Last updated October 7, 2026
AFFO ("we," "us") plans meals for your whole household and keeps that plan in sync across every phone in the family. This page explains what information we collect to do that, what we do with it, and who else ever sees it.
Account information. When you sign in with Apple or Google, we receive a unique identifier for your account and, if the provider shares it, your name and email address. We never see or store your Apple or Google password.
Household information you provide. This is the core of what AFFO does, and it can include sensitive details: household members' names and ages, dietary and medical notes you choose to add (e.g. allergies, "Type 2 diabetes," "low sodium"), recipes, meal plans, pantry items, shopping lists, stores and prices, and your grocery budget.
Photos you choose to scan. When you scan a recipe page or a grocery receipt, the photo is sent to our AI provider (see below) so the text can be read. We keep the recipe or pantry items that come out of it, not the photo itself.
Settings and device information. Your app language, your household's currency, and, if you allow notifications, a push-notification token for your device.
Usage information. Meal ratings and leftover feedback you submit; basic session activity (when a session was created and last used) needed to keep you signed in securely; and simple usage events recorded on our own servers, such as "signed in," "app opened," or "a receipt was scanned," with counts like how many items were added. These events are tied to your household and person ID and are used only to understand which features people use. They are not shared with anyone.
We do not sell your information, we do not run ads, and we do not use third-party analytics or tracking tools.
Our servers run on Cloudflare's global network, and Anthropic and Expo process data in the United States. This means your information may be transferred to and processed in countries other than the one you live in, including the United States.
We keep your data for as long as your account is active. To request deletion of your account and household data, email us at [email protected] and we'll take care of it.
You can ask us to give you a copy of your data, correct it, delete it, or stop processing it, and you can withdraw consent you've given at any time. Email [email protected]. Depending on where you live, you may have further rights under local law, and you can complain to your data-protection authority.
If you are in Vietnam, we process your personal data in line with Decree 13/2023/NĐ-CP on personal data protection and the Law on Personal Data Protection. In particular:
Session tokens are stored as one-way hashes on our servers, never in plain text, and your device keeps its own copy in secure, encrypted on-device storage rather than plain app storage. No method of storage or transmission is perfectly secure, and we can't guarantee absolute security.
AFFO is not directed at children under 13, and we don't knowingly collect account information directly from a child under 13. (You may of course add a child as a household member with a name and age — that's information about them provided by a parent or guardian managing the household, not an account belonging to the child.) If we learn a child under 13 has created their own account without appropriate consent, we'll delete the associated data.
A note on health-related information. AFFO's nutrition and dietary features use the notes you add (like allergies or medical conditions) to help plan meals, but they are not medical advice and shouldn't be relied on as such — see our Terms of Service for more.
If we make a material change to how we handle your data, we'll update this page and change the "Last updated" date above.
Questions about this policy, or want your data deleted? Email [email protected].
This policy describes AFFO in its current, early-development form. It's written to accurately reflect what the app actually does — not a generic template — but it hasn't been reviewed by a lawyer.