Privacy Policy

1. Who we are

Weekly Grub is a meal planning web application. When we say “we”, “us”, or “our”, we mean Weekly Grub. When we say “you” or “your”, we mean you, the person using our service.

We do not sell your data. We do not share it with advertisers. We do not pass it to any non-essential third party. Your data is used solely to make Weekly Grub work for you.

2. What we collect

We collect only what we need to make the app work for you:

• Account information – your email address, collected when you sign up via Google or email magic link.
• Profile details – household size and dietary preferences you choose to provide.
• Meal data – meals you save, weekly plans you generate, recipe ratings, and meal suggestions you submit.
• Payment information – Stripe processes your payment when you subscribe. We store only your Stripe customer ID and subscription status, never your card details.
• Anonymous analytics – non-identifying usage events (e.g. “a plan was generated”) used solely for improving the Weekly Grub service, such as compiling Popular meal lists. No personal data is attached to these events, and this data is never shared with anyone.
• Session cookies – cookies to keep you logged in, managed by our authentication provider (Supabase). These are essential for the app to function.

3. How we use your data

• To provide and improve the Weekly Grub service.
• To generate personalised meal plans based on your preferences.
• To process payments and manage your subscription.
• To respond to feedback, meal suggestions, or recipe reports you submit.
• To understand general usage patterns and compile features like Popular meal lists (via anonymous analytics only).

That's it. We never use your data for advertising, profiling, or anything unrelated to the Weekly Grub service.

4. Third-party services

We use a small number of trusted third-party services:

• Supabase – hosts our database and handles authentication. Your data is stored securely in their infrastructure.
• Google – if you sign in with Google, Google handles the authentication process. We receive your email address and account ID.
• Stripe – processes subscription payments securely. Stripe's own privacy policy governs how they handle your payment details.

These services are essential to running the app. We do not use any advertising networks, tracking pixels, or third-party analytics services (no Google Analytics, no Hotjar, nothing like that). We do not sell, rent, or share your data with anyone beyond these essential services.

5. Data retention and deletion

Your data is kept for as long as you have an account. If you would like your account and all associated data deleted, contact us at the email address below and we will process your request promptly.

Anonymous analytics events are retained indefinitely as they contain no personal information.

6. Your rights

You have the right to:

• Access the personal data we hold about you.
• Update your household size and dietary preferences via your profile settings.
• Request deletion of your account and all associated data.
• Request a copy of your data.

To exercise any of these rights, contact us at the email address below and we'll get back to you as soon as we can.

7. Security

We take reasonable measures to protect your data, including row-level security policies (so users cannot access each other's data) and encrypted connections. No system is perfectly secure, but we do our best to keep your information safe.

8. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page will always reflect the most recent version.

9. Contact

If you have any questions about this privacy policy or your data, get in touch at [email protected].