Privacy Policy
Last updated November 13, 2026
DinnerOS is an app for planning a household's dinners, shopping for them, and cooking them. This page explains what we collect to make that work, what we don't collect, and how to get your data deleted. "DinnerOS", "we", and "us" mean the people who make the DinnerOS app and this website.
The short version: we collect what the app needs to plan your meals and share them with your household. We don't sell your data, we don't show ads, and we don't use tracking tools in the app or on this website.
What we collect
Your account
You sign in with Apple or Google. We get your name and email address from them. If you use Apple's Hide My Email, we get the relay address instead of your real one. We don't get your Apple or Google password.
Your household
Your household's name, time zone, how many people you usually cook for, who's in it, and each member's role. When you invite someone by email, we keep their email address so we can send the invite and show it as pending.
What you plan, cook, and buy
Your meal plans, the recipes you save or add, ratings, notes, Autopilot settings, food preferences and things you avoid, your pantry, your grocery lists, saved products, and the prices and order totals you enter. If you add a recipe from a link, our server opens that web page to read the recipe from it.
Order screenshots
If you add prices from a screenshot of a grocery order, DinnerOS reads the image on your phone. The screenshot never leaves your phone and isn't saved. Only the prices and total you check and confirm are sent to us.
Stores
The store you choose and your ZIP code, so we can find products near you. If you connect a Kroger family store account, Kroger gives us permission to add items to your cart there. We keep that permission until you disconnect or delete your account. We never see your store password or payment details.
Calendar, only if you allow it
When Autopilot plans a week, DinnerOS reads your calendar on your phone to see how busy each evening is. Only a label for each evening ("free", "some", or "busy") and about how many minutes are free are sent to us. Your events, their titles, times, places, and who you're meeting stay on your phone.
Location, only if you allow it
Your phone uses your approximate location to get the forecast from Apple Weather and to fill in your ZIP code. For each day Autopilot plans, we get a rough weather label: cold, mild, or hot, and rain, snow, or neither. We get your ZIP code if you use it to find a store. We never receive your location or coordinates. You can turn calendar and weather off in Autopilot's settings.
Reminders, only if you allow it
If you add your grocery list to Reminders, DinnerOS writes it to a list on your phone. We don't read your other reminders.
Notifications
If you turn on notifications, we store a device token from Apple so we can remind you of things like taking meat out to thaw or ordering groceries.
DinnerOS Plus
Apple handles payment for Plus. We use a company called RevenueCat to keep track of subscriptions. RevenueCat and we see that your household subscribed, which plan, and when it renews or ends. Neither of us sees your card or Apple account details. Purchases are recorded under your household's DinnerOS ID, not your name or email. If you use an invite code, we record which households it connected so we can give each one its free month.
How the app is used
We record what happens in the app, such as viewing, planning, cooking, or skipping a recipe, or sending a list to a store. These events help DinnerOS suggest dinners your household likes, and let us count how many households use the app each week and fix what isn't working. These events are tied to your household inside our own database. We don't send them to analytics or advertising companies.
Server logs
Like most services, our servers log requests, including IP addresses and the time of each request, to keep the service running and secure. These logs are kept for a short time.
What we don't do
- We don't sell your personal information or share it for advertising.
- We don't track you across other apps or websites.
- This website has no cookies, analytics, or tracking scripts.
Who else handles your data
We use a small number of companies to run DinnerOS. They only get what they need to do their part:
- Apple for sign-in, notifications, payments, and weather.
- Google for sign-in, if you choose it.
- Heroku (Salesforce) runs our servers.
- MongoDB Atlas stores our database.
- Resend sends household invite emails.
- RevenueCat tracks Plus subscriptions.
- Walmart and Kroger get the items on your list when you send it to them. What happens in their apps and websites is covered by their own privacy policies.
Some links to stores may include a tag that tells the store DinnerOS sent you. If you buy something, the store may pay us a commission. It doesn't change your price.
We may also share information if the law requires it, or to protect people's safety or the security of DinnerOS.
Your household can see your data
DinnerOS is built for sharing. Members of your household can see the plan, recipes, pantry, lists, and ratings in that household, along with each member's name.
Keeping and deleting your data
We keep your data while you have an account. You can delete your account in the app: open the Household tab and tap Delete Account. That deletes your account and your ratings. Any household where you're the only member is deleted too, with its plans, recipes, and pantry. Households you share stay with the other members.
Deleted data is removed from our database right away. Copies may stay in backups and logs for a short time before they expire. Deleting your account doesn't cancel a Plus subscription, because Apple bills it. Cancel it in your Apple account settings.
Your choices and rights
You can see and change most of your data in the app. You can turn off calendar, location, Reminders, and notifications access at any time in your iPhone's Settings. To get a copy of your data, correct something, or ask us anything about your privacy, email support@dinneros.app. We'll answer within 30 days, wherever you live.
Children
DinnerOS is not meant for children under 13, and we don't knowingly collect information from them. If you think a child under 13 has an account, email us and we'll delete it.
Security
Data travels between the app and our servers over encrypted connections. Sign-in tokens are stored in your phone's keychain. No system is perfect, but we work to keep your data safe and collect only what DinnerOS needs.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change matters, we'll also tell you in the app before it takes effect.
Contact
Questions about privacy? Email support@dinneros.app.