Privacy Policy

Last updated: July 23, 2026

BasketToTable's promise in one sentence: we collect only what the Service needs to plan your family's meals, we never sell your data, and we never use your health information for advertising.

1. What we collect and why

Account information (email, name) to run your account and send notifications you choose. Household details (family size, weekly budget, zip code) to build plans and find stores near you. Health-related preferences (family members' allergies and diet preferences) solely to keep unsafe or unwanted ingredients out of your plans. App activity (pantry items, meal plans, shopping lists, recipe ratings, and Sous-Chef chats) to power the features themselves. Payment details are collected and stored by Stripe — your card number never touches our servers.

2. Your allergy and diet information (consumer health data)

Some laws, including Washington's My Health My Data Act and Nevada's equivalent, treat allergy and dietary information as consumer health data. Here is exactly how we handle it: you provide it voluntarily by typing it in (that entry is your consent to use it for meal planning); we use it only to generate your family's meal plans and shopping lists; it is sent to our AI provider (OpenAI) inside plan-generation requests as part of that processing; we never sell it, never share it with advertisers, and never use it for marketing; and you can edit or delete it anytime in Settings, or delete your whole account. To exercise access or deletion rights, email baskettotable@yahoo.com.

3. Who processes data for us

We use a small set of service providers, each only for its job: Supabase (database and authentication hosting), Vercel (app hosting), OpenAI (AI generation of plans, recipes, images, translations, and chat), Stripe (payments), Resend (email delivery), and — only if you connect them — Telegram or Slack for notifications you configure. Store lookups send your zip code (nothing else) to grocery providers such as Kroger and Instacart. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

4. Children

Accounts are for adults 18 and over. Family member names and allergies you add describe your household to the meal planner; we do not knowingly collect information directly from children under 13.

5. Retention and security

We keep your data while your account is active. Deleting your account deletes your personal data from the live database. Data is encrypted in transit, access is restricted by row-level security (each family can only ever read its own rows), and payment data lives exclusively with Stripe.

6. Your rights

Wherever you live, we honor these on request: access a copy of your data, correct it, delete it, and withdraw consent for health-related data (which may limit meal-plan features). Email baskettotable@yahoo.com and we will respond within 30 days. We will never treat you differently for exercising privacy rights.

7. Where the Service operates

BasketToTable is offered in the United States, and data is processed in the U.S. If you use the Service from elsewhere, you consent to U.S. processing.

8. Changes and contact

If this policy changes materially, we will notify you in the app or by email. Questions: baskettotable@yahoo.com. See also our Terms of Service.