Privacy Policy

SpareThyme is a meal planning app run by an individual based in Wisconsin, USA (“we”, “us”). This policy explains what we collect when you use SpareThyme, why, and the choices you have. We don't sell your information or use it for advertising.

What we collect

• Your account: your name, email address and password (stored only as a secure hash, never in readable form).
• What you add to the app: recipes, photos, recipe links, text and files you import, meal plans, shopping lists, ingredient rules, settings, and recipes you send to or receive from other accounts.
• Purchases: your plan, its renewal date and what you have bought. Payments are handled by Stripe; we never see or store your full card number.
• Feedback you give us, such as your reason for cancelling Premium.
• Device and technical information: your time zone (so “today” matches yours), notification subscriptions for devices where you turn notifications on, the IP address and browser type of each signed-in session (for security and to limit abuse), and error reports when something breaks, which are sent without your name or email.

How we use it

• To run the app: save your recipes, build meal plans and shopping lists, run cook timers and deliver recipes friends send you.
• To turn imported recipes into structured recipes and to create recipe images, using the AI services listed below.
• To bill you for Premium and purchases, and to apply your plan's limits.
• To send account email, such as password reset links, and notifications you've turned on.
• To keep the app secure, prevent abuse and fix problems.

Recipe sharing

Your account has a share code. Someone who has your code can send you recipes; before they send, they see your first name and last initial. When you send a recipe, the recipient gets a copy of it and its photo along with your first name and last initial. A copy they save stays in their account even if you later change or delete yours. You can block any account from sending to you.

Services that process your information

We use these providers to run SpareThyme. Each receives only what it needs for its job:

• Vercel: hosts the app.
• Neon: stores the app's database.
• Cloudflare R2: stores recipe photos and files you upload for import.
• OpenAI and Anthropic: read recipes you import (web pages, text, photos and files) and turn them into structured recipes.
• Black Forest Labs: creates recipe images when you ask for one, including from a photo you provide.
• Stripe: processes payments and stores your payment details.
• Resend: sends account email.
• Inngest: runs background tasks such as imports and timer notifications.
• Upstash: counts requests to limit abuse.
• Sentry: collects error reports.
• Your browser's push service (for example Google or Apple) delivers notifications to devices where you turn them on.

We may also disclose information if the law requires it, or to protect the rights and safety of our users or others.

Cookies and local storage

We use a cookie to keep you signed in and one that remembers your time zone. Your browser's local storage remembers small conveniences such as tips you've dismissed. We don't use advertising or tracking cookies.

How long we keep it

We keep your information while your account exists. A new account whose email isn't confirmed within 7 days is deleted. When you delete your account (Settings → Account Settings → Delete Account), we delete your recipes, meal plans, shopping lists, settings and uploaded photos straight away and end any subscription. Copies may remain in backups for a short time until they expire, and Stripe keeps payment records as the law requires. Recipes you sent to others stay in their accounts.

Your choices and rights

• You can view and change your recipes, name, email and password in the app, and delete your account at any time.
• You can turn notifications off for each device in Settings.
• Depending on where you live, you may have the right to ask for a copy of your information, correct it or delete it. Email support@sparethyme.app and we'll respond within 30 days.

Security

Information is sent over encrypted connections, passwords are hashed, and access to our systems is limited. No service is perfectly secure, so please use a password you don't use elsewhere.

Children

SpareThyme isn't meant for children under 13, and we don't knowingly collect information from them. If you believe a child has given us information, email support@sparethyme.app and we'll delete it.

Where your information is stored

SpareThyme is run from the United States, and your information is stored and processed there by us and the providers above.

Changes to this policy

If we change this policy, we'll update the date above, and for significant changes we'll let you know in the app or by email.

Contact

Questions or requests: support@sparethyme.app. See also our Terms of Service.