Privacy Policy
Last updated November 6, 2026
This policy explains what personal information Dinner Shelf collects in the app, widgets and on dinnershelf.com, why, who we share it with and what rights you have. We do not sell your personal information and we do not show third-party ads in the app.
1. Who is responsible
Dameli Aimbetova, a sole proprietor doing business as Dinner Shelf, 4815 Eldorado Mews, Vancouver, BC V5R 0B2, Canada, is responsible for your personal information. Our Privacy Officer, Dameli Aimbetova, can be reached at privacy@dinnershelf.com.
2. What we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Account | Email, name, Sign in with Apple identifier. We sign you in with one-time codes sent to your email, so we keep no password | You |
| Preferences | Diet, allergies, disliked ingredients, daily calorie and macro goal, units | You, in onboarding and settings |
| Your recipes and imports | Links you share, recipes you save or type in, screenshots, photos of cookbook pages, notes, collections, edits | You |
| Meal plans and food logs | Planned meals, servings, water intake, photos and text descriptions of meals, calorie and macro estimates | You and our AI features |
| Groceries | Grocery lists and who you share them with | You |
| Purchases | Subscription status, plan, renewal dates, country, the email you give at checkout, Stripe customer and subscription IDs. Not your card details | Stripe |
| Device and usage | App version, device model, OS, language, time zone, an anonymous device ID, and a few in-app events recorded by our own server (meal planned, cooking finished, recipe saved, collection viewed, week planned) | Your device |
| Website | Page views, sections seen, store-button clicks, FAQ opens, offer views and checkout starts, referrer and UTM tags, country (if our CDN supplies it), device type, random visitor and visit IDs. We do not store your IP address | dinnershelf.com, recorded by our own server; the IDs are kept in your browser only if you choose OK on the storage notice |
| Creator requests | Name, handle, email, proof of identity or ownership, messages | Creators who contact us |
| Support | Messages and attachments you send us | You |
Health-related information. Your calorie goal, food and water logs, diet and allergies can reveal information about your health. Under Canadian privacy law this is sensitive information, and in some US states it is consumer health data. We process it only to provide the features you turn on, based on your explicit consent, which you can withdraw at any time in Settings.
Widgets, Live Activities and controls. Widgets, Live Activities and Control Center controls show data from your account on your device, and can log water, snacks and grocery items without opening the app. This content is stored on the device and is not shared with Apple or Google beyond what the operating system needs to display it. Photos taken with the quick camera are processed in the same way as other food photos (sections 4 and 7). If you live in Washington State or Nevada, see also our Consumer Health Data Privacy Policy
3. How we use it
Dinner Shelf is offered in the United States and Canada. Under Canadian privacy law (the federal Personal Information Protection and Electronic Documents Act, PIPEDA, and British Columbia's Personal Information Protection Act), we collect, use and disclose personal information only for purposes a reasonable person would consider appropriate, and with your consent.
| Purpose | Consent |
|---|---|
| Create and run your account, sync across devices | Given when you create an account; needed to provide the Service |
| Import recipes, scale servings, build grocery lists, cook mode | Needed to provide the features you ask for |
| AI food logging, calorie and macro estimates, goals | Express consent for health-related data; needed to provide the features for the rest |
| Manage Premium and trials | Needed to provide the Service you pay for |
| Keep the Service secure, prevent abuse and fraud, enforce usage limits | Needed to provide the Service, and as the law allows |
| Understand and improve the app and website | Implied consent in the app; your choice on the storage notice for keeping visitor IDs in your browser on the website |
| Handle creator credit and removal requests | As the law allows and requires |
| Service emails (receipts, security, policy changes) | Needed to provide the Service, and as the law requires |
| Product news and tips, if you opt in | Express consent, withdraw any time |
4. AI processing
When you import a recipe or log a meal, we send the content needed for that task to our AI provider, Anthropic: for example a video's caption and the transcript of its audio, a recipe web page, a screenshot, a photo of your plate or a text description of a meal. We transcribe video audio on our own server (whisper.cpp); no audio is sent to a transcription company. They return a structured recipe or a list of foods with estimated portions and nutrition.
