Privacy notice

Updated 8 November 2026.

Daily Menu stores your name, email, password hash, meal plans, grocery lists, reminder preferences, household membership and service activity in the operator’s Cloudflare account. Passwords are salted and hashed; plaintext passwords and email codes are not included in application logs.

Your personal menu is private. Household members can see their household’s menus, groceries and change history. Owners control membership and editing access. The normal administrator overview excludes meal values. Operational database access and recovery remain under the operator’s control.

Brevo processes verification, recovery, invitation and opted-in reminder emails. Browser push services process subscribed notification delivery. Reminders can contain dish names. Email and push reminders are off until you enable them; no marketing or third-party analytics are included.

Daily Menu uses an essential secure session cookie and device-local preferences. If offline copies are enabled, previously opened menus are saved on this device, including queued meal edits. They are not encrypted with a separate app password. Use your phone’s lock and avoid shared devices. Sign out to clear device copies, or disable offline saving after syncing.

Private daily platform backups retain 30 days. Local exports you create remain wherever you save them. Active account and menu records stay until the operator handles a deletion request. Audit history is read-only in the app and subject to operational retention. Contact the operator through Settings → Contact support for access, correction, export or deletion requests. Removal from a household stops future access but cannot retrieve copies someone previously exported.

Cloudflare, Brevo and your browser’s push provider may process data internationally under their terms. The application operator should supply their identity and support contact before offering the service publicly.