Privacy Policy

Last updated: October 5, 2026

This Privacy Policy explains how honestlogic.app (“we,” “us,” “the Operator”) handles information across Collectible Vault, Spelling Bee, Math Flash, Vehicle Log, Home Inventory, History Facts, and Family Kitchen (together, “the Apps”). The Apps share one account system and one backend, so signing in to any one of them signs you in to all of them, and this single policy covers all of them.

Information We Collect

Account information. When you sign in, we collect the email address you provide. We use passwordless “magic link” sign-in — we never see or store a password. Signing in sets a session cookie that is shared across every App's subdomain (*.honestlogic.app) so you don't have to sign in separately to each one.

Content you provide in Family Kitchen.

• Each family member (kid) profile you add — a name, and the allergens and severity level you record for them.
• Recipes you import by pasting a link, uploading a photo of a recipe card or cookbook page, or entering manually — including any photo you upload and the ingredients and steps we extract from it.
• Your meal plan (which recipe you've assigned to which day and meal) and the grocery lists you generate from it, including which items you've checked off.

Automatically collected information. We use a small number of functional cookies (your session cookie and a CSRF-protection cookie) required for the Apps to work. We use Vercel Speed Insights to measure page-load performance; it reports aggregate timing data and does not track you across sites or build an advertising profile.

How We Use Information

We use the information above to operate Family Kitchen: to sign you in, to extract a clean recipe from a link or photo you submit, to flag ingredients against the allergens you've recorded for your kids and suggest a substitute, to build your meal plan and grocery list, and to scale ingredient quantities when you change a recipe's serving size. We do not sell your information or use it for advertising.

AI-Assisted Recipe Import and Allergen Tagging

When you paste a recipe link, we fetch that page's text server-side and send it — along with a photo you upload for the photo-scan import — to Anthropic's Claude API to extract a clean, structured recipe (title, ingredients, steps) and to flag which of the FDA's major food allergens each ingredient may contain, with a suggested substitute. This happens once, at import time; we don't send your recipes to Claude on every later view. The allergen tags and substitute suggestions are a starting point, not a guarantee — see “No Warranty” in our Terms of Service.

Third Parties We Share Information With

We use a small number of service providers to operate the Apps. Each acts on our behalf under its own terms and only receives what it needs to do its job:

• Supabase — hosts our database, file storage, and authentication (magic-link email delivery). All content described above is stored here.
• Vercel — hosts the Apps and provides the performance-monitoring feature described above.
• Anthropic (Claude) — used by Family Kitchen (and several sibling Apps) to extract and tag recipe content, as described above.
• Resend — used to deliver sign-in emails and access-request notifications.

We do not share your information with anyone else, and we do not sell it.

Your Choices and Rights

You can review, edit, or delete your family members' allergen profiles, your recipes (including uploaded photos), your meal plan, and your grocery lists directly within the app. Deleting your account removes your profile and the content tied to it from our database. To request a copy of your data, ask us to delete your account entirely, or ask any other question about this policy, contact us at the address below.

Data Retention

We keep your information for as long as your account is active. If you delete a recipe, a family member's profile, or your entire account, the associated data is removed from our active database (backups may persist for a limited period before they are cycled out).

Security

We rely on our providers' security controls (Supabase, Vercel) and standard practices — encrypted connections (HTTPS), row-level database security scoping data to its owner (or an accepted co-parent on the same household), and CSRF protection on requests that change data. No method of storing or transmitting data is completely secure, and we can't guarantee absolute security.

Changes to This Policy

If we make a material change to this policy, we'll update the “Last updated” date above. Continued use of the Apps after a change means you accept the updated policy.

Contact Us

Questions about this policy or your information? Email hello@honestlogic.app.