Legal

Privacy Policy

Effective August 16, 2026

This policy explains how Your Dinner Plans, LLC handles information when you visit our website or create and use a Dinner Plans family account.

1. Scope

This Privacy Policy applies to the Dinner Plans website, applications, and related services operated by Your Dinner Plans, LLC (“we,” “us,” or “our”). It does not apply to third-party recipe sites or other services you choose to use.

2. Information we collect

Account and household information

When account services are enabled, we receive identity information through Supabase Auth, such as an account identifier, email address, display name, and profile image. We separately record whether and when you complete the Dinner Plans email-verification process. Supabase processes passwords; Dinner Plans does not receive or store plaintext passwords. We also process your family name, household memberships, roles, and invitations.

Planning content

We process dinner plans, recipe links, ingredients, servings, nutrition values, meal tags, suggested sides, grocery items, preferred brands, hidden-item preferences, and saved worksheet copies that you choose to store.

Personalization and communication choices

When a family account is created, we may ask for household-level information such as usual diners, numbers of adults and children, dinners prepared at home, meal-planning priorities, and optional dietary notes. We use these answers to personalize serving defaults, suggestions, and planning shortcuts. We also record your acceptance of the Terms, your meal-reminder preference, and your optional choice to receive marketing email. You can turn planning reminders off in Family settings and decline marketing email without losing access to the Service.

Subscription and billing information

Stripe processes subscription payments and card details. We receive and store limited billing records such as Stripe customer and subscription identifiers, billing-contact email, plan, subscription status, renewal date, payment-failure status, acquisition campaign and versioned offer terms. For limited offers, we use protected billing-email and Stripe-customer identifiers to enforce eligibility and capacity. We do not receive or store complete card numbers, security codes, or card fingerprints. To prevent interruptions, our server may check the expiration month and year held by Stripe and use it to send an expiration reminder without storing those card details.

Referral information

When a signed-in user sends a referral, we process the invited email address, referring user and family identifiers, private-link status, referred subscription milestones, qualification status, credit amount, and Stripe balance-transaction identifier. We use a protected one-way email value to require the invited email at checkout, prevent duplicate or self-referrals, enforce the six-credit limit, and investigate suspected abuse. A recipient may decline an unused invitation from the email link.

Technical and security information

We may collect IP address, browser and device information, request timestamps, authentication events, security events, errors, limited diagnostic logs, product feature usage, session start and last-activity times, and campaign parameters such as UTM source, medium, and campaign. Session cookies are used to keep you signed in and protect your account.

Meta advertising information

If you affirmatively allow Meta advertising, Meta Pixel operates on selected public marketing, About, Terms, and Privacy pages. The Pixel may send Meta the page URL, referring URL, time of visit, browser and device information, IP address, Meta cookie identifiers such as _fbp or _fbc, and a PageView event. After a Founding Families trial and new family account are successfully created, it may also send a CompleteRegistration event with a zero-dollar value, U.S. currency, and the offer name. Before that event is sent, we remove the private Stripe Checkout identifier from the browser URL. Meta may associate this information with a Facebook or Instagram account and use it for advertising measurement, attribution, audience creation, and ad personalization under Meta’s Privacy Policy and Cookies Policy. We do not send dinner plans, recipes, grocery lists, household personalization answers, private invitation or checkout identifiers, passwords, or complete payment-card information through Meta Pixel. The Pixel does not operate on subscription checkout, referral, or authenticated household-planning pages.

Information from recipe pages

When you submit a recipe URL, our server requests that page to extract recipe metadata. If standard recipe metadata is unavailable and AI-assisted import is enabled, relevant page text may be sent to our AI service provider to extract recipe details. Do not submit private or authenticated URLs.

3. How we use information

We use information to provide and personalize the Service; authenticate users; segregate household data; import and scale recipes; generate grocery worksheets; administer subscriptions; send required payment, renewal, card-expiration, access, and optional meal-planning notices; send family invitations; operate support; send marketing messages when you opt in; detect abuse; secure and troubleshoot the Service; meet legal obligations; and improve reliability. If you allow Meta advertising, we also use limited website activity to measure campaigns, attribute visits, create advertising audiences, and personalize advertising. We do not use household planning content or personalization answers for those purposes.

4. How we disclose information

We may disclose information to household members according to their roles; to infrastructure, authentication, database, monitoring, email, bot-protection, and AI vendors acting on our behalf; when you direct us to; to protect users, rights, safety, and the Service; in connection with a business transaction; or when required by law. Cloudflare Turnstile may process technical request and challenge information to distinguish people from automated abuse. If you allow Meta advertising, the Pixel discloses the limited website and device information described above to Meta Platforms, Inc. for advertising measurement and personalization. We do not sell personal information for money. This disclosure may be considered “sharing,” targeted advertising, or cross-context behavioral advertising under some U.S. privacy laws.

5. Data retention

We intend to keep account and planning information while your account is active and for a limited period afterward when needed for recovery, security, legal compliance, or dispute resolution. Backups may persist for a defined rotation period. Final production retention schedules—including logs, deleted accounts, invitations, and backups—will be published before general availability.

6. Security

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted transport, managed storage encryption, secret management, server-enforced authorization, protected sessions, input limits, monitoring, backups, and security testing. No system can be guaranteed completely secure. Learn more in our Security Overview.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, or to object to or restrict certain processing. You may decline Meta advertising when first asked or change that choice below. Declining does not affect access to Dinner Plans. Withdrawal prevents future Pixel loading on this browser and attempts to remove the Meta identifiers set for our domain; it cannot retract events already received by Meta. You may also adjust advertising controls through Meta and supported browser or device controls.

Your current Meta advertising choice is stored in this browser.
Manage Meta advertising choices

You may withdraw marketing-email consent and change optional planning-reminder preferences using the secure preference link in a lifecycle message. Reactivation emails include a separate control to stop that reminder series; required transactional notices about billing, security, and account access may still be sent. Account self-service and verified request procedures must be operational before general availability. Until then, contact privacy@yourdinnerplans.com. We may need to verify your identity.

8. Cookies

We use strictly necessary cookies for authentication and session management. Product analytics are collected first-party within Dinner Plans. We also store an advertising-consent choice for up to one year so that we can honor your selection across yourdinnerplans.com and its app subdomain. Meta Pixel and its advertising cookies do not load unless you choose “Allow Meta advertising.” When allowed, Meta identifiers such as _fbp and _fbc may persist for the periods described in Meta’s Cookies Policy. You can withdraw permission using the control in Section 7.

9. Children

The Service is intended for adults managing a household and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. Contact us if you believe a child provided information.

10. International use

The Service is operated from the United States. If you access it elsewhere, information may be processed in the United States and other locations where our providers operate. Any required transfer mechanisms will be documented before offering the Service in jurisdictions that require them.

11. Changes

We may update this policy as the Service and legal requirements evolve. We will post the updated policy, revise the effective date, and provide additional notice when required.

12. Contact

Contact Your Dinner Plans, LLC at privacy@yourdinnerplans.com or by mail at 418 Broadway, STE N, Albany, NY 12207, USA. Any required state or international privacy notices will be added before offering the Service in those jurisdictions.