Privacy Policy

The short version

Shalotte helps you cook smarter using what's already in your kitchen. To do that, we store your kitchen inventory, equipment, meal history, and preferences. We use AI (Anthropic's Claude, plus OpenAI for turning voice recordings into text) to generate recipes and parse voice input. Your data is sent to their API but never used to train AI models. We don't sell your data. Ever. You can delete your account and all your data at any time.

What we collect and why

Account information

Email address, name, password (encrypted by Supabase Auth).

Used to create your account and authenticate you. Legal basis: contract performance.

Kitchen data

Inventory items (food, zones, quantities, expiry dates), kitchen equipment (names, brands), dietary preferences, cuisine preferences, household size, cooking skill level.

This is the core of Shalotte: we need to know what's in your kitchen to suggest what to cook. Legal basis: contract performance.

Cooking activity

Meal history (what you cooked, when, ratings, portions), planned meals, meal reservations, shopping lists and items.

Used to avoid repeating meals, learn your preferences over time, and manage your shopping list. Legal basis: contract performance.

Food preferences

Purchase patterns, preferred zones, quantities, units, frequently bought items.

Used to personalise suggestions and speed up adding items. Legal basis: legitimate interest (improving your experience).

Voice data

Audio recordings from voice input, the transcripts they produce, and the parsed results.

Used to convert your speech into inventory items. The audio is sent to OpenAI for transcription and is not stored by us; the resulting transcripts are logged temporarily for debugging and accuracy improvement. Legal basis: consent (you choose to use voice input).

Usage data

API call logs (which features you use, token counts, timestamps). No IP addresses stored in our database.

Used to monitor costs, detect abuse, and improve the service. Legal basis: legitimate interest.

Feedback

Any messages you send us through the app.

Used to improve Shalotte. Legal basis: consent.

Signup attribution

If you arrive from a link carrying campaign parameters (utm_source, utm_medium, utm_campaign), an advertising click identifier such as fbclid, or a referral code, we store those values and the page you landed on against your account, once, at signup.

Used to understand which channels bring people to Shalotte. They are stored first-party, are never sent back to the ad network, and are never used to build a profile of you. Legal basis: legitimate interest (measuring how people find us). Email us and we will remove them from your account.

Household sharing

If you create or join a household: the household name, who its members are and in what role, and the invite code used to join.

A household exists so the people you cook with share one kitchen. While you are a member, your inventory, shopping list and meal plan are visible to — and editable by — every other member of that household. Leaving the household returns you to your own kitchen. Legal basis: contract performance.

Consent and legal records

Whether you accepted the terms at sign-up and when, the state of your analytics consent and when it last changed, and whether you have unsubscribed from lifecycle email.

We keep these so we can show that consent was actually given or withdrawn, and so your email choice is honoured. Legal basis: legal obligation (Art. 7(1) GDPR — we must be able to demonstrate consent). They are deleted along with your account.

How we use AI

Shalotte uses Anthropic's Claude API to generate recipe suggestions, parse voice input, and power the Sous Chef feature. When you use these features:

• Your inventory, equipment, preferences, and recent meal history are sent to Claude's API to generate personalised results.
• Anthropic retains API logs for 7 days for safety monitoring, then deletes them automatically.
• Your data is never used to train AI models. Anthropic's API terms explicitly exclude training on API customer data.
• Voice input is a two-step process. The audio is first sent to OpenAI (gpt-4o-mini-transcribe) to be turned into text; OpenAI processes API audio without using it to train their models and does not retain it for training. The resulting transcript is then sent to Claude (Haiku model) for parsing into inventory items. Shalotte never stores the audio itself.
• Photos you take for photo inventory are sent to Claude to recognise the food items in them, processed transiently in memory, and never stored by Shalotte.

We also use OpenWeatherMap to fetch weather data for weather-appropriate meal suggestions. We do not collect or process your location: the lookup uses one fixed set of coordinates for everyone, and no personal data of any kind is sent to OpenWeatherMap.

