Privacy policy
Last updated: 26 October 2026
Wobblepot is an AI-powered meal planning app for households. This policy explains what personal data we collect, why, who processes it for us, how long we keep it, and the rights you have over it.
The short version
We collect what the app needs to plan meals for your household — your account details, household preferences, allergens, and pantry — and nothing else.
Meal plans are generated by AI: your household preferences, allergens, and dietary data are sent to Anthropic for that purpose.
We never sell your data. Analytics cookies stay off until you opt in. Without them, our servers still send our analytics processor a few service records, such as each request a connected AI assistant makes.
You can export your data or delete your account at any time; deleted accounts are purged after a 30-day grace period. The purge runs nightly, so deletion happens within a day of that period ending.
Who we are
The data controller is Honkadori OÜ, an Estonian private limited company, registry code 14197288, registered at Peetri 11, 10415 Tallinn, Estonia. Wobblepot is the trade name Honkadori OÜ operates under.
For anything related to your personal data, contact privacy@wobblepot.com.
What data we collect
Account: email address, name, and a hashed password.
Google sign-in, if you choose it: your name, email address and Google account identifier, which Google sends us when you continue with Google. We store them with your account. We do not receive your Google password, and we do not keep your Google profile picture.
Household: household members and their preferences, allergens, and dietary restrictions. Member profiles may describe people other than the account holder, including children.
Meals: AI-generated meal plans, recipes, swaps, and preparation tips.
Pantry: your pantry inventory and shopping lists.
Invite requests: the email address and language you give us when you ask for an invite, and the name of the link you followed to the form, when it has one.
Weekly reminder: the day you chose, when you switched the reminder on, when you confirmed your email address for it, and when we last sent it. Switching it off deletes the day and the time you switched it on.
Connected AI assistants: which assistants you allowed to read your household data, what you allowed each one to do, the access tokens it uses, and a record of each request it makes — only if you connect one (see Connected AI assistants).
API keys for screens and scripts: the name you gave each key, its first characters, a one-way fingerprint of it, when you made it, when it was last used and when it expires — only if you make one (see Connected AI assistants).
Usage analytics and error reports from your browser — only if you accept analytics cookies (see Cookies).
Why we process it
Contract performance (GDPR Art. 6(1)(b)): running your account, generating meal plans, managing your pantry and shopping lists — the service you signed up for. When you connect an AI assistant, giving it the data you allowed is also part of this service, done at your request.
Consent (Art. 6(1)(a)): product analytics and error tracking in your browser, which stay off until you accept analytics cookies, and keeping your place on the invite list after you confirm your email. You can withdraw analytics consent at any time from the cookie settings in the footer, and leave the invite list by emailing privacy@wobblepot.com. The weekly planning reminder email is also consent: we send it only after you switch it on, in My account → Reminders or when you plan your first meals, and then open the link in the email we send to confirm your address. Every reminder has a link to stop it.
Legitimate interests (Art. 6(1)(f)): keeping the service secure — rate limiting, abuse prevention, and operational logging — and recording how a connected AI assistant uses Wobblepot, so we can find and fix requests that fail.
AI processing
Meal-plan generation, swap suggestions, and preparation tips are produced by a large language model operated by Anthropic. To generate them, we transmit your household preferences, allergens, and member dietary data to Anthropic. The AI output (meal plans, tips) is stored with your household. Anthropic processes this data as our processor under the agreement listed below and does not use it to train models.
Connected AI assistants
You can connect an AI assistant, such as Claude, to Wobblepot, so it can answer questions like “what is for dinner tomorrow” from your household’s data, and update your shopping list when you ask it to. Nothing is shared until you sign in to Wobblepot and allow the assistant on the consent page. That page shows the assistant’s name, the website it sends you back to, and what it will be able to do.
A connected assistant can read your household’s meal plan, shopping list, pantry, and recipes. It can also read your household settings: the meals you plan each day, your diet, the allergens and ingredients you avoid, your notes for the AI, and each member’s name and portion size. That includes the names and allergens of the children in your household. If the consent page says so, it can also see your name and profile picture. Allergies are health data, and when you allow an assistant, you agree that it can read them.
If the consent page says “Update your shopping list, pantry and meal plan, and add, change and delete recipes” and you choose Allow, the assistant can also make changes when you ask it to: mark shopping list items as bought, add items to the list, change what is in your pantry, change your meal plan, add a recipe to your household’s recipes, change or delete one of them, and add a recipe to your favourites or remove it. A recipe the assistant deletes stays in “Recently deleted” on the Recipes page for 30 days, and you or the assistant can restore it in that time. When you ask the assistant to change a meal’s ingredients, the instruction it passes on is sent to our AI provider, as the same request from the app is. Adding or changing a recipe makes no AI call: the recipe is stored as you would type it in the app, and is then used like any recipe you typed. Each change is one you can also make, and undo, in Wobblepot. An assistant cannot change your household’s members or preferences, or ask Wobblepot to generate a meal plan. Without that line on the consent page, an assistant can only read. Changes made by an assistant are not marked as such; they look like changes you made in the app.
