Week & Table — iOS beta privacy policy

Planning on this phone

Meal plans, grocery checkmarks, pantry entries, food preferences, personal recipes, notes, ratings, cooked marks and shopping confirmations are stored on your phone so the planner can work offline. Using the planner without signing in does not automatically upload that planning data.

The app has no advertising, tracking or app-operated analytics service. It does not request your location, contacts, microphone or photo library. Meal illustrations are the artwork created for this project; the app does not fetch recipe photographs.

Optional iPhone Pantry barcode lookup

When you choose Open barcode camera in Pantry, iOS asks for camera access if needed. Barcode recognition runs on your iPhone. Camera frames and photos are not saved or uploaded. Cancel, denied access and unavailable cameras leave Pantry unchanged; manual Pantry entry remains available.

Choosing a scan or an entered-code lookup sends the barcode over HTTPS to Open Food Facts. That service receives ordinary connection information including your IP address and the app User-Agent. This optional online lookup is separate from signing in and can connect even in a build without account or cloud-saving features. It needs an internet connection. No location, household plan, account identifier, camera image or private Pantry correction is sent. The app uses no lookup cookies, credentials or persistent product cache.

Open Food Facts may retain request logs under its own privacy policy. Its published visitor policy describes IP/log retention for security, technical analysis and popularity measurement; this is not a verified API-specific deletion schedule. The app cannot delete those provider logs. See the linked provider policy for its practices and privacy rights.

Product facts are volunteer-maintained and may be inaccurate, missing or unavailable. Review the editable product-name suggestion as an ingredient and enter your actual remaining amount if known. Package size is not the amount remaining. Nothing is added until you confirm. Only the normal reviewed ingredient, amount and availability are saved; decoded codes, barcode associations, brands and package facts are discarded when the flow ends.

Product facts are supplied by Open Food Facts under ODbL 1.0 and DbCL 1.0. The review links to the specific product and licenses. The app does not include product photos, a reusable product catalog or a shared barcode database. A future public product database or durable product mapping requires a new source and license review.

• Open Food Facts and its privacy policy
• ODbL 1.0
• DbCL 1.0

Optional accounts and cloud saving

Where account features are enabled, signing in connects to the configured Week & Table service on Cloudflare. The account service stores your name, email address, username, password hash and session records. Your password is sent over HTTPS for authentication and is not stored as a readable password. The iPhone keeps a session credential in its protected, device-only Keychain; it does not put that credential in the planner snapshot.

An account plan saved to the cloud includes its meal plan, recipes and edits, pantry, preferences, grocery checks, history, cooked marks and shopping confirmations. Your anonymous phone plan is kept separate; the app asks before using it for an account. Account data and queued changes are separated by the verified account and service. Cloudflare processes account data and connection information to provide hosting, database and security services.

On a shared-account service, the website and iPhone use the same account and saved plan. Changes from another device are checked before saving; conflicting changes require a choice. Recipe records needed to reopen your plan and history travel with that plan even when the two apps have different bundled recipe collections.

Sharing and recipe source links

When you choose Share, Print, Export recipe collection or Export saved data for recovery, the app hands the selected content to the iOS service or destination you choose. That destination may receive and retain it under its own privacy practices. The app does not automatically send planner exports to Week & Table.

Opening a recipe source or license link opens an external website in an iOS browser view. That website receives ordinary connection information and may use cookies under its own privacy policy. Your private planner is not attached to the link.

Retention, backups and deletion

Local data remains when you reopen the app. App updates are designed to preserve supported saved data. Device backup, transfer, offloading and restoration depend on iOS and your Apple settings; this beta does not guarantee recovery after deleting the app or losing the device. Copies you share or export are managed separately.

Where account features are enabled, Delete account is available in account settings and requires your current password and explicit confirmation. Confirmed deletion removes the account, active session records and associated cloud planning data and clears that account’s local cache and queued saves on this phone. It does not delete another account or your separate anonymous plan. Other offline devices cannot receive an immediate deletion instruction; they are denied account access when they reconnect.

Minimal account-deletion identifiers and hashed confirmation receipts are retained to reject stale writes and confirm a completed deletion. These do not contain the deleted profile, password or meal plan. Cloudflare backup/recovery history may retain earlier data until that history expires; it is separate from the active database. Security counters and expired account tokens are subject to service cleanup. Cloudflare also processes operational connection/security information under its service practices.

TestFlight diagnostics and feedback

Apple operates TestFlight and may collect installation, usage and crash information and provide beta diagnostics to the developer under its TestFlight terms and privacy practices. Feedback you deliberately send can include comments, contact information, screenshots and diagnostics. This is separate from the planner’s storage and optional cloud saving.

Check screenshots and exports before sending them because they may show your food preferences, personal recipes or notes. The app does not automatically attach your saved planner to feedback.

Questions and changes

For privacy or support questions, contact week.and.table@gmail.com. You can also use Send Beta Feedback in TestFlight or contact the person who invited you to test. Use the same contact to ask about feedback or copies you previously sent.

We will update this policy when the app’s data practices change. Additional account providers, automatic diagnostics, camera features, online content services or other new data flows require another review.