Privacy Policy

Break Bread helps a family plan meals together. It is run by Cremalab LLC (“we”). This page explains what we keep, who can see it, and how to get rid of it. Questions: george@crema.us.

What we store

• Your email address and the name you choose. A photo, if you add one (or use your Google photo).
• Which family you belong to and your role in it.
• Your tastes (likes, dislikes, allergies) and how you rated meals.
• Your family's recipes, meal plan, and grocery list, including photos of recipes.
• Your conversations with the Break Bread assistant, and short notes it keeps about your family.
• If you connect Google Calendar: only the times you are busy or free. We never read or store event titles, attendees, or locations. Your Google access token is encrypted before it is saved.
• Your email preferences, and a log of which emails we sent you.

Who can see what

• People in your family can see the shared recipes, plan, grocery list, each other's names, photos, tastes, and busy/free times.
• Your chats with the assistant are private to you.
• Your email address is visible to us and to the services below that deliver your email. Other family members do not see it unless you tell them.
• We do not sell your data or show ads.

Services that handle your data

• Supabase: database, sign-in, and file storage.
• Vercel: hosting.
• Anthropic: the assistant, recipe import, and grocery-aisle guesses send the relevant text (your messages, recipes, family tastes) to Anthropic to generate a reply. Under Anthropic's API terms that content is not used to train its models.
• Resend: sends our emails (sign-in links, weekly planning, reminders).
• Sentry: error reports when something breaks, so we can fix it. Reports include your account id and technical details, never your recipes, tastes, messages or email address.
• Google: sign-in and, if you choose, Calendar busy/free times.

Google user data

If you connect Google Calendar we ask only for free/busy access and your basic profile (name and photo). We use it to show which nights people are home and to show your photo. Break Bread's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use it for advertising or share it with anyone else, and no person at our company reads it except where needed for support you ask for or to follow the law. You can disconnect in Your calendar at any time; that revokes our access at Google and deletes the busy/free times we saved. You can also remove access from your Google Account settings.

Your choices

• Download a copy of your data or delete your account from the Family page. Deleting removes your account, tastes, ratings, chats, and calendar connection. Recipes, plans, and groceries you added stay with your family without your name on them. If you are the only member, the family is deleted too.
• Leaving a family removes your tastes and ratings from it.
• Turn emails on or off under Emails on the Family page.
• Anything else, such as a correction, email george@crema.us.

How long we keep it

We keep your data while your account is open. After you delete it, it is removed from the app right away and disappears from backups as they age out.

Security

Data is encrypted in transit, each family's data is separated by database rules so other families cannot read it, and calendar tokens are encrypted. No service is perfectly secure; tell us if you spot a problem.

Children

Break Bread accounts are for people 13 and older. Parents may add what their kids like to eat, but children should not create their own accounts.

Changes

If we change this policy in a meaningful way, we will email you before it takes effect.