Privacy Policy

What we collect

• Sign-in details. When you sign in with Google or Microsoft, we receive your name, email address, and that provider's account ID for you. We never see or store a password.
• Household preferences. What you enter on the form: how many adults and kids (kids as age bands, never exact ages), the days you want dinners, your time zone, proteins you like or avoid, foods and dish types to skip, how spicy you like it, the appliances you own, and how often recipes may repeat.
• Allergies, only if you choose to add them. Allergies are health-related information. We collect them only after you accept the allergy notice, store them as fixed categories (for example "peanut"), and use them only to leave recipes out.
• Email addresses you add. The addresses that should receive your plans, each of which must confirm before anything is sent to it.
• Your plans. The recipes we sent and when, so we don't repeat them too soon.
• Technical data. A sign-in cookie that keeps you signed in for up to 30 days, and the request records (such as IP address and browser type) that our hosting provider keeps for security and troubleshooting. Checklist ticks on a plan page are saved only in your own browser.

How we use it

• To build each week's plan to your preferences and send it on the day you chose.
• To run your account: sign-in, editing your answers, and household members you invite.
• To keep the service secure and working, including spam and bot protection.

We don't sell your information, show ads, or use tracking pixels. Our emails don't track opens or clicks.

Who processes it for us

We use these providers to run the service. Each one receives only what its job needs.

• Cloudflare hosts the website and database and provides bot protection.
• Resend, which sends through Amazon Web Services, delivers our emails.
• Google and Microsoft handle sign-in, if you use them.
• Anthropic provides the AI (Claude) that chooses recipes. It receives your household preferences, which include the delivery addresses on your plan.
• Notion, only if you connect it, receives copies of your plans in your own workspace.

We may disclose information if the law requires it.

How long we keep it

We keep your account, preferences and plan history while your account is open, so plans can avoid recent repeats. Sign-in sessions end after 30 days. When you ask us to delete your account, we delete your account, preferences and plan history within 30 days, apart from what we must keep by law.

Your choices

• Change your answers anytime after signing in.
• Stop emails with the unsubscribe link at the bottom of every plan.
• See or delete your data by emailing admin@tastytimeline.com from an address on your account.

Children

Recipe Vault is for adults planning meals for their household. We don't knowingly collect information from children, and we record children in a household only as a count and an age band.

Security

Connections are encrypted. Sign-in sessions and email links are stored only as one-way hashes or signed so they can't be guessed, and connections to Notion are encrypted at rest. No system is perfectly secure, and we'll tell affected users promptly if something goes wrong.

Changes

If we change this policy in a way that matters, we'll update the date above and tell you by email before the change applies.