- Providers act on our instructions, may not use this content for their own purposes and do not train their models on it.
- Food photos are deleted from our servers as soon as the estimate is ready; we keep only the list of foods and the numbers. Our AI provider, Anthropic, deletes its copy within 30 days, except content flagged for violating its Usage Policy, which it can keep for up to 2 years.
- We do not make decisions with legal or similarly significant effects about you based only on automated processing.
5. Who we share it with
We share personal information only as described here.
| Recipient | Why | Location |
|---|---|---|
| Stripe | Payments for Premium subscriptions | United States |
| Anthropic | AI that reads recipes, food photos and text: turning captions, transcripts, pages and screenshots into recipes; recognising food in photos and descriptions; nutrition estimates and ingredient swaps | United States |
| Amazon Web Services (Amazon SES) | Sending emails, such as sign-in codes and creator-claim emails | United States (Ohio) |
| Hetzner Online | Hosting: our server and database, and our own processing, including speech-to-text for recipe videos (whisper.cpp) | Helsinki, Finland |
| Apple | Sign in with Apple and App Store distribution | Global |
| Google (Google Fonts) | dinnershelf.com loads its fonts from Google, so Google sees your IP address when a page loads | United States |
| People you choose | Shared grocery lists, recipes and collections | — |
| Authorities, advisers, buyers | When the law requires it, to protect rights, or in a sale of the business, under this policy | — |
Recipes you import from public posts are shared records: if other users import the same post, they see the same recipe. They never see that you saved it, your edits, notes, collections, meal plans or logs.
6. International transfers
Dinner Shelf is based in Canada and offered in the United States and Canada. Our main servers are in Helsinki, Finland, so if you live in the United States or Canada, your information is transferred to and stored in Finland. Some providers, such as Stripe, Anthropic and Amazon SES, process information in the United States. Information stored in another country is subject to that country's laws and may be accessed by its courts and authorities. We protect it with contracts that require our providers to keep it secure and use it only for the services they provide to us.
7. How long we keep it
| Data | Kept for |
|---|---|
| Account, recipes, plans, logs | Until you delete them or your account |
| After you delete your account | Removed within 30 days; backups overwritten within a further 30 days |
| Food photos sent for AI logging | Deleted as soon as the estimate is ready; the list of foods and numbers stays in your log |
| Website analytics | Raw events 13 months, then only daily totals |
| Purchase records | As long as tax and accounting law requires, 6 years under Canadian tax rules |
| Creator requests | 3 years after the request is closed |
| Support messages | 2 years |
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or download your information, to withdraw consent, and to complain to a privacy regulator.
- In the app: Profile → Account lets you download your data and delete your account.
- On the web: dinnershelf.com/delete-account.
- By email: privacy@dinnershelf.com. We reply within 30 days and may need to confirm your identity.
California and other US states. You can request to know, delete and correct your personal information. We do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive information for purposes other than providing the Service. We will not treat you differently for using your rights. Authorised agents can contact us at the email above.
Canada. Under PIPEDA and British Columbia's Personal Information Protection Act, you can access and correct your information, withdraw your consent and ask us to delete it. If you are not satisfied with our answer, you can complain to the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).
9. Children
Dinner Shelf is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you think a minor has given us information, contact us and we will delete it.
10. Security
We use encryption in transit and at rest, access controls, two-factor authentication for staff and logging of administrative access. No system is perfectly secure, so we will tell you and the authorities about a breach where the law requires it.
11. Changes
We will post changes on this page and update the effective date. For material changes we will tell you in the app or by email before they apply.
12. Contact
Dameli Aimbetova, doing business as Dinner Shelf, 4815 Eldorado Mews, Vancouver, BC V5R 0B2, Canada · privacy@dinnershelf.com