Your family's kitchen stays your family's.

Last updated September 27, 2026

Who we are

GranDish (“GranDish,” “we,” “us”) is a family meal planner at grandish.app, run by an independent developer in Ohio, USA. This policy covers the website and the app at app.grandish.app. Questions go to privacy@grandish.app.

What we collect

If you request access

Your email address and, if you give it, your name, so we can send you an invite. To slow down abuse we also keep a one-way hash of your IP address, not the address itself. We don't add you to a mailing list; the only email you'll get is your invite. Ask and we'll delete your request.

Your account

• Your name, your email address or username, and your password. Passwords are stored only as a one-way hash (Argon2); nobody can read them, including us.
• If you use them: passkeys (we keep only the public half), and two-step sign-in, whose secret is stored encrypted.
• Your settings, like your theme and which notifications you want.

What your household adds

• Recipes, including any photos, files and notes you add, and the photos you keep with them.
• Weekly plans, shopping lists, pantry answers, dinner ratings and check-ins.
• Food preferences for each person: foods they skip, diets, and allergies. Allergy and diet information can be sensitive, so it's used only to flag recipes and plan dinners, and is visible only within your household.
• Meal history, if you import a calendar file (.ics): the date, time and title of each event in the file. Descriptions, locations and guest lists aren't kept. You can remove an imported calendar at any time in Settings.
• Your household's settings: its name, time zone, dinner times, kitchen gear, and connected devices such as a kitchen screen.

What happens automatically

• Cookies. A sign-in cookie keeps you signed in, and a kitchen screen gets its own cookie so it stays connected. We use no advertising, analytics or tracking cookies.
• Server logs. Like any website, our server and Cloudflare (below) record requests, including IP addresses and browser type, to keep the site running and secure. We don't use them to build profiles.

How we use it

To run GranDish for you: sign you in, store your recipes, plan dinners around what your household eats, build shopping lists, send the notifications you asked for, and keep the service secure. We don't use your information for advertising, we don't sell it, and we don't share it for cross-context behavioral advertising. We don't send marketing email.

Services that help run GranDish

These companies handle some of your information on our behalf, only as needed for the feature in question:

• Anthropic provides the AI that reads recipe photos and files when you use “Snap a recipe” or upload a stack of recipes. The photo or file is sent to Anthropic, which returns the recipe text. Anthropic processes it under its own terms and privacy policy; it isn't used to train AI models. Nothing else from your account is sent.
• Google, only if you connect Google Calendar. See Google Calendar below.
• Cloudflare protects the site and carries its traffic, so it handles every request, including your IP address, on its way to our server.
• Your browser's notification service (Google, Apple or Mozilla, depending on your device) delivers notifications if you turn them on. Notifications are encrypted, so the notification service can't read them.
• Recipe websites. When you add a recipe from a link, our server visits that page to read the recipe, like a browser would.

We may also disclose information if the law requires it, or to protect the safety of people or the service. If GranDish is ever transferred to a new owner (such as a company we form), this policy would continue to apply to your information.

Google Calendar

If you connect Google Calendar in Settings, GranDish asks Google for two permissions:

• See the list of your calendars (calendar.calendarlist.readonly), so you can pick which one dinners go on.
• Create, change and delete events (calendar.events), so confirmed dinners appear and stay up to date.

GranDish uses these only to put your household's planned dinners on the calendar you picked and keep them current. It only ever changes events it created, which are tagged as GranDish's. It never reads the details of your other events. When checking which of its own events are still there, it asks Google for GranDish's events only. We keep an encrypted token that lets us do this, the calendar's name, and a list of the events we made.

Data from Google is never sold, never used for advertising, never used to train AI models, and never shared with anyone except as needed to provide this feature or required by law. No person reads it. GranDish's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting in Settings › Calendar removes GranDish's upcoming events, deletes the token, and tells Google to revoke access. You can also revoke access any time from your Google Account at myaccount.google.com/permissions.

GranDish also offers a private calendar link for Apple Calendar and others. It shows your household's dinners to anyone who has the link, so share it only with family. An admin can replace it at any time, which stops the old one working.

Who in your household sees what

Everything in a household is shared with its members: recipes, plans, lists, and each person's food preferences (so the cook knows about allergies). Admins can change household settings, invite and remove members. A kitchen screen shows only tonight's dinner (its recipes and recipe card photos) and tomorrow's heads-up.

How long we keep it, and deleting it

• Your information is kept while your account is active.
• Recipe photos waiting to be read are deleted once the recipe is saved or thrown away, unless you choose to keep them with the recipe.
• You can delete recipes, imported calendars, devices and your Google Calendar connection yourself, any time.
• To delete your account or your whole household, email privacy@grandish.app from the address on your account. We'll delete it within 30 days, including photos and connections.

Your choices and rights

You can see and change most of your information in the app. You can ask us for a copy of your information, to correct it, or to delete it, by emailing privacy@grandish.app. We'll answer within 30 days and won't treat you differently for asking. Depending on where you live (for example, California or the EU), you may have further rights under local law, and we'll honor them.

Security

GranDish is served only over encrypted connections (HTTPS). Passwords are hashed, sign-in sessions are stored as hashes, and secrets such as two-step codes and calendar tokens are encrypted. Two-step sign-in and passkeys are available to every account. Our server is in the United States. No system is perfectly secure, but if something ever goes wrong that affects your information, we'll tell you promptly.

Children

GranDish is meant to be set up by adults. Households are created by adults; a parent or guardian may add family members, including children, to their household, and manages them. We don't knowingly collect information from children under 13 without a parent's involvement. If you think we have, email privacy@grandish.app and we'll delete it.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change is significant, we'll let you know in the app before it takes effect. The terms of use are at grandish.app/terms.

Contact

Questions, requests or worries: privacy@grandish.app.