Privacy Policy
Last updated Jun 12, 2026
Overview
This Privacy Policy governs how Flavor and Thyme collects, uses, and discloses information from users of this app and all related products and services. It applies to the app and everything offered by Crystal Frazier, operating as Flavor and Thyme.
Information We Collect
Personal Information
We may collect your email address when you register or use features within the app. This is only collected when you voluntarily provide it. You may use certain parts of the app without submitting personal information.
Health & Biometric Data (On-Device Only)
If you choose to complete the optional biometrics setup, the app collects age, biological sex, weight, and height locally on your device to calculate a personalized calorie recommendation. Your raw biometric inputs are never transmitted to our servers. If you have Cloud Backup enabled, only the derived outputs — your estimated daily calorie target and meals per day — are stored in your account to personalize your experience across sessions. If Cloud Backup is disabled, all biometric data and derived outputs remain on your device only and are never transmitted to our servers. Completing biometrics setup is entirely optional — a skip option is available at all times.
Push notifications
If you grant notification permission, we may store a device push token to send you weekly plan reminders. This token is used only to deliver notifications and is never shared with third parties. You can revoke permission at any time from your device settings.
Usage & Technical Data
We do not actively collect device or technical information. Supabase may passively log standard request metadata (such as IP address) as part of normal server operation. This data is not used by us for tracking or analytics purposes. We have entered into a Data Processing Agreement with Supabase in compliance with GDPR Article 28, ensuring your data is handled only as necessary to deliver the service.
On-device storage
Your meal plans, grocery list, and draft selections are stored locally on your device using your browser's built-in storage. This data never leaves your device unless you have Cloud Backup enabled in Settings → Privacy & Data.
How We Use Your Information
To deliver your experience
Your preferences, meal plans, and allergy settings are used solely to personalize the app for you. Meal plan and grocery data is stored on your device by default. Cloud sync only occurs when you opt in to Cloud Backup from Settings → Privacy & Data.
To improve the app
If you have opted in to Shared Data, aggregated and anonymized usage data helps us understand how the app is used so we can improve it. This is off by default — you can enable or disable it at any time from Settings → Privacy & Data. To learn exactly what is collected and how anonymization works, see Settings → Privacy & Data → Shared Data.
To communicate with you
If you provide your email, we may use it to respond to support requests or send app-related updates. You can opt out of non-essential emails at any time.
Data Sharing
No selling or renting
We do not sell, trade, or rent your personal information to third parties, data brokers, or advertising networks.
Service providers
We use Supabase to store and process account data on our behalf. Supabase acts as a data processor and is contractually prohibited from using your data for any purpose other than providing this service. Your data is never shared with Supabase for advertising or analytics purposes.
Sign in with Google
If you choose to sign in with Google, that authentication is handled directly by Google and is subject to Google's Privacy Policy. We only receive your email address and a unique identifier to create your account.
Third-party links
The app may contain links to external services. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.
Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us through the app. You may also disable optional data sharing from Settings → Privacy & Data.
Data Retention
We retain your data only for as long as your account is active. When you delete your account from Settings → Delete Account, all associated data — including meal plans, preferences, allergy settings, and grocery history — is permanently and immediately deleted from our systems. We do not retain any personal data after deletion. On-device data stored in your browser's local storage is cleared when you sign out or uninstall the app.
Data Breach Notification
In the event of a data breach that affects your personal information, we will notify you as required by applicable law. We will provide notification within 72 hours of becoming aware of the breach where required by GDPR. Notification will be sent to the email address associated with your account.
Business Transfer
In the event that Flavor & Thyme is acquired, merged, or its assets are transferred to another entity, your data may be transferred as part of that transaction. If this occurs, we will notify you in advance and the acquiring party will be required to honor the terms of this Privacy Policy. You will have the option to delete your account before any such transfer takes effect.
California & EU Residents
California residents (CCPA)
If you are a California resident, you have the right to know what personal data we collect, request deletion of your data, and opt out of any sale of your data. We do not sell personal data. To exercise your rights, contact us at info@flavorandthyme.com.
EU residents (GDPR)
If you are located in the European Union, you have the right to access, correct, or erase your personal data, restrict or object to its processing, and request data portability. Our legal basis for processing data necessary to deliver the service is the performance of our service agreement with you (Art. 6(1)(b) GDPR). Where you have opted in to the Shared Data feature, aggregated and pseudonymized usage data is processed on the basis of your explicit consent (Art. 6(1)(a)), which you may withdraw at any time from Settings → Privacy & Data. To exercise your rights or file a complaint, contact us at info@flavorandthyme.com. You also have the right to lodge a complaint with your local data protection authority.
Changes to This Policy
We may update this policy from time to time. When we do, the date at the top of this page will be revised. For non-material changes, continued use of the app constitutes acceptance. For material changes — including changes to what personal data we collect, how we use it, or with whom it is shared — we will notify you in the app and require your affirmative acknowledgment before those changes take effect.
🔒Questions about your data?
Reach out to us at info@flavorandthyme.com. We're committed to being transparent about how your information is used and will respond to all data requests promptly.