The assistant is not one of our processors. You choose it, you allow it, and you tell it what to do, so we share the data on your instruction. What the assistant does with the data after that is set by its own provider’s terms and privacy policy, not by us. Read them before you connect it.
When you allow an assistant, we record its name and what you allowed it to do. For each request it makes, we record the assistant’s name and version, which tool it used, how long the request took, whether it failed, and the reason the assistant gave, linked to your account and household. We do not record the data it read, what it searched for, or what it changed. These records go to our analytics processor, PostHog, and the consent page tells you about them before you allow the assistant.
To disconnect an assistant, choose Disconnect next to it under “Connected assistants” under My account → Connections. We delete its access at once, and its next request fails. You can also email privacy@wobblepot.com and we delete its access for you. Deleting your account disconnects every assistant at once.
You can also connect a screen or script you choose, such as a kitchen display, a Home Assistant dashboard or a program you wrote, with an API key you make under “Screens and scripts” under My account → Connections. The key can only read your household’s meal plan and shopping list; it cannot change anything or read anything else. Like an assistant, the screen or script is not one of our processors: you choose it and you give it the key. We store the key’s name, its first characters, a one-way fingerprint of it and when it was last used, never the key itself, and we do not record each request it makes in analytics. To stop it, choose Revoke next to the key: its next request fails. Your household’s owner sees every member’s keys, with the member’s name, and can revoke any of them. When you make a key, you can also set it to expire after a number of days. Deleting your account stops every key at once. A key reads the household you belong to when it makes a request, so after you leave a household, the key no longer reads it.
Who processes data for us
We use five processors: Anthropic, PBC for AI meal planning, Resend (Plus Five Five, Inc.) for transactional email, Vercel Inc. for hosting, Neon (a Databricks company) for the database, and PostHog, Inc. for product analytics and error tracking — in your browser active only after you accept analytics cookies. Records our servers send PostHog, such as each request a connected AI assistant makes, do not depend on cookies. All five involve a transfer to the United States covered by appropriate safeguards, and we have a data processing agreement with every one of them.
An AI assistant you connect to Wobblepot is not on this list: it receives data on your instruction, not ours (see Connected AI assistants).
The full list — data categories shared, processing regions, and transfer safeguards per vendor — is on the subprocessors page.
How long we keep data
Account data: if you delete your account, everything is purged after a 30-day grace period; the purge runs nightly, so deletion happens within a day of that period ending. During the grace period you can change your mind by emailing privacy@wobblepot.com.
Invite requests: an unconfirmed request is deleted after 7 days. A confirmed request is deleted 6 months after confirmation, or sooner when you sign up with the code we send or ask us to remove it.
Database backups: our database keeps a 6-hour point-in-time-recovery window, so backup copies of deleted data clear automatically within 6 hours.
Application logs: runtime logs are kept for 1 day, build logs for 7 days.
Transactional email records: delivery metadata is retained for roughly 30 days by our email provider.
Sign-in sessions: rotating 7-day lifetime, refreshed while you use the app; expired sessions are invalid immediately.
AI usage records: kept on a 12-month rolling window for cost control.
Connected AI assistants: an access token works for 1 hour. A renewal token works for 30 days and is replaced each time the assistant uses it, so the connection stops working after 30 days without use. We keep the record that you allowed an assistant until you ask us to delete it or delete your account. We delete the record of each token within a day after the token expires. Deleting your account removes all of them at once, without the 30-day grace period.
Active account data (meal plans, pantry, preferences): kept for as long as your account is active.
Your rights
Under the GDPR (and UK GDPR) you can:
Access and export your data — download a machine-readable copy at /api/auth/user/export while signed in (Art. 15 and 20).
Rectify anything inaccurate — most data is editable in the app; for the rest, email us (Art. 16).
Erase your account and data (Art. 17) — see the retention section above for the 30-day window.
Object to processing based on legitimate interests (Art. 21), and withdraw consent for analytics at any time.
To exercise any of these, email privacy@wobblepot.com from the address on your account, and tell us which request you are making. We acknowledge within 72 hours and fulfil within 30 days.
You can also complain to your local data protection supervisory authority. In Estonia that is the Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee); if you live elsewhere in the EU or UK, your own national authority is equally competent.
Children's data
Wobblepot accounts are for people aged 16 or over, across all EU and UK jurisdictions. Household member profiles can describe children — their allergens and dietary needs are often exactly what a family needs planned around. By adding a member under 16, you confirm that you are their parent or legal guardian and consent on their behalf to this data being used for meal planning.
Changes to this policy
When this policy or the terms of service change materially, we update the date at the top and bump the version users accept at sign-up. If the changes affect you significantly, we will ask you to review and accept them again.
Contact
Honkadori OÜ · registry code 14197288 · Peetri 11, 10415 Tallinn, Estonia · privacy@wobblepot.com