to feedback you send us. We do not send marketing email without your consent.

We do not sell your personal information, and we do not use it for third-party advertising.

We use a small number of service providers to run Menu Maker. Each receives only what it needs to do its job:

• Supabase — database, authentication and file storage (where your account and content live).
• Netlify — website hosting and delivery.
• Stripe — subscription payments.
• Anthropic — AI processing for recipe generation, modification, cook plans and the sous-chef.
• Microsoft Clarity — session analytics for usability improvement.

Some of these providers store or process data outside Australia, primarily in the United States. Where that happens, the provider is bound by its own privacy commitments and our agreements with it. We may also disclose information where the law requires it. Beyond this, your personal information is not shared with anyone.

If you choose to publish a recipe to the community library, that recipe — its title, ingredients, method, photo and description — becomes public: visible to anyone on the web, indexable by search engines, and readable by AI systems. Don’t include personal information in a recipe you publish. You can unpublish at any time, though copies saved by other users or already indexed elsewhere may persist.

We keep your information while your account is active. Guest accounts that are never converted to a full account may be deleted after a period of inactivity, along with their data. If you delete your account, we remove your private recipes, plans, pantry data and personal information. Two exceptions apply: recipes you published to the community library remain public (with the link to your account removed) as described in our Terms of Service — contact us if you want a published recipe removed as well — and we retain records we are legally required to keep, such as transaction records for tax purposes.

Your data is protected by encryption in transit, authentication on every request, and database-level access rules that ensure your content is only readable by you. No internet service can promise perfect security, but if we become aware of a data breach that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

Most of your information is directly visible and editable inside the app. You can also contact us to request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Account deletion is available from your profile at any time.

We use cookies and browser storage for signing you in and keeping your session active, and Microsoft Clarity sets identifiers to distinguish sessions for analytics. We do not use advertising cookies.

Menu Maker accounts are for people 18 and over; younger people may use the Service under the supervision of a parent or guardian, as set out in our Terms of Service. We do not knowingly collect personal information from children without that supervision — if you believe a child has provided us information, contact us and we will remove it.

If we change this policy, we will update the date at the top and, for significant changes, let you know in the app. Continuing to use the Service after a change means you accept the updated policy.

Questions, requests or complaints about privacy can be sent to contact@menu-maker.org — we will respond within a reasonable time, usually 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.