Privacy Policy
VERSION 2026-09-21 · EFFECTIVE ON PUBLICATION
Warm Table is a meal-planning app built by Sablyx Apps. This policy explains what information we collect when you use it, why we collect it, who else ever sees it, and the choices you have — including deleting your account entirely.
We try to collect the least data we can get away with and hold whatever we do collect with real care, rather than doing only the minimum a specific law happens to require. That principle shapes every section below.
1. What we collect
We collect the following, and nothing beyond what each feature actually needs to work:
Account information
- Your email address, used to sign in and for account-related communication
- If you sign in with Google, a basic identity token exchange handled by Google — we don't receive your Google password, and Google's own sign-in consent is separate from the consent you give us below
- A display name, either one you choose or a randomly-generated one assigned automatically — we don't require your real name
What you do in the app
- Ratings you give recipes (from "love" to "strongly dislike"), which power the recommendations you get
- Your avoid list — ingredients you've asked us to steer meal suggestions away from. We deliberately don't ask why an ingredient is on your list (allergy, dislike, religious or other dietary reason) — we don't need to know, and collecting it would tell us something about you we have no reason to hold
- Recipes you submit, if you choose to share your own — title, ingredients, steps, and photo if you add one
- Meal plans and shopping lists you generate or edit
- Meal preferences you set — preferred cuisines, preferred proteins, dietary filters like gluten-free, and which meals you plan for
- If you're part of a shared household, the other members you've added and what you've shared with them
- A preferred supermarket, if you set one, used to surface relevant specials
Device and technical data
- Standard request metadata (timestamps, error logs) generated by using the app, used only for keeping the service running and diagnosing problems
We do not collect precise location, contacts, camera or microphone access, or advertising identifiers. We do not show ads and do not use analytics or advertising SDKs that track you across other apps.
2. How we use it
- To generate and improve your meal plan and recipe suggestions, based on your ratings, avoid list, and preferences
- To show you which recipes are currently on special at your preferred supermarket
- To let you share recipes and a meal plan with other members of your household, where you've chosen to
- To operate account features — signing in, password/session management, account deletion
- To respond if you contact support
- To keep the service secure and address abuse or content violations reported through the app
We do not sell your data, and we do not use it to build an advertising profile of you.
3. Who we share it with
We use a small number of service providers to run Warm Table. Each only sees the data it needs to do its specific job:
| Provider | What it can access | Why |
|---|
| Supabase | All app data — accounts, ratings, avoid lists, recipes, plans | Our database, authentication, and backend hosting |
| Cloudflare | Recipe images, and publicly-available recipe/specials pages it scrapes on our behalf | Image hosting and our recipe-import pipeline — never your personal account data |
| Google | An identity token, only if you choose Sign in with Google | Authentication |
| Google Play Billing | Subscription status, not payment card details | Payment processing, once subscriptions are available — not yet live at the time of this policy's publication |
If you publish a recipe or join a shared household, the people you've shared it with can see what you've shared — that's the feature working as intended, not a third-party disclosure.
We share data with law enforcement or other third parties only if legally required to, or to protect the rights, safety, or property of Warm Table, our users, or the public.
If Warm Table is ever involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction — we'll tell you before your data becomes subject to a different privacy policy.
4. How long we keep it, and what happens when you delete your account
You can delete your account at any time from Settings. When you do:
- Your ratings, avoid list, meal preferences, meal plans, and shopping lists are permanently deleted
- Recipes you've published stay available to everyone already using them, with your name replaced by "Community recipe" — the same way a cookbook doesn't get pulled from other people's shelves because the author moved on. Your personal connection to that content is fully removed; the content itself isn't, since other people are relying on it
- If you were part of a shared household plan, that plan and its contents stay available to your former household's other members, with no attributable creator left once your account is gone
We aim to action a deletion request within 30 days.
5. Your rights and choices
- Access and export — you can request a copy of your data by contacting us (see below)
- Deletion — delete your account directly from Settings at any time, no support request needed
- Correction — edit your profile, avoid list, ratings, and recipes directly within the app at any time
- Withdrawing consent — where a feature depends on a specific acknowledgment (for example, our gluten-free or preferred-protein filters), you can turn that feature off at any time from Settings
6. Security
We restrict access to your data at the database level, so that only requests properly authenticated as you can read or change your own information. Session credentials on your device are encrypted using your device's own secure hardware-backed keystore, not stored in plain form.
No system is perfectly secure, and we can't guarantee absolute security — we can and do commit to taking it seriously, and to telling you if we become aware of a breach affecting your data.
7. Where your data is stored
Your data is stored on our infrastructure providers' servers in [region to be finalized]. We'll update this section with the specific region before this policy is published for real.
8. Children's privacy
Warm Table is intended for use by people aged [minimum age to be finalized — likely 13 or 16 depending on region] and older. We don't knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact us and we'll delete it.
9. Changes to this policy
If we make a material change to this policy, we'll ask you to review and re-acknowledge it the next time you open the app, the same way we do the first time you sign up. The version date at the top of this page always reflects the version currently in effect.