Privacy Policy

1. Who we are

NomNom Tracker is a private household food-inventory application. Access is restricted to invited users only. This policy explains what personal data we collect and how we use it.

2. Data we collect

• Username — chosen by you at registration, used to identify you within your household.
• Email address — used for account management and, if implemented, password reset.
• Password — stored as a one-way cryptographic hash; we cannot recover it.
• Inventory and shopping data — food items, quantities, and lists you enter into the app.

3. How we use your data

• To authenticate you and give you access to your household's data.
• To share inventory and shopping lists with other members of your household.
• To generate AI recipe suggestions via the Anthropic API (your ingredient list is sent; no personal details are included).

4. Data sharing

Your data is not sold or shared with third parties, except:

• Anthropic — ingredient names are sent to their API to generate recipe suggestions. See Anthropic's Privacy Policy.
• Cloudflare — your requests pass through Cloudflare's network for security and performance.

5. Data retention

Your data is retained for as long as your account exists. To request deletion of your account and data, contact the app owner directly.

6. Your rights (UK GDPR)

Under UK GDPR you have the right to access, correct, or erase your personal data. Contact the app owner to exercise these rights.

7. Security

Passwords are hashed with Werkzeug's bcrypt-based PBKDF2. All traffic is encrypted via HTTPS. Access is restricted by invitation code.