Your weekly meal plan, recipes, favorites, and budget settings are saved on your own device. Using the core planner doesn't require an account.
Family Plan is different: it requires signing in, and that shared plan data (meals, recipes, favorites, grocery list) is stored on our server so it can sync between everyone on the plan — nothing more than what's needed to show everyone the same weekly board.
If you create an account, your email address and password are handled by Netlify Identity, a service run by Netlify (our hosting provider). We never see your password in plain text. Your Family Plan invite code is saved to your account so you can recover it by logging back in if you ever lose it locally.
A family plan code links signed-in accounts to the same shared plan. Anyone signed in with the code can view and edit it, so treat it like a shared house key: don't post it publicly.
You can log out or leave a family plan at any time; leaving disconnects your device without deleting the shared plan for others. Clearing your device's app data removes locally stored recipes and settings, but not account or shared family-plan data, which lives on our server.
You can permanently delete your account at any time from the app itself, next to the log out option — this immediately and permanently deletes your account; it doesn't delete a shared Family Plan for anyone else still on it.
Questions about this policy, or requests to delete your account or data, can be sent to the address on our support page. See also our Terms of Service.