Skip to main content
Dinner Cents

Privacy

Privacy Policy

Last updated October 31, 2026

This policy explains what the Dinner Cents iPhone app and this website collect, where it goes and what you can do about it. Questions or requests: waadrarii@gmail.com.

The short version

  • Your household, budget, food rules, pantry and saved week stay on your phone. They are not sent to us.
  • Your ZIP code is used once to find nearby stores. It isn't saved by the app and isn't sent to analytics.
  • Prices are fetched when you plan and never saved, on your phone or on our servers.
  • You don't need to give a name or email to use the app. Adding an email after you subscribe is optional.
  • The app sends usage analytics and crash reports to PostHog, tied to a random identifier, not to your name, email or ZIP code.
  • We don't sell your data, show ads or track you across other apps.

This website

This website has no sign-up, no forms, no payments, no analytics and no advertising. It doesn't set cookies or load fonts or scripts from other companies. Like any website, the hosting provider may keep ordinary request logs, such as IP address, browser type and the page requested, to serve and protect the site. If you email us, your email provider and ours handle that message.

The rest of this policy is about the Dinner Cents iPhone app.

What stays on your phone

The app saves these in its own storage on your iPhone:

  • Your plan settings: how many adults and kids, which nights you cook, your weekly budget, whether Cheapest week possible is on, your diet, allergies and foods you skip
  • The store you picked, including its name and address
  • Your current week: which dinners are on which nights, when you planned it, the household size and the budget. Prices and Kroger product details are not saved
  • Items you marked as Have it on the shopping list
  • Whether you've finished setup and your trial reminder choice
  • Your last known subscription status, so the app opens quickly
  • A random identifier for this app installation, described below
  • The sign-in session for your Dinner Cents account, described below

We can't see any of this. It stays until you delete the app, and it may be included in your iPhone or iCloud backups like other app data.

What leaves your phone, and why

Finding stores and prices

When you type your ZIP code, the app sends it to our server function to look up Kroger family stores within 10 miles. When you plan a week, the app sends the store's ID and the generic names of the ingredients in your dinners, such as "ground beef" or "rice", so the function can find matching products and today's prices at that store.

Our server function passes these lookups to Kroger's developer API. Kroger receives them from our server, not from your phone, and without your account ID, email or any identifier for you. Our function doesn't save the ZIP code, the results or the prices in a database. Our infrastructure provider, Supabase, keeps routine request logs for a limited time, and those logs can include the ZIP code or store ID in the request.

The app keeps the ZIP code in memory only while you pick a store. Your allergies, diet and foods you skip are applied on your phone and are never sent.

The app does not ask for location permission. It only knows the ZIP code you type.

Your Dinner Cents account

So that only the app can use our price lookups, the app creates an anonymous account with Supabase the first time it needs one. It has a random account ID and no name, email or password. The app keeps its sign-in session on your phone.

After you subscribe, you can choose to add an email address to that account. Supabase stores the email with the account and uses it to send you one-time sign-in codes. We use it only for sign-in and for replying if you contact us. We don't send marketing email, and the email isn't sent to our analytics or purchase providers.

The random app identifier

On first launch the app creates a random identifier for this installation. It isn't based on your device, your Apple Account or anything about you. It's the ID our analytics and purchase providers use, so they can count usage and match a subscription to the app without knowing who you are. Deleting the app deletes the identifier from your phone.

Purchases

Apple handles payment through your Apple Account. We never see your card details. The app uses RevenueCat to check and manage your subscription. RevenueCat receives the random app identifier and your App Store purchase and subscription information, such as the product, price, trial and renewal status, and stores it on our behalf. RevenueCat also records the same random identifier as the analytics ID, so purchase records and usage analytics can be matched.

Usage analytics

Release versions of the app send usage events to PostHog, on PostHog's EU servers, to help us understand which parts of the app work and where people get stuck. Development builds send nothing. Events are tied to the random app identifier and include things like:

  • Which setup step you viewed or finished, and how long setup took
  • Whether a store search found stores and how many, and the store chain you chose (for example "KROGER"), never the ZIP code or store address
  • How many dinners were planned, whether the week was over budget, how many ingredients were priced and whether planning failed
  • Which dinner you opened, by our own recipe ID and its position in the week, and the number of items on your shopping list
  • That you tapped Have it or Add back, without the item's name
  • Paywall views, the plan you chose, and purchase, restore and cancellation events with the product, price, currency, billing period and whether a trial applied
  • Your subscription status: whether you're paying, which plan and whether in a trial
  • Whether you allowed notifications, and when the app is opened or closed

The PostHog library also adds standard technical details, such as device model, iOS version, app version and build, screen size, and your language and time zone settings. Your IP address reaches PostHog as part of any internet connection; the app tells PostHog not to use it to look up your location.

The app removes any field that could hold a ZIP code, address, email, name, location or ingredient before an event is sent. Session recording, surveys and push-notification tracking are turned off.

Crash and error reports

Release versions also send crash and error reports to PostHog. They contain technical details about the failure, the device model, iOS version, app version and the random app identifier.

Trial reminders

If you ask for a reminder before your free trial ends and allow notifications, the app schedules it on your phone. No push token or notification content is sent to us or anyone else.

Support email

If you contact support from the app, it opens an email with the app version, build, iOS version and device model filled in. You can edit or remove those before sending. We use what you send only to help you.

What we don't do

  • We don't sell or rent personal information, or share it for advertising.
  • The app has no ads, no advertising identifier and no tracking across other companies' apps or websites.
  • The app doesn't access your location, contacts, photos, camera or microphone.

Service providers

These providers may process information in the United States or other countries. PostHog processes our analytics in the EU.

How long data is kept

  • Data on your phone stays until you delete the app.
  • Your Dinner Cents account, including any email you added, is kept until you ask us to delete it. We haven't set up automatic expiry for accounts yet.
  • Analytics, crash reports and subscription records are kept by PostHog and RevenueCat for as long as our accounts with them keep them. We haven't set a shorter fixed period yet. Apple keeps its own purchase records.
  • Support emails are kept as long as needed to help you, and then deleted.

We'll update this page if any of this changes.

Your choices

  • Delete the app to remove everything it stored on your phone, including the random app identifier.
  • Turn notifications off at any time in your iPhone's Settings.
  • Ask us to delete your Dinner Cents account and email. How to delete your account
  • Ask us what we hold about you, or to correct or delete it, by emailing waadrarii@gmail.com. Depending on where you live, you may have legal rights to do this. We may need to confirm you own the account first, usually by replying from the email address on it.

Analytics and subscription records are tied to the random app identifier, not to your email, so we usually can't find them from an email address alone. If you never added an email, nothing we hold is linked to your name or contact details.

Children

Dinner Cents is a meal-planning and grocery tool for adults. It isn't directed to children under 13, and we don't knowingly collect personal information from them. If you think a child has given us an email address, contact us and we'll delete it.

Security

Data sent between the app and our services uses encrypted HTTPS connections, and account data is held by Supabase with access controls. No system is perfectly secure, so we can't promise absolute security.

Changes to this policy

If the app starts collecting something new or uses data differently, we'll update this page and the date at the top before the change ships.

Contact

waadrarii@gmail.com