Your family's plan is private to your account.

This notice describes the private account preview of FamilyMenu. The preview is being tested before any release to the main website.

Information stored

When you register, FamilyMenu stores your email address, display name, family or household name, household size, default grocery store, dietary preferences, allergies, disliked foods and cooking goals. It also stores the plans and information you create in the app, including recipes, meal options, portions, shopping adjustments, temporary store comparisons, pantry and freezer items, ratings and settings.

Your password is never stored as readable text. A one-way password hash is stored so FamilyMenu can verify your sign-in. A secure session cookie keeps you signed in; it is not used for advertising.

How the information is used

The information is used to provide your private planning space, save changes to your account, restore your plan when you sign in and operate and protect the service. If you choose Google or Apple sign-in, FamilyMenu receives the provider identifier, verified email address and name needed to create or reconnect your account. FamilyMenu never receives your Google or Apple password. FamilyMenu does not sell account or meal-planning data and this preview does not use advertising or analytics trackers.

When you choose Suggest ingredients, the recipe name, optional cuisine, meal type and serving count currently in the form are sent securely to OpenAI to create a homemade ingredient profile. FamilyMenu does not send your email address, family profile, saved meal plan or account password with that request. The generated ingredients are returned to the form for you to review and are saved only if you choose to save the recipe.

Local copies and exports

Your browser keeps an account-specific local copy of meal-planning data so recent changes are not immediately lost during a connection problem. Other accounts using the same browser are given separate local copies. If you export your data, your browser downloads a JSON file that you control; treat it as private because it may contain family preferences and plans.

Security and access

Account data is separated by signed-in user. Connections to the hosted preview use HTTPS, passwords are protected with a modern one-way hashing method and account-changing requests use security tokens. No online service can promise absolute security, so use a unique password that you do not use elsewhere.

Deletion, correction and access

You can update your family profile, change your password, export your meal data or permanently delete your preview account from the Family profile page. Account deletion removes the account profile and server-side meal data. A local copy may remain in that browser until site data is cleared, but it is not opened by another FamilyMenu account.

Technical logs and service providers

The hosting server may keep limited technical and security logs, such as an IP address, requested page, browser type and request time. These are used to operate, troubleshoot and protect the service. OpenAI processes the limited recipe details described above only when you request an ingredient suggestion. Google or Apple processes the sign-in information when you choose that provider. Resend will process the recipient email address, message content and delivery information when FamilyMenu sends verification or password-reset messages. The site currently requests its display fonts from Google Fonts, which may receive technical request information such as an IP address.

For budgeting, FamilyMenu stores attributed product-price observations from approved feeds and open sources. The price pool is refreshed on a schedule and retains recent cached observations during a feed outage. Shopping item names are matched to the cached pool on FamilyMenu’s server; your family profile, email address and meal plan are not sent to retailers or price-feed providers for each check. Prices may vary by branch, postcode, loyalty scheme and availability, so every result shows its source and freshness and should be treated as an estimate until confirmed at checkout.

Preview limitations

The preview includes email-address verification and private password-reset links. Outbound delivery remains unavailable until the FamilyMenu sending-domain records are verified. Google and Apple sign-in also remain unavailable until their provider credentials and exact callback addresses are registered. Preview data may be cleared before launch, and testers should not enter highly sensitive medical information.

Contact

A dedicated privacy contact address will be added before public account registration opens. During this private preview, please report privacy or account concerns directly to the FamilyMenu project owner who provided your access.

Last updated: 23 July 2026.