Privacy policy

Effective November 9, 2026.

Dinnerary is a meal-planning and grocery-list app made by Tiny Hut Labs LLC, a Colorado company ("we", "us"). This policy says what Dinnerary collects, why, who else sees it, and how to remove it. We don't sell your information, we don't show ads, and we don't use advertising or analytics trackers.

What we collect, and why

Your account

• Your name, email address and password. The password is stored only as a secure hash, never as the password itself.
• We use these to sign you in and to show your name to the people in your household.

Your household's cooking and shopping

• Your household's settings: how many people eat, nights off, time limits, stores, shopping rules and staples.
• The recipes you add, including photos you take or upload, and recipes you save from links or other households' shared links.
• Your weekly plans, grocery lists, check-offs (including who checked an item off), ratings and notes on recipes, and meal-prep plans.
• We use this to plan your week, build your grocery list and show it to everyone in your household.

Messages you send us

• What you write in the Feedback tab, including crash reports the app sends when something breaks.
• We use these to answer you and fix problems.

Your phone

• If you turn on notifications: your phone's push token and your notification choices, so we can send you the notifications you asked for.
• Start-ahead reminders and cook-mode timers are set on your phone itself.

When things go wrong

• Our server keeps a short record of requests and errors (addresses visited and error messages, never passwords or invite and reset codes), to find and fix problems.

Who else sees it

We share only what each service needs to do its job:

• Anthropic (Claude). When you read a recipe from a photo or pasted text, the photo or text is sent to Anthropic's Claude to be turned into a recipe.
• Recipe websites. When you add a recipe from a link, our server fetches that page from the website.
• Expo and Google (Firebase). Notifications reach your phone through Expo's push service and, on Android, Google's Firebase Cloud Messaging. App updates are downloaded from Expo.
• Cloudflare. Our server sits behind Cloudflare, which carries the app's traffic and blocks attacks. Cloudflare sees the traffic it carries, including your IP address.
• Discord. When you send a Feedback message, your name, your household's name and the start of your message are posted to a private Discord channel only TJ reads, so he sees it quickly. Daily server summaries (counts and error messages) go there too.
• Kroger (King Soopers), only if you connect it. See "King Soopers (Kroger), if you connect it".
• Walmart, only if you send your list to Walmart. See "Walmart, if you send your list there".
• Amazon (Whole Foods, Amazon Fresh), only if you send your list there. See "Whole Foods and Amazon Fresh, if you send your list there".
• Your household. Everyone in your household sees the household's recipes, plans and lists.
• People you share a recipe with. A recipe you share by link can be seen by anyone with the link, for 30 days or until you stop sharing it.
• Anyone with your calendar link. If you make one (More → Calendar), anyone with the link sees your household's dinner names and times (and start-ahead jobs, if you turn those on). You can turn it off in More at any time.

We don't share your information with anyone else unless the law requires it.

King Soopers (Kroger), if you connect it

You can send your grocery list to your King Soopers (Kroger) cart. Here is how that works:

• Signing in: you sign in on Kroger's own page. Dinnerary never sees your Kroger password. Kroger gives Dinnerary a sign-in token that lets it add items to your cart. We keep that token encrypted.
• What we keep: the token, the store you picked (its Kroger store number only), pickup or delivery, and the products you chose for each food (Kroger's product numbers only).
• What we don't keep: product names, pictures and prices, and your store's name and address. These come from Kroger each time they're shown and are held in memory for a few minutes at most. We also keep no record of what was sent to your cart. Your phone remembers its own sends only until the app closes.
• What we send Kroger: your searches at your store, and the product numbers and quantities to add to your cart.
• What Kroger shares with us: Dinnerary can only add to your cart. It can't see what's in it, remove anything, or check out. Checkout happens in the King Soopers app.
• Disconnecting: tap Disconnect, or delete your account, and we delete the token at once.
• Kroger's own policy: what Kroger does with your information is covered by Kroger's privacy policy.

