Privacy Policy

Who we are

Batch & Bowl ("we", "us", "our") is a meal-planning app that generates personalized weekly meal plans, recipes, and grocery lists. We're currently in a private beta: a small, invited group of households is using the product before a public launch. This policy explains what we collect from you, why, and how it's handled while the beta is running.

Questions about this policy or your data? Contact us at [contact email].

Information we collect

We collect the following categories of data:

• Account information: your email address and name, used to create and secure your account (sign-in, password resets, and account recovery).
• Preferences, including allergy information: your household size, dietary preferences, skill level, budget, dislikes, and any allergies you tell us about. Allergy entries are health-adjacent information — we collect them only to keep unsafe recipes out of your meal plans, and we treat them as strict exclusions, never as suggestions or preferences.
• Meal plans, grocery lists, favorites, ratings, and pantry items: the meal plans you generate, the recipes in them, your consolidated grocery lists, any recipes you favorite or rate, and the items you track in your pantry. This is the core content of the product and is stored so your plans persist across sessions and devices.
• Product analytics: we use PostHog to understand how the app is used (e.g., which features get clicked, where people drop off). Analytics events are tied to an internal user ID only — we do not send your email address or name to PostHog.
• Error reports: we use Sentry to capture crash and error reports so we can fix bugs during the beta.

Where your data is stored

Application data (your account, preferences, meal plans, grocery lists, favorites, ratings, and pantry items) is stored in a database we operate on DigitalOcean infrastructure in the United States region. We don't currently offer regional data residency options during the beta.

How long we keep it

We keep your data for as long as your account is active. If you delete your account (Settings → Data & Storage → Delete Account, in-app), your data is removed as part of that flow. We don't keep a separate copy for archival purposes once deletion completes.

Cookies and session data

We use a single session cookie to keep you signed in. We don't use advertising or cross-site tracking cookies.

Each time you sign in, we also record the IP address and browser/device (user agent) that session was created from, so we can show you your own active sessions and let you spot and revoke ones you don't recognize. You can review and revoke your active sessions from Settings → Active Sessions at any time. This per-session data is deleted when the session ends (sign-out or revocation) or when your account is deleted.

Sharing and sale of data

We do not sell your data. We share data only with the service providers named above (our hosting provider, PostHog, and Sentry) as needed to run the product, and only to the extent described in this policy.

Your choices

You can update your preferences at any time from Settings. You can export your data or permanently delete your account and its data from Settings → Data & Storage.

Changes to this policy

Because this is a beta-stage template, this policy may change as the product and its legal review evolve. We'll update the "Last updated" date above when it does.

Contact

Questions, concerns, or data requests: [contact email].

See also our Terms of Service.