Effective date: set when this policy is published.
Weekwell is made by Profectus Plus LLC. In this policy, "we" means the developer and "the app" means Weekwell for iPhone, iPad and Android, with its home screen widgets, its share extension and its Siri shortcuts.
The short version
- Almost everything stays on your device. Your food rules, meal plans, grocery lists, pantry, recipes and photos, notes, cooking journal and food diary are kept on your phone or tablet.
- No account and no Weekwell server. There's nothing to sign up for, and we hold no copy of your plans, lists, recipes or food rules.
- No ads, no analytics, no tracking. The app has no advertising, analytics or attribution software, and we don't sell or share your data.
- Crash reports go to Sentry, a crash-reporting service, so we can fix bugs. Before a report leaves your device, the app removes your identity, IP address, location and the error's message text.
- A barcode you scan goes to Open Food Facts, a public food database, to look up the product. Only the barcode number is sent.
- A recipe link you import is opened by the app, which reads the recipe from that website.
- Voice features use your device's own speech recognition, which may send audio to Apple or Google to turn it into text. Weekwell keeps no recordings.
- Purchases, once Weekwell Plus is on sale, are handled by Apple or Google, with RevenueCat keeping track of the subscription. We never see your payment details.
- Backups and shares happen only when you start them, and go only where you send them.
What stays on your device
Your food rules, plans and kitchen
The app keeps all of this in its own storage on your phone or tablet:
- your first name, if you enter one, and your household size and servings;
- your food rules: diet style, allergens to avoid, a religious ingredient preference (such as halal, kosher or Jain-style), ingredients you exclude, and cuisine, cooking-time, budget and equipment preferences;
- meal plans across weeks, saved recipes, recipes you import, recipe photos and notes;
- grocery lists, pantry items with optional expiry dates, store layouts, package prices and budgets;
- your cooking journal and ratings, an optional food diary and nutrition targets;
- family nicknames, dislikes and eating styles, if you add them.
Sign-in details for the optional services in Features that need a service you set up go in your device's secure storage.
Sensitive choices
A religious ingredient preference can reveal your beliefs, and diet and allergen choices can reveal things about your health. Weekwell uses them only to choose recipes on your device. They're never sent anywhere, never shared in a household pack, and never used for ads.
Text and barcode recognition
Reading a recipe photo, a receipt or a PDF page, and scanning a barcode, run on your device with Google's ML Kit. Weekwell doesn't upload those images, and it saves only the items you choose to keep.
Notifications and widgets
Cooking timers and reminders are notifications your device schedules itself, after you allow them. Their text may show on your lock screen, depending on your device settings. Widgets are off until you turn them on; then they show your upcoming meals, grocery items and the dish you're cooking, from data kept on the device.
What leaves your device
Crash reports (Sentry)
When the app crashes or hits an error, it sends a report to Sentry, a crash-reporting service in the United States, so we can find and fix the bug.
- What a report contains: the type of error, where in the app's code it happened, the app version, and the device model and operating system version.
- What the app removes before sending: your identity, IP address, location, device ID, time zone, language and region, install ID, the error's message text and any other added details.
- What is never collected: screenshots, screen layouts, session recordings, performance traces and logs.
- Development builds never send reports. Our Sentry project is also set to discard IP addresses.
There's no switch in the app to turn crash reports off.
Barcode lookups (Open Food Facts)
When you scan a grocery barcode, the app sends the barcode number to Open Food Facts, a public, collaborative food database, and gets back the product's name, size, nutrition and allergens. The camera image isn't sent.
Recipe links you import
When you import a recipe from a link, the app requests that web page from the recipe's website, the way a browser would, and reads the recipe from it. The website sees that request, including your IP address, under its own privacy policy. The recipe is then saved on your device.
Voice (Apple and Google speech recognition)
Voice commands in Cook now and grocery dictation are off until you turn them on. They use your device's own speech recognition, from Apple or Google, which may process your voice online under their privacy policies (Apple, Google). Weekwell keeps no recordings or transcripts of commands. When you ask Siri to add groceries, Apple handles the request, and the app keeps its text on your device until you add or discard it. Read aloud uses your device's own voice.
Purchases (Apple, Google and RevenueCat)
Weekwell Plus, an optional subscription, isn't on sale yet. When it is, Apple or Google take payment and handle your account, and RevenueCat, a subscription service, keeps track of what you bought under an anonymous ID. We never see your payment details or your name. On Android, the purchase library already connects to RevenueCat with that anonymous ID when the app starts.
Things you choose to share
- A private backup is one file with your preferences, food rules, recipes and photos, notes, journal, diary, pantry and plan, without passwords or sign-in details. It goes only where you save or send it.
- A household pack is text you send to someone: your plan, grocery extras, imported recipes and, if you choose, pantry items. It never includes your food rules.
