Privacy

The short version

• We never sell your data, and there are no ads.
• Photos of your kitchen are read and never saved. We keep the shopping list, not the picture.
• Your photos are never used to train any AI model.
• Children do not have accounts unless a parent creates one.
• You can delete everything, from inside the app or from this site.

What we collect

Your account. An email address. A password only if you choose to set one — most people never do, because signing in uses an emailed code, Apple, or Google.

Your family. The names you enter for family members, and optionally a birth year — the year only, never a full date of birth. We ask for it solely to know whether someone is under 13, because that changes what the law allows us to do.

Calendars. If you connect Google or Outlook, or subscribe to a calendar link, we store the events so the app can show your week. If you allow access to the calendars on your phone, those events are read on your device and sent to us for the same reason.

Food. The staples you track, what the app believes is in your kitchen, your shopping list, recipes and meal plans, and any allergies you record for a family member.

Photos, specifically

This is the part people care about most, so it is the part written most plainly.

1. Your phone checks for people before anything is uploaded. If someone is in the shot, the photo is not sent at all — the app asks you to retake it. We chose refusing over blurring on purpose: blurring that quietly fails still uploads the face, while refusing has no half-working state.
2. The photo is never saved. It goes to an AI service to work out what is on the shelf, exists only for the few seconds that takes, and is never written to any disk of ours. We keep the resulting list — “flour, probably out of milk” — and nothing else.
3. Your photos are never used to train any model. This is a term of our contract with the AI provider, not a preference.

Children

Hungry Household is a tool for parents. Accounts belong to adults.

A child in your family is, by default, simply an entry you made — a name and a schedule that you wrote down. That is information you gave us about your child, not information we collected from your child, and the two are different in law and in how we build.

A parent may choose to give a child their own login. If that child is under 13, we require verifiable parental consentfirst. Where we do not know a child’s age, we assume they are under 13 and ask for consent anyway.

A restricted child account cannot use the camera, cannot send messages, and is not included in any third-party analytics.

Who else sees it

We use these companies to run the app:

• Google — if you sign in with Google or connect Google Calendar.
• Microsoft — if you connect an Outlook calendar.
• Apple — if you sign in with Apple.
• Google (Gemini) — reads your kitchen photos and returns a list. It does not keep them or train on them.
• Resend — sends your sign-in emails.
• Railway — hosts the servers and the database, in the United States.

We do not sell your information, and we do not share it for advertising. Nobody outside this list gets it, except where the law requires it.

Deleting your account

In the app: Settings → Delete account. Or from here: hungryhousehold.com/delete-account.

Deleting removes your account, and — if you are the only adult on your household — that household and everything in it: family members, calendars and their events, pantry, shopping list, recipes and meal plans. If another parent shares the household, the household stays and you are simply removed from it. The app tells you which will happen before you confirm.

One thing survives, and you should know about it. We keep a security log of significant events — sign-ins, permission changes, deletions. Those records are deliberately never deleted, because a log that can be erased is not a security log. They contain identifiers and timestamps, not your family’s content.

Contact

PenSnap Software, LLC — [email protected]