Walmart, if you send your list there

You can send your grocery list to your Walmart cart. There's nothing to connect, and Dinnerary never sees your Walmart account. Here is how that works:

• What we keep: the products you chose for each food (Walmart's item numbers only, and the product's barcode number when Walmart gives one).
• What we don't keep: product names, pictures and prices. These come from Walmart each time they're shown and are held in memory for a few minutes at most. We keep no record of what you sent. Your phone remembers its own sends only until the app closes.
• What we send Walmart: your product searches, and the item numbers of your chosen products to look them up. Our server sends Walmart nothing about you.
• The cart link: "Add to your Walmart cart" opens Walmart's own link, with the item numbers and how many of each. Walmart's app or site then puts them in your cart; you check out with Walmart as usual.
• Commission: Tiny Hut Labs is a Walmart affiliate. The cart link carries our affiliate id, so Walmart (through its affiliate service, Impact) knows the visit came from Dinnerary and pays us a small commission on what you buy. Walmart and Impact may use cookies or similar tracking for this. Dinnerary doesn't see what you buy, and you pay the same.
• Walmart's own policy: what Walmart and Impact do with your information is covered by their privacy policies.

Whole Foods and Amazon Fresh, if you send your list there

You can send your grocery list to Whole Foods or Amazon Fresh, which both sell through Amazon. There's nothing to connect, and Dinnerary never sees your Amazon account. Here is how that works:

• The link: "Open Whole Foods" (or Amazon Fresh) opens Amazon's own shopping-list page, in the Whole Foods or Amazon app or on amazon.com. The link carries the names and amounts of the foods you send ("Organic baby spinach, 5 oz"), and the products you chose for some. It carries nothing about you or your household. Amazon picks a product at that store for each line, and you add them to your cart and check out with Amazon as usual.
• What we keep: the products you chose for some foods (Amazon's product numbers only).
• What we don't keep: product names, pictures and prices; Dinnerary doesn't look them up. We keep no record of what you sent. Your phone remembers its own sends only until the app closes.
• What we send Amazon: nothing from our server, with one exception. When you paste a short link from Amazon's app ("a.co/…"), our server opens that one link to read which product it points to. Amazon sees that request coming from our server, not from you.
• Commission: when the Send screen says Dinnerary earns a commission, the link carries Tiny Hut Labs' Amazon Associates tag, so Amazon knows the visit came from Dinnerary and pays us a small commission on what you buy. Amazon may use cookies or similar tracking for this. Dinnerary doesn't see what you buy, and you pay the same.
• Amazon's own policy: what Amazon and Whole Foods do with your information is covered by Amazon's privacy notice.

Where it's kept, and for how long

• Dinnerary's server and database run on equipment owned by Tiny Hut Labs in the United States. The app is available in the United States only.
• Nightly backups are kept for up to about two months, then deleted.
• Your information is kept while your account exists.
• When you delete your account:
  • your account is deleted;
  • your notification settings and phone tokens go;
  • your King Soopers connection goes;
  • if you were the last person in your household, the household's recipes, photos, plans and lists are deleted too.

  Copies in backups are gone once those backups expire.

Your choices

• Change or correct your household's information any time in the app.
• Delete your account: More → Delete my account.
• Get a copy of your information: More → Download my data saves a file with everything your household keeps in Dinnerary (recipe photos are named in it, not included; ask for them by email and we'll send them if we can).
• Any question about your information: email [email protected].
• Notifications: More → Notifications, or your phone's settings.

Children

Dinnerary isn't meant for children under 13, and we don't knowingly collect information from them.

Keeping it safe

Connections to Dinnerary are encrypted. Passwords are stored only as hashes, and King Soopers tokens are encrypted. Access to the server is limited to TJ. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects it, as the law requires.

Changes to this policy

If we change this policy, we'll update the date above. If the change is significant, we'll tell you in the app.

Contact

Tiny Hut Labs LLC · [email protected]

Terms of service