Privacy notice

Last updated 6 October 2026. Kitchen QM is for people in the UK.

Who looks after your data

Robert Price runs Kitchen QM and is the controller of your personal data under UK data protection law (UK GDPR and the Data Protection Act 2018). Contact: [contact email to be added].

What we keep, and why

Your account: your email address and a scrambled (hashed) password, so you can sign in. Needed to provide the service you asked for (contract).
Your household's planner: the people you cook for (names, portion sizes), meal plans and history, recipes and their photos, ingredients and products you scan, shopping lists, cupboard stock and cooked batches. Needed to provide the service (contract).
Diets and daily targets (optional): diets someone follows (for example vegetarian or gluten-free) and nutrition targets. These can reveal health or beliefs, which the law treats as special category data. We only keep them if you choose to add them and tick the consent box for that person; we record the date you ticked it. Untick it on the People page at any time to withdraw consent, and their diets and targets are deleted.
Recipes you share: if you share a recipe, anyone with its link can see that recipe and its photo (not your notes, your household or your plans) until you stop sharing it. Check the photo shows nothing private.
Notifications (optional): if you turn on notifications on a phone, we keep that phone's push address and your choices (which reminders, which day), so we can send the morning summary. Turn them off in Settings to delete it. Needed to provide the service you asked for (contract).
Other people in your household: if you add children or other people, add only what's needed (a first name or nickname is enough), and make sure they, or their parent or guardian, are happy for you to.

We don't sell your data, show adverts, or use tracking or analytics cookies.

Who else handles it (our processors)

Supabase: stores the database, sign-ins (and two-step sign-in keys and backup codes, if you turn it on) and photos, in London (UK).
Vercel: runs the website; its servers for this app are in London, and it's a US company, so some data may be handled in the US under the UK's approved safeguards (the UK addendum to the EU standard contractual clauses, or the UK–US data bridge).
Anthropic: only when you choose to, Anthropic's Claude reads (1) a photo of a nutrition label, to fill in the numbers, and (2) recipe text, a recipe page or up to 4 photos you import on New recipe, to fill in the form, and (3) each recipe photo you add, to check it shows food and no people or pets before it can appear on a shared recipe. They're sent once and not kept by Anthropic or us, unless you tick "Keep the original photos": then they're stored privately with the recipe (never on a shared recipe) until you remove them. Crop photos to the recipe if they show anyone. Anthropic is a US company; the same safeguards apply.
Open Food Facts: when you scan a product, only its barcode number is sent, to look it up.
Your phone's push service (for example Google, Apple, Mozilla or Microsoft, depending on your browser): only if you turn on notifications. It delivers the morning summary, which is encrypted so the push service can't read it.
Email: sign-up and password-reset emails are sent through our email provider.

How long we keep it

We keep your data until you delete it, for as long as you have an account: there's no automatic deletion of old meal plans or recipes. You can delete any item yourself at any time. When you delete your account, your sign-in goes at once; if you were the last member of your household, the household and everything in it (photos included) go too. Backups held by our database provider are overwritten within a few days.

Your rights

See and take your data: Settings, "Download my data", gives you everything in one file.
Correct it: edit anything in the app.
Delete it: Settings, "Delete my account".
Withdraw consent for diets and targets: remove them on the People page.
You can also object to how we use your data, or ask us to restrict it, by emailing us.

If you're unhappy with how we've handled your data, please contact us first. You can also complain to the Information Commissioner's Office: ico.org.uk.

Cookies and storage on your device

Only what the app needs to work, so no consent banner is required: sign-in cookies, a cookie remembering your plan view, a one-minute cookie for messages like "Recipe saved", and saved shopping lists so they work offline in the shop. Signing out clears the saved lists.

Keeping it safe

Each household's data is walled off from every other household's in the database, connections are encrypted, and photos are only shown through short-lived private links. If there were ever a breach affecting your data, we'd tell the ICO within 72 hours where required, and tell you if there's a high risk to you.

Age

Account holders must be 18 or over.