Privacy Policy

Last updated: 2026-10-16

Alpha-stage notice. SameTable is in friends-and-family Alpha. This policy reflects current honest practice but has not yet been reviewed by legal counsel. Production-grade text will land before the public Beta launch (July 2026).

What we collect

  • Account data: email address, hashed password (or OAuth provider ID), display name, optional avatar.
  • Recipes you create: title, ingredients, steps, photos, notes — and any other content you submit.
  • Activity data: which recipes you save, rate, or cook; chef points earned from those actions.
  • Anonymous page-view metrics: aggregated traffic to the app and the public recipe site (no cookies, no individual identification).
  • Crash and error reports from the iPhone app: when the app crashes or hits an error, it sends a report of what went wrong — the error, the part of the app it happened in, the steps just before it, your device model, iOS version and app version. Reports are not linked to your account and don't include your name, email address, IP address or the content of your recipes.

We do not collect: payment information (no paid tier yet), location, contact lists, advertising identifiers, or social-media tracking data.

Why we collect it

  • Account data: to sign you in and link recipes you create to you.
  • Recipe + activity data: to make the product work — meal plans, shopping lists, the gamification system.
  • Anonymous page-view metrics: to know which recipes attract visitors so we can write more of what people search for.
  • Crash and error reports: to find and fix what breaks in the app.

Who we share it with

Five service providers process data on our behalf:

  • Supabase — hosts the database and authentication.
  • Vercel — hosts the SameTable web app and the public recipe site, and provides anonymous page-view analytics.
  • Resend — sends account emails: sign-in links, password resets and account notices.
  • Anthropic — provides the Claude AI behind Mira. When you import a recipe from a photo or by speaking it, or ask for a version of a recipe for a diet, we send the photo, the text of what you said, or the recipe to Anthropic to produce it. We ask before your first photo or voice import, and before you first ask for a diet version. Anthropic does not use this to train its AI.
  • Sentry — receives the iPhone app's crash and error reports, described above, so we can fix problems.

We do not sell your data. We do not share it with advertisers or marketing partners.

How long we keep it

Account data: until you delete your account. Recipes you publish: when you delete your account they stay on SameTable under the SameTable name, without your name (we remove the story field and check them for personal details), unless you choose to delete them too. Unpublished recipes are deleted with your account. Payment records: 6 years, because UK tax law (HMRC) requires it. Backups: deleted data drops out of our encrypted backups as they expire. Page-view metrics: in aggregated form only, retained per Vercel's 30-day default. Crash and error reports: up to 90 days, then deleted by Sentry.

Your rights (UK GDPR)

  • Access: request a copy of all data we hold about you.
  • Correct: edit data through the app, or contact us if you can't reach a setting.
  • Delete: delete your account in the app (Account → Delete account) or at sametable.co/delete-account. It happens straight away, with no soft-delete period, and we confirm when it's done. What is kept is listed under retention above.
  • Object: tell us to stop processing your data (effectively the same as deleting your account at this stage).
  • Complain: contact the UK Information Commissioner's Office (ico.org.uk) if you're unhappy with how we've handled your data.

Contact

Privacy queries: hello@sametable.co