Who we share data with

We use a small number of trusted service providers to run Shalotte. We don't sell, rent, or trade your personal data with anyone.

All providers are GDPR-compliant or operate under adequate safeguards for international data transfers.

Data storage and security

• Your data is stored in Supabase (hosted on AWS in the EU, region eu-west-1).
• All data is encrypted in transit (TLS) and at rest.
• Row-Level Security (RLS) is enabled on every table. You can only access your own data.
• Passwords are hashed by Supabase Auth (bcrypt). We never see or store plaintext passwords.
• We don't store payment card details. Stripe handles all payment processing directly.

Your rights (GDPR)

You have the right to:

• Access your data: your profile and preferences are visible in Settings. For a full copy of everything we hold — inventory, meal history, voice logs, email logs — email us and we will send it.
• Correct your data: edit your profile, inventory, and preferences at any time in the app.
• Delete your data: use the "Delete Account" button in Settings. This permanently removes all your data from our systems within 24 hours. Backup retention: Supabase backups containing deleted data expire within 7 days.
• Export your data: email us and we'll provide a copy. (Self-service export is planned for a future release.)
• Object to processing: email us to discuss.
• Withdraw consent: for optional features like voice input, simply stop using them. For marketing (if any), unsubscribe at any time.

To exercise any right, email privacy@shalotte.com or use the in-app controls.

We respond to all requests within 30 days as required by GDPR.

Cookies and local storage

Shalotte uses:

• Authentication cookies: to keep you signed in (essential, no consent needed).
• sessionStorage: to cache recipes temporarily for instant loading (cleared when you close the tab).

Product analytics cookies (PostHog, EU-hosted) are set ONLY if you opt in. You're asked first, and declining carries the same weight as accepting. Decline, and no analytics cookies are set. We do not use advertising cookies or third-party ad trackers. No Google Analytics. No Facebook Pixel.

Data retention

• Account data: Kept while your account is active. Deleted within 24 hours of account deletion.
• Voice parse logs: Retained for 90 days for debugging, then automatically purged.
• API usage logs: Retained for 12 months for cost monitoring, then purged.
• Product analytics events (PostHog, EU): Retained for 12 months, then removed by PostHog. Only collected at all if you opt in.
• Anthropic API logs: 7 days (managed by Anthropic, not us).
• Vercel server logs: 30 days (managed by Vercel).
• Supabase backups: Rolling 7-day window. Deleted data falls out of backups within 7 days.

Children's privacy

Shalotte is not intended for children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, please contact us and we'll delete it immediately.

International data transfers

Your account and app data itself stays in the EU: the Supabase database is hosted in AWS eu-west-1, and product analytics run on PostHog's EU instance.

Some of our service providers are US-based, so data sent to them leaves the UK/EEA:

• Anthropic: kitchen context for the AI features.
• OpenAI: voice recordings, for transcription only.
• Vercel: server requests and log data.
• Resend: your email address, for every sign-up, password-reset and lifecycle email. Resend is operated by Plus Five Five, Inc. (San Francisco). Its data processing agreement makes transfers under the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, and Resend is certified under the EU-U.S. Data Privacy Framework and its UK Extension.
• Stripe: payment processing, once subscription billing is switched on.
• Cloudflare: DNS queries and traffic metadata, as infrastructure sitting in front of every request.

These transfers are protected by Standard Contractual Clauses (SCCs) or equivalent safeguards as required by UK GDPR and EU GDPR.

Changes to this policy

We'll update this policy if our data practices change. Material changes will be communicated via email or an in-app notice. The "last updated" date at the top always reflects the current version.

Contact

Data controller:

Felix Wolf Dieselstraße 10 61118 Bad Vilbel Germany

Email: privacy@shalotte.com

You have the right to complain to a supervisory authority. Ours is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI), Postfach 3163, 65021 Wiesbaden, poststelle@datenschutz.hessen.de. You can also complain to the authority where you live — in the UK that is the Information Commissioner’s Office at ico.org.uk.