Privacy Notice

Trial program

The Spred is a pre-release trial. A small group of households is using it before public launch, and this notice describes how we handle data during that trial. We may change these practices as the product matures, and we will update this page when we do.

What we collect

• The email address you enter if you join the waitlist, along with the dinner struggle you pick from the list, when you pick one
• Your account email address
• Household member first names and age bands, entered by the adult account holder
• Allergies and dietary constraints for each household member
• Meal plans, recipes, and shopping list data you create
• Messages you send to the in-app assistant
• Technical data such as error reports and product usage, collected automatically through Sentry and PostHog
• Your network address, read from the request when you register or join the waitlist, so that one address cannot flood either form

Why we collect it

We use this data to run the service: to plan meals around your household's allergies and preferences, to build shopping lists, to respond to assistant messages, to keep the app secure and working, and to understand which features are used so we can improve them. A waitlist entry tells us where to write when a trial place opens up, and the struggle you pick tells us which dinner problems to solve first. Your network address is used only to limit how often the sign-up and waitlist forms can be submitted from one place.

Who processes it

We use a small set of service providers to run The Spred, and each sees only the data it needs to do its job: Supabase (database and authentication), Vercel (hosting), Anthropic (the AI models that generate meal plans and power the assistant; a request carries the household details the answer needs, such as member names, allergies, notes and your assistant messages, and no account identifier), Resend (account email and the waitlist welcome email), Sentry (error monitoring), PostHog (product analytics), Cloudflare (bot protection for sign-up, sign-in, and the waitlist form, which sees your device and network signals), and Upstash (the rate-limit counters, which briefly hold your network address). The app serves its own typefaces. The waitlist welcome email loads its typeface from Google Fonts and its pictures from Unsplash, so if your mail app loads remote content, those two see its network address. We do not sell your data to anyone, and we do not share it with advertisers.

Allergy and health data

Allergy and dietary information is sensitive, health-adjacent data. We collect it so that plans and recipes can be built around the allergies and dietary needs you record, and we never sell it or use it for advertising. Allergen and nutrition details can be wrong or incomplete, so treat every AI-generated meal plan as a starting point rather than a safety check: always read ingredient labels yourself before your household eats a meal.

Analytics and cookies

Product analytics (PostHog) runs only after you allow it on the prompt the app shows once, and declining is the same one-tap answer as allowing. Until you allow it, the app sets no analytics cookie and stores nothing for analytics in your browser. Your answer itself is kept in your browser so you are not asked again, and you can change it at any time here or, once signed in, under Settings, Analytics. Error monitoring (Sentry) runs regardless, because it is how we find out the app broke; it carries no account identifier, and we strip ids and names from what it receives, though an error message can occasionally quote a line of text from the page.

Children's data

Household member profiles for children are entered by the adult account holder. Children do not create accounts, log in, or use The Spred themselves; the adult who signed up is the one interacting with the app on the household's behalf.

Waitlist

Joining the waitlist does not create an account, so a waitlist entry is all we hold for you: the email address you entered and the dinner struggle you picked, if you picked one. Every waitlist email carries a one-click unsubscribe link, and using it stops the emails without you having to write to us. We keep an entry until the trial opens up or until you ask us to remove it; to have yours deleted outright, email yummy@thespred.com.

Retention

We keep your account and household data for as long as your account is open. If you ask us to close your account, we delete the data associated with it, other than what we are required to keep for legal or security reasons. That deletion takes effect at once in the live database; our daily backups keep a copy for about a week before it ages out. After deletion we keep anonymous usage totals for the household, such as how many meal plans were generated and what they cost us, under a household identifier that no longer leads to any account and is not linked to your name or email. If an AI charge is still settling when you delete, its record is erased once the charge settles, within two days. The rate-limit counters keyed to your network address are separate and short-lived: each covers a one-hour window and ages out on its own once that window has passed.

Your requests

To ask what data we hold about your household, request a copy of it, or ask us to delete your account and its data, email yummy@thespred.com. We will confirm the request and act on it directly, since The Spred is a small trial team rather than a self-service system.

Contact

Questions about this notice can go to the same address: yummy@thespred.com.