Privacy Policy

Well Stockd (“we”, “us”) is a kitchen app at wellstockd.com for tracking what’s in your fridge, finding recipes you can make, planning meals and building a shopping list. This policy explains what we collect, why, and the choices you have.

What we collect

• Your account. The email address you sign up with and a securely hashed password if you set one, plus session and account-security records.
• The data you add. Your fridge and pantry inventory, recipes you create or favorite, meal plans, and shopping lists.
• Voice input. When you use voice inventory tools, the recording is sent to OpenAI for transcription, then the transcript is sent to Anthropic to identify the items you named. Well Stockd does not log or store the recording or transcript after processing.
• Hands-free cooking. When you talk to the cook assistant, the recording is sent to OpenAI for transcription. The transcript goes to Anthropic with the recipe you’re cooking (its name, ingredients, amounts and steps) and, when you finish, the list of what you used, so it can answer you. Its answer is sent to Fish Audio to be read aloud. Well Stockd does not store the recording or transcript.
• Pick for me with AI. When you ask AI to plan your week, we send Anthropic the names of the recipes it can choose from, with details such as their cooking times and the ingredients you’re missing, and the names of the items in your kitchen (not their amounts or dates). If you set a grocery budget, the AI is told only that there is one, not the amount.
• Receipts and photos. When you photograph a receipt, a fridge shelf or a recipe, or forward a receipt email, we use it to draft items for you to review. See “Receipts and photos” below.
• Assistant connections. If you connect an AI assistant, we record which assistant it is, which kitchen it can use, when you approved it and when it last used your account. We store the keys we issue to it only as hashes, which can’t be turned back into working keys. Disconnecting it in Settings ends its access at once, and deleting your account removes every connection. See “AI assistants you connect” below.
• Household information. If you create or join a household, we store its name, invite code, membership, and the shared kitchen data described below.
• Subscription information. Your plan, trial, subscription status, renewal period, and provider customer or subscription identifiers. Payment-card and PayPal account details are collected by the payment provider, not Well Stockd.
• Referral attribution. If you sign up through an invite link, we record the inviting account’s referral code and the relationship between the two accounts, so referral rewards can be credited correctly.
• Usage & device data. Basic analytics about how the site is used (pages visited, approximate region, device/browser type), collected via Google Analytics.
• Public-page interaction data. Microsoft Clarity collects clicks, scrolling, navigation, layout, and performance information on public informational pages to create heatmaps, aggregate insights, and session replays. We configure Clarity to mask page text, form inputs, images, and other media before recording. We do not send account identifiers or custom identity tags, and Clarity does not run in private account or kitchen areas.
• Error & performance data. Sentry receives technical error details and a small sample of route and request timing data so we can diagnose failures and performance problems. We scrub email addresses, secrets, URL query values, and request data before sending this information. Sentry session replay is disabled.
• Advertising & audience data. We have Google Signals turned on in Google Analytics. If you are signed in to a Google account that has Ads Personalization enabled, Google may link your activity on our site to that account. This gives us aggregated age, gender and interest reporting, lets us recognize the same visitor across devices, and allows advertising audiences to be built from site activity. Your fridge, pantry, recipe, meal-plan and shopping-list data is never included.

Account and household privacy

Your data is isolated from unrelated accounts. If you create or join a household, household members can access the household’s shared inventory, shopping list, meal plan, recipes, and favorites. An invite code allows another person to join, so share it only with people you trust. Leaving a household ends your access to its shared kitchen data.

How we use your information

• To provide the app: authenticate you, store and sync your inventory, recipes, plans and lists.
• To send transactional emails (account confirmation, sign-in links, password resets).
• To carry out the requests you start: voice inventory changes, the hands-free cook assistant and Pick for me with AI.
• To manage trials, paid subscriptions, payments, and billing support.
• To understand usage in aggregate and improve the product.
• To see where eligible public pages are useful or confusing through masked heatmaps and session replays.

We never sell your kitchen data, and your inventory, recipes, meal plans and shopping lists are never sent to advertising services. Website usage data collected through Google Analytics with Google Signals is shared with Google and may be used to build advertising audiences and to personalize ads. Under some privacy laws — including California’s — that kind of sharing counts as a “sale” or “share” of personal information, even though no money changes hands. See “Advertising and analytics choices” below for how to turn it off.

Service providers

• Supabase — database and file storage for your account and content. Well Stockd manages authentication itself rather than using Supabase Auth.
• Vercel — application hosting and delivery.
• Resend — delivery of account and other transactional email, and receiving the receipt emails you forward.
• OpenAI — transcription of voice recordings when you use voice inventory tools or the hands-free cook assistant.
• Anthropic — interpretation of voice transcripts into proposed inventory changes; reading receipt photos, forwarded receipt emails and photos of shelves and recipes; the hands-free cook assistant’s answers; and Pick for me with AI.
• Fish Audio — turning the hands-free cook assistant’s answers into speech.
• Stripe and PayPal — hosted checkout, subscription management, and payment processing when the applicable payment option is offered and you choose it.
• Google Analytics, including Google Signals — aggregate usage analytics, plus demographic, interest and cross-device reporting and advertising audiences. Data is sent both to Google Analytics and to Google’s advertising domain (stats.g.doubleclick.net).
• Microsoft Clarity — behavior analytics for masked heatmaps, session replays, and aggregate interaction insights on public informational pages. Microsoft provides and operates the service and processes the resulting data under the Clarity Terms and Microsoft Privacy Statement, which explains how Microsoft may use and disclose information.
• Sentry — error reporting and sampled performance tracing. Session replay is disabled.
• Walmart — when you choose to send your shopping list to Walmart. These can be affiliate links, and when they are, we may earn a commission on purchases at no extra cost to you; the app says so beside the button. Your purchase happens on Walmart under Walmart’s own privacy policy. When Pick for me with AI estimates what a plan’s groceries will cost, we also look up prices in Walmart’s catalog by food name. Only the food names are sent, nothing about you or your account.
• AI assistants you connect — OpenAI, Anthropic or Google, only when you connect their assistant to your account. See “AI assistants you connect”.

