Your privacy at Dinner Decided.

The essentials

We use account information to provide secure access, and household information to help you plan meals, keep recipes and prepare groceries. Household members can see shared household content. Cloudflare hosts the service; requested AI features send relevant content to OpenAI, and social recipe imports also use Supadata. These providers may process information outside Canada.

Optional dietary details, uploads, a grocery connection and device notifications are choices. You can use your account without supplying sensitive food details or connecting a grocery account. Do not include medical histories, payment information, passwords or information about others without their permission.

Accounts, security and household sharing

We store your name, email, hashed password, email-verification status, account sessions and security records to operate accounts, prevent abuse and recover access. Security processing can include IP address, browser information, request times and rate-limit records. Cloudflare Email Sending delivers verification, recovery and invitation messages; the app records delivery status. These are service messages, not newsletter subscriptions.

Household information includes preferences, menus, imported and generated recipes, pantry details, cooking feedback, notes and grocery or order records. People who join your household can use its shared content. Owners manage invitations and settings. Site administrators manage account and household status and aggregate usage; administration does not automatically grant household membership. The operator may access information when needed for support, security or administration.

Optional food details and AI features

Allergies, restrictions and food preferences can reveal health, religious or other sensitive information. If you choose to provide them, we store them for your household and send relevant details to OpenAI to generate menus, prepare recipes and make adaptations. The food-settings form asks for your consent when you add or change these optional details. Clearing the fields stops their inclusion as current settings in future requests. Earlier recipes and records may still contain them; contact us if you want those records reviewed for removal.

Depending on the feature, OpenAI receives relevant household settings, recipes, pantry context, feedback, your instructions, or the recipe documents and photos you submit. Menu automation sends planning requests when enabled; recipe photos can be generated when a recipe is saved. AI output is stored where it becomes a recipe, preview or other product result. Grocery product selection can also send retailer product and cart observations, household restrictions and the connected account’s display name to OpenAI. API usage records track the model, feature, time, outcome, token counts and estimated cost. They do not contain full prompts.

Dinner Decided does not retain original recipe-upload files or pantry photos in its library. It retains extracted details, source attribution and file metadata; generated recipe images are stored separately. Providers process inputs under their own retention and security practices. Our use of an API setting to avoid storing a response is not a promise that a provider keeps no logs. Review extracted ingredients, allergens, quantities and cooking instructions; AI can make mistakes.

Recipe links and connected groceries

To import a public recipe link, we fetch the source. For TikTok, Instagram and Facebook imports, Supadata receives the public post URL and an extraction request and returns source information, captions or video observations; relevant recipe content then goes to OpenAI. Import only content you have permission to use. Do not supply private links or embedded access tokens.

Connecting Save-On-Foods is optional and uses your household’s own grocery account. Cloudflare hosts a temporary private sign-in window and keeps renewable authorization in household-specific storage. Dinner Decided does not save your grocery password. The connection supports product search, cart preparation, connection checks and reading relevant order information. Retailer sign-in, delivery details, payments and checkout are subject to Save-On-Foods and More Rewards terms and privacy practices. You review the cart and complete checkout yourself.

Website, contact form and device storage

The public website uses Cloudflare Web Analytics and video playback statistics. Playback records use random per-play identifiers, the video, viewing duration and completion; the playback tracker does not attach your household account. Cloudflare processes network and browser information to deliver and protect the site and provide analytics. Dinner Decided does not use advertising pixels on the public website.

The contact form stores your name, email and message in a separate private inbox so Dinner Decided can handle your enquiry. Archiving a message does not delete it. The public website cannot access household data. Avoid including passwords, account links or sensitive food details in a contact message.

Essential cookies keep you signed in and select your household. Blocking them prevents account features from working. Browser session storage helps unfinished forms and previews resume in the same tab. Optional push notifications require device permission and use your browser’s notification service; you can disable them in device or browser settings. Transactional emails do not contain tracking pixels.

Providers, location and protection

Cloudflare provides hosting, databases, security, email and the temporary grocery browser. OpenAI provides AI processing; Supadata processes supported social recipe sources. Browser notification services deliver opted-in alerts, and grocery connections interact with Save-On-Foods and More Rewards. Their processing may occur in the United States or other countries and be subject to those countries’ laws and lawful access requests. We do not promise Canadian-only data residency. Contact Dinner Decided for questions about these providers and cross-border processing.

We use access controls, household scoping, secure account cookies and expiring account links to protect information. No online system can eliminate every risk. We may disclose information when required by law or needed to address fraud, security incidents or threats to rights and safety. We do not sell household information or use it for targeted advertising.

Retention and your choices

Account and household records are kept to provide the ongoing service, preserve shared history and address support and security needs. There is no general automatic account-purge schedule. Recipe archives and expired previews may remain in storage; expiry prevents use of a link or action and does not necessarily erase its database record. Provider retention is separate. We review verified removal requests with applicable legal obligations, backups, security records and the interests of other household members in mind.

You can change household settings, maintain pantry and recipe records, disable automatic menus and manage notification permission. To request access, correction, account closure, deletion, withdrawal of consent or help disconnecting a grocery account, use the contact form and identify your request without sharing passwords or private links. We may need to verify your identity before releasing or changing private information. Withdrawing information needed for a feature can prevent that feature from working. Shared household content may require coordination with its owner.

Contact Dinner Decided first with a concern so we can investigate. You can also contact the privacy regulator responsible for your province or the Office of the Privacy Commissioner of Canada. Rights depend on the law that applies to your situation.

Changes to this policy

We will date updates here and explain material new uses before asking for any additional consent they require. This policy describes how the current service handles information; it does not waive your privacy rights.