Privacy Policy

Last updated 13 September 2026 · applies to Wise Guy (formerly What to Eat: Shake & Decide) for iOS

No account or sign-in is required. Your saved meals, weekly board and shopping-list edits are kept on your device. Online features send the information needed to provide recipes, prices or AI planning. The app also sends optional usage events, which you can switch off in More.

Saved plans and lists

Your preferences, own meals, decision history, weekly plans, shopping-list edits and settings are stored locally. Planning preferences are also sent when you request an online plan. Exports you choose to share go to the destination you select. Keep an export if you need a backup; removing the app can remove its local data.

Recipe library and prices

Library requests send the selected country, dietary filters and planning options to our prices service. It returns recipes and, where available in Australia, catalogue prices. Those prices are indicative and may be incomplete. We do not need your name, address or precise location for this.

Plan my week

When you request an AI plan, fill or meal swap, the app sends the answers from the planning questions — how many dinners, how many adults and kids, which supermarkets you use, your weekly budget, your diet, how much cooking you want, and the optional free-text lines about ingredients to avoid and food you love — to a server we run on Cloudflare. That server passes those answers to Anthropic, whose AI model writes the dinners, recipes and shopping list, and returns the plan to your phone.

The request also carries the same pseudonymous RevenueCat identifier mentioned under subscriptions, which the server uses to ask RevenueCat whether that identifier has Plus, and to count how many plans it has made. Our server stores those counts (the free-plan count for as long as the app exists, the daily count for 36 hours) separately from the usage events described below. It does not log or keep your answers or the plan; they exist on the server only for as long as it takes to produce the plan. Operational logs record the request status, the model used and token counts, never content. Anthropic processes the answers to generate the plan under its own privacy policy and, per its API terms, does not use them to train its models.

Please don’t put anything in the avoid or love fields that you would not want sent to a server. Names, addresses or medical details are never needed — “no mushrooms” is plenty. If you do not request AI planning, your answers are not sent to Anthropic for generation.

Web preview

The web preview saves the last plan and a random usage identifier in this browser’s local storage. Creating a library or AI plan sends the selected options to the same services described above. Clearing browser storage removes the local copy, not any server-side usage counters. The preview is separate from your iPhone’s saved board and does not synchronise household edits.

Motion data

The app reads the accelerometer purely to notice when you shake the phone. The readings are used in the moment to trigger a pick and are never stored, logged or sent anywhere.

Location

The app never requests location access. In Eat Out mode, tapping “Find it” hands a plain search term such as “Thai restaurant” to Apple Maps. Maps takes over from there under Apple’s privacy policy. We do not receive your location, and we are not told what you searched or where you went.

If you subscribe

Subscriptions are handled by Apple. We never see your payment details, card number or billing address — Apple does not share them with us.

To know whether your subscription is active, the app contacts RevenueCat, a subscription management service, when it launches and after a purchase. RevenueCat processes an anonymous app-generated identifier and your purchase and renewal status. It does not receive your name, email address or anything you have entered in the app. RevenueCat may process this identifier and entitlement status even if you have not subscribed.

Advertising and tracking

This version of the app shows no advertisements and performs no tracking. It does not ask for permission to track you across other apps and websites, because it has nothing to track you for.

If advertising is ever introduced in a future version, this policy will be updated first, and iOS will ask for your permission through Apple’s own App Tracking Transparency prompt before anything is collected. Declining is always allowed, and the app keeps working the same either way.

Analytics

The app sends named usage events, short source/count properties, country and a pseudonymous app identifier to our Cloudflare service. Events describe feature usage, not the contents of your meals, recipes or planning answers. You can switch analytics off in More. Our service retains daily aggregate counts for up to 90 days and event quota counters for 36 hours. It can also forward events to PostHog when configured; this is separate from advertising tracking. Switching analytics off stops future app events, but does not automatically erase previously received events.

Children

The app does not require a child’s name or contact details. Please avoid entering identifying or sensitive information into free-text planning fields. The online processing described above also applies when a child uses those features.

Your rights

For questions about data associated with your app identifier, or to request access or deletion, contact us below. Include your Plan id from the app’s About screen so we can locate records without asking for your meal or dietary details. Removing the app does not itself delete server-side usage or subscription records. Apple, RevenueCat, Anthropic and, when enabled, PostHog also process data under their own policies.

Changes

If this policy changes in a way that affects what is collected, the change will appear here with a new date before the version that does it is released.

Contact

Questions about this policy: joshsalway.com/contact