Privacy Policy
Last updated 27 August 2026 · applies to What to Eat: Shake & Decide for iOS
Short version: the app does not collect anything about you. There is no account and no sign-in. Everything you do stays on your phone, with one exception you choose: Plan my week sends your answers to our server so an AI can write the plan. Nothing else ever leaves the device.
Shaking, the dishes, recipes and filters all work entirely offline. They ship inside the app itself, so none of that ever contacts us. The only feature that uses the network is Plan my week, described below.
What stays on your device
All of the following is stored only on your iPhone, in the app’s own storage. None of it is transmitted anywhere:
- Your filter preferences (diet, effort, budget, cuisines you skip)
- Your own meals and places added under My List
- Your decision history — what you picked and when
- Which options you have vetoed today
- Sound and vibration settings
- Your last weekly plan and the answers you gave to make it
Deleting the app deletes all of it. There is no copy anywhere else, which also means we cannot restore it for you.
Plan my week
When you tap Make my plan, the app sends the answers from the planning questions — how many dinners, how many adults and kids, which supermarkets you use, your weekly budget, your diet, how much cooking you want, and the optional free-text lines about ingredients to avoid and food you love — to a server we run on Cloudflare. That server passes those answers to Anthropic, whose AI model writes the dinners, recipes and shopping list, and returns the plan to your phone.
The request also carries the same pseudonymous RevenueCat identifier mentioned under subscriptions, which the server uses for two things only: to ask RevenueCat whether that identifier has Plus, and to count how many plans it has made. Our server stores those counts (the free-plan count for as long as the app exists, the daily count for 36 hours) and nothing else. It does not log or keep your answers or the plan; they exist on the server only for as long as it takes to produce the plan. Operational logs record the request status, the model used and token counts, never content. Anthropic processes the answers to generate the plan under its own privacy policy and, per its API terms, does not use them to train its models.
Please don’t put anything in the avoid or love fields that you would not want sent to a server. Names, addresses or medical details are never needed — “no mushrooms” is plenty. If you never use Plan my week, none of this happens.
Motion data
The app reads the accelerometer purely to notice when you shake the phone. The readings are used in the moment to trigger a pick and are never stored, logged or sent anywhere.
Location
The app never requests location access. In Eat Out mode, tapping “Find it” hands a plain search term such as “Thai restaurant” to Apple Maps. Maps takes over from there under Apple’s privacy policy. We do not receive your location, and we are not told what you searched or where you went.
If you subscribe
Subscriptions are handled by Apple. We never see your payment details, card number or billing address — Apple does not share them with us.
To know whether your subscription is active, the app contacts RevenueCat, a subscription management service, when it launches and after a purchase. RevenueCat processes an anonymous app-generated identifier and your purchase and renewal status. It does not receive your name, email address or anything you have entered in the app. If you never subscribe, RevenueCat holds nothing meaningful about you.
Advertising and tracking
This version of the app shows no advertisements and performs no tracking. It does not ask for permission to track you across other apps and websites, because it has nothing to track you for.
If advertising is ever introduced in a future version, this policy will be updated first, and iOS will ask for your permission through Apple’s own App Tracking Transparency prompt before anything is collected. Declining is always allowed, and the app keeps working the same either way.
Analytics
There are none. No crash reporting, no usage analytics, no third-party measurement SDKs.
Children
The app is rated 4+ and is safe for general audiences. Since it collects nothing from anyone, it collects nothing from children either.
Your rights
Regulations such as the GDPR and the Australian Privacy Act give you rights to access, correct and delete personal data held about you. In this app’s case there is almost nothing held to access, correct or delete: your data lives on your phone, and removing the app removes it. The only thing our server keeps is a count of plans per pseudonymous identifier. That identifier is not your name or email, but the app shows it under Settings → About as “Plan id”, and if you send it to us we will delete its counts. For anything held by Apple or RevenueCat in connection with a purchase, or by Anthropic in connection with a plan request, contact them directly using the policies linked above.
Changes
If this policy changes in a way that affects what is collected, the change will appear here with a new date before the version that does it is released.
Contact
Questions about this policy: joshsalway.com/contact