Receipts and photos

Photos you take to read a receipt, a fridge shelf or a recipe are sent to Anthropic to identify what’s in them. Well Stockd doesn’t store the photo; we keep only the draft items, which you review before anything is saved.

Each account has its own address for forwarding receipt emails. We receive those emails through Resend, and accept them only from your account’s email address or another address you’ve verified; anything else is discarded unread. Anthropic reads each accepted email into draft items for you to review. We delete the original email 30 days after it arrives, or straight away if you delete your account. The items and prices you save from a receipt stay in your account until you remove them.

Resend, which receives these emails for us, keeps its own copy of each one for up to 30 days after it arrives, and doesn’t let us delete it sooner. So if you delete your account, Resend’s copy of a recently forwarded receipt can last until those 30 days are up.

AI assistants you connect

You can connect Well Stockd to ChatGPT, Claude or Gemini. You sign in on wellstockd.com and approve the connection; the assistant never sees your password. Once connected, it can read your kitchen, recipes and meal plan, and add items to your shopping list. Any change to your kitchen waits until you confirm it inside Well Stockd.

What the assistant does with that information is covered by its provider’s own terms and privacy policy: OpenAI for ChatGPT, Anthropic for Claude and Google for Gemini.

You can disconnect any assistant in Settings, which stops its access straight away. Leaving a household stops its access to that household’s kitchen, and deleting your account disconnects every assistant.

Cookies and browser storage

We use a small number of cookies: ones that keep you signed in, a few of our own that remember how you found us (a friend’s referral link, a campaign link, or the first page you visited) so it can be credited when you sign up, and analytics cookies set by Google Analytics. Microsoft Clarity may also use browser storage and analytics cookies. These are the cookies and what each one does:

Other Microsoft cookies may also be used, as described in the Clarity cookie documentation. Because Google Signals is enabled, Google may also read or set advertising identifiers associated with your Google account. You can clear or block cookies and site storage in your browser, but signing in won’t work without the Well Stockd session cookie.

Advertising and analytics choices

You can switch off the advertising-related part of our analytics without losing access to any part of Well Stockd:

• Turn off Ads Personalization in your Google account at myadcenter.google.com. Google Signals then stops associating your visits here with your Google account.
• Install the Google Analytics opt-out browser add-on to stop Google Analytics entirely.
• Block or clear cookies in your browser, or use a browser that blocks third-party tracking by default.
• Browser privacy settings and content blockers can also block or clear Microsoft Clarity storage and requests.

If you are in a region with a legal right to opt out of the “sale” or “sharing” of personal information, or to withdraw consent for analytics and advertising cookies, email us at the address below and we will action it.

Retention & deletion

We keep your account and content while your account is open, including saved kitchen and household data. Voice recordings, transcripts and capture photos are used for the request and are not stored by Well Stockd. Original receipt emails are deleted 30 days after they arrive. Resend’s copy of each one is kept for the same 30 days.

You can delete your account at any time in Settings → Your data, or from the account deletion page if you can’t sign in. As soon as you confirm, you’re signed out everywhere and the account is frozen. Deletion usually finishes within minutes and always within 30 days, and we email you when it starts and when it’s done. It removes your account, your content and photos, your reminder settings, your receipts and every connection to an AI assistant or store. Resend’s copy of a receipt email you forwarded can last up to 30 days after it arrived, because Resend doesn’t let us delete it sooner. Any subscription is cancelled at once, without a refund of unused time or unused AI top-ups.

We keep a minimal record of each payment, refund and dispute (date, amount, currency, status and the payment provider’s reference) for seven years, for tax and accounting. Stripe and PayPal keep their own transaction records under their own policies and legal obligations.

If you own a household, you’ll be asked to remove its other members before deleting your account. They keep their own accounts and personal data, and we email them when they’re removed.

Microsoft Clarity retains playback data for 30 days. Click and other dashboard data, heatmaps, and sessions that are labeled or favorited may be retained for up to 9 months; Microsoft says expired data, including backups, is deleted. See Microsoft’s Clarity retention documentation.

Your choices

You can view and edit your inventory, recipes, plans and lists in the app at any time. Settings → Your data lets you download a copy of your data as one ZIP file, or delete your account. You can also disconnect any AI assistant there.

Children

Well Stockd isn’t directed to children under 13, and we don’t knowingly collect their data.

Changes

We’ll update this page if our practices change, and revise the “last updated” date above.

Contact

Questions or requests: support@wellstockd.com. See also our Terms of Service and the Contact page.