Privacy

Last updated 17 September 2026

What Craive stores

The names and colours you give family members, the meals you enter and any notes you write about them, how each member rates them, your weekly plan, what you confirm you cooked, and your grocery list. Craive stores the email address you sign in with so it can find your kitchen again, and the email addresses of anyone else you invite to plan.

Meal notes are free text. If you write something health-related there — an allergy, a diet — it is stored exactly as you typed it, with the rest of your kitchen, and shown to everyone who plans with you.

What Craive does not store

No location beyond the time zone your phone reports, no photos, no contacts, no calendar data in this version. Family members other than the signed-in parents have no accounts and no email addresses in Craive; they are names you chose.

Where it lives

On this phone, so a change you make in a dead zone is kept until it can be sent and the list is there when you have no signal. IndexedDB holds the last copy of your kitchen and the outbox. The outbox holds changes waiting to be sent and changes Craive refused, each marked with the internal id of the kitchen it was made in. Refused changes stay on this phone until you deal with them, or until you sign out and choose to forget them. localStorage holds anything half-typed — a meal form, the several-at-once box, a family member, a usual, and the planner box, which can hold the other parent's email address — the address you last signed in with, how many times the app has opened here, and whether you dismissed the install card. A cookie, craive-tz, remembers your time zone for a year so tonight is tonight the moment the page first shows, not a guess it corrects a beat later. A second cookie, craive-hh, remembers which of your kitchens you last opened, so returning to Craive puts you back where you left off instead of guessing. When your session ends, the sign-in screen clears the kitchen copy, every draft, the address and craive-hh; changes still waiting stay until that address signs in again. Delete all my data (under Family) removes the outbox, the launch count, craive-tz and craive-hh along with everything else. Neither cookie says anything about your family — craive-tz is a time zone name and craive-hh is an internal id for a kitchen, not its contents.

And on our servers (Supabase, hosted in the United States) so everyone who plans sees one kitchen. The server keeps the last thirty versions of your kitchen so we can restore it if something goes wrong; those go when the kitchen does.

Error reports go to Sentry with cookies, request bodies, addresses and phone numbers stripped before they leave the app. There is no session replay of any kind — neither the error reporter nor the analytics record your screen. Product analytics, when enabled, record page views only: no clicks, and never names, emails or meal names. Analytics keep nothing on this phone — no cookie, nothing in its storage — so every visit looks to them like a new one.

Who can sign in

Craive keeps a list of the email addresses allowed to sign in. Your address stays on that list until you ask us to remove it, so it is not deleted by Delete all my data.

Deleting

Before either of the below, Download my data, under Family and again on the delete sheet, saves the kitchen as you see it — members, meals, ratings, the plan and the list — as a file on this phone. Nothing is sent anywhere to make it.

Delete all my data, under Family, removes the kitchen you set up immediately and completely, for everyone who plans in it. If you were invited into someone else's kitchen, Leave this kitchen, under Family, removes your address from the kitchen and, within its next thirty changes, from its version history, and leaves their kitchen intact. The hosting provider's own backups age out within thirty days; we keep nothing for you afterwards.

Children

Craive is used by parents. It does not knowingly collect information from children and provides no accounts for them.

Your rights

You can see everything Craive holds about your kitchen by opening it, take a copy of it with Download my data (a JSON file any text editor or other software can read), correct it by editing it, and delete it with Delete all my data or Leave this kitchen. The one thing those controls do not reach is your address on the sign-in list: write to the address below to have it removed, or to ask anything else about your data, and we will answer within a month.

Contact

privacy@stoudtlabs.io