Privacy

Draft · pending legal review

This page is a plain-language draft. It describes how FamilyDiet is built to handle your data today; the final wording is still under legal review.

What we hold

FamilyDiet stores the information your household puts in: family member profiles and goals, the foods and recipes you save, the meals you log, and weight and macro history. Your account identity is handled by our sign-in provider (see below). We do not sell your data or use it to train models for anyone else.

One family, one isolated tenant

Each family is a separate tenant. Your household’s data lives in its own isolated space and is never mixed with another family’s — there is no shared pool of families’ meals or members.

Your rights (GDPR)

You can access, correct, export and delete your data. A full GDPR Article 15 export is built in, so you can take a machine-readable copy of your family’s data at any time. On deletion we remove or anonymise your household’s records; anonymised, non-identifying aggregates may be retained where the law allows.

Where your data is processed

Your data is processed and stored in the EU. Where a processor operates outside the EU, we rely on the appropriate safeguards required by GDPR.

Processors we rely on

• Stripe — payment processing for subscriptions. Card details are handled by Stripe; FamilyDiet never sees or stores them.
• Keycloak — sign-in and account identity, including Google sign-in when you choose it. We receive your email and the tokens needed to sign you in, not your Google password.
• AI providers — the assistant sends the meal text you ask it to work with to a language-model provider to produce a response.

Contact

Questions about your data or these practices can be sent to our support address (added before launch).