- A calendar file holds your planned meals' names, dates and times.
- Shopping in a store's app or website: the app copies your unchecked list to the clipboard and opens that store's product search in your browser. The store sees only the search you land on.
- A cookbook PDF holds the recipes you pick, and your notes and photos only if you add them.
Features that need a service you set up
A few features work only with a Weekwell service address entered in the app. We don't run that service today, so in this version these features are off for everyone, and none of them sends anything:
- Household sync: an email and password account that shares your plan, pantry, groceries and recipes with your household. Your food rules, favorites, budgets and notes would stay on your device.
- Shopping links: sending the items you review and confirm to a grocery delivery service to make a shopping link.
- Recipes from social videos: sending a public video's address to an extraction service that turns it into a recipe draft.
- Pantry photos: sending a photo you choose, with your consent each time, to Google's Gemini AI to list what's in it.
- Calendar subscriptions: a calendar link that keeps your meal plan up to date in your calendar app.
Release builds accept only secure (HTTPS) service addresses. Before we turn any of these on, we'll update this policy to say who receives your data and how long it's kept.
Permissions the app asks for
You can allow or remove each of these in your device's settings at any time. The features that need it stop, and the rest of the app keeps working.
| Permission | What Weekwell uses it for |
|---|---|
| Camera | Scanning recipes, grocery barcodes and receipts, and taking photos for your recipes |
| Photos | Reading only the photos you pick, to import a recipe, scan a receipt or add a recipe photo |
| Microphone and speech recognition | Voice commands in Cook now and grocery dictation, once you turn voice on |
| Notifications (and exact alarms on Android) | Cooking timers and reminders |
| Internet | The crash reports, barcode lookups, recipe imports and purchases described above (not asked for, and not something you can remove) |
Weekwell doesn't ask for your location, contacts or calendar, and doesn't track you across other apps.
What we don't do
- We don't show ads or use advertising or analytics services.
- We don't track you across other companies' apps or websites.
- We don't sell, rent or trade anyone's data, and we don't share it with data brokers.
- We don't use your food rules, religious preference, allergens, diary or family details for anything but planning your meals on your device.
- In this version, nothing you photograph or type is sent to an AI service.
How long data is kept
| Data | Where | How long |
|---|---|---|
| Everything you add in the app | Your device | Until you delete it or remove the app |
| Private backup files | Wherever you save or send them | Until you delete them |
| Android's own backup of the app | Your Google account | Under your Android backup settings |
| Crash reports | Sentry, in the United States | [to be filled in from our Sentry plan] |
| Barcode lookups | Open Food Facts | We keep nothing; Open Food Facts' own logs are under its terms |
| Purchases, once on sale | Apple or Google, and RevenueCat | Under their terms |
Your choices, and deleting your data
- Camera, photos, microphone, notifications: allow or remove them in your device's settings at any time.
- Voice and widgets stay off until you turn them on in the app.
- A backup: Profile › Backup & restore › Export private backup saves one file. Restoring it replaces the data on the device.
- Deleting everything: remove the app, and its data on your device goes with it. Backup files you saved stay where you put them until you delete them.
- Android's own backup may keep a copy of the app's data in your Google account. Turn it off or delete it in your device's Google backup settings.
- Crash reports can't be turned off in the app today.
Because we don't hold your data, we can't look it up, change it or delete it for you. The app and your device's settings do that directly.
Children
Weekwell is a meal planner for adults and households, and isn't designed for or directed at children. Family nicknames, dislikes and eating styles you add stay on your device.
Security
- The app's data on your device is protected by your device's own security and the app's sandbox.
- Sign-in details for the optional services are kept in your device's secure storage (the Keychain on iPhone and iPad, the Keystore on Android).
- The app's own connections to Sentry, Open Food Facts and RevenueCat are encrypted.
- We run no servers, so there's no database of users to breach.
No system is perfectly secure. If we learn of a problem that affects your data, we'll fix it and tell you as the law requires.
Your rights
Depending on where you live (for example in the EU, the EEA, the UK or California), you may have the right to know what data we hold about you, get a copy, correct it, delete it, object to or restrict its use, and complain to a data protection authority. We hold almost nothing that identifies you. To use these rights, or to ask a question, write to us (see Contact).
Legal bases (EU, EEA and UK). Draft for counsel: the features on your device, purchases and the lookups you ask for are needed to provide the app; crash reports rely on our legitimate interest in keeping it working. Counsel should check this, including whether crash reports need consent first.
Transfers. Sentry stores crash reports in the United States, and Open Food Facts, RevenueCat, Apple and Google may process data outside your country. [to be filled in: the safeguards used]
Changes to this policy
When the app starts handling data in a new way, we'll update this policy before the update ships, change the effective date above, and mention it in the update's notes. Earlier versions will stay available at [URL].
Contact
Profectus Plus LLC, [email protected]