We use cookies
Essential cookies keep you signed in. Analytics cookies help us understand how the app is used so we can improve it. You can change this any time from the footer. Learn more in our privacy policy.
Last updated: 6 June 2026
Wobblepot is an AI-powered meal planning app for households. This policy explains what personal data we collect, why, who processes it for us, how long we keep it, and the rights you have over it.
We collect what the app needs to plan meals for your household — your account details, household preferences, allergens, and pantry — and nothing else.
Meal plans are generated by AI: your household preferences, allergens, and dietary data are sent to Anthropic for that purpose.
We never sell your data, and analytics only runs if you opt in.
You can export your data or delete your account at any time; deleted accounts are purged within 30 days.
The data controller is Honkadori OÜ, an Estonian private limited company, registry code 14197288, registered at Peetri 11, 10415 Tallinn, Estonia. Wobblepot is the trade name Honkadori OÜ operates under.
For anything related to your personal data, contact privacy@wobblepot.com.
Account: email address, name, and a hashed password.
Household: household members and their preferences, allergens, and dietary restrictions. Member profiles may describe people other than the account holder, including children.
Meals: AI-generated meal plans, recipes, swaps, and preparation tips.
Pantry: your pantry inventory and shopping lists.
Usage analytics and error reports — only if you accept analytics cookies (see Cookies).
Contract performance (GDPR Art. 6(1)(b)): running your account, generating meal plans, managing your pantry and shopping lists — the service you signed up for.
Consent (Art. 6(1)(a)): product analytics and error tracking, which stay off until you accept analytics cookies. You can withdraw at any time from the cookie settings in the footer.
Legitimate interests (Art. 6(1)(f)): keeping the service secure — rate limiting, abuse prevention, and operational logging.
Meal-plan generation, swap suggestions, and preparation tips are produced by a large language model operated by Anthropic. To generate them, we transmit your household preferences, allergens, and member dietary data to Anthropic. The AI output (meal plans, tips) is stored with your household. Anthropic processes this data as our processor under the agreement listed below and does not use it to train models.
We use five processors: Anthropic, PBC for AI meal planning, Resend (Plus Five, Inc.) for transactional email, Vercel Inc. for hosting, Neon (a Databricks company) for the database, and PostHog, Inc. for product analytics and error tracking — the latter active only after you accept analytics cookies. All five involve a transfer to the United States covered by appropriate safeguards, and we have a data processing agreement with every one of them.
The full list — data categories shared, processing regions, and transfer safeguards per vendor — is on the subprocessors page.
Account data: if you delete your account, everything is purged within 30 days of the request. During that window you can change your mind by emailing privacy@wobblepot.com.
Database backups: our database keeps a 24-hour point-in-time-recovery window, so backup copies of deleted data clear automatically within 24 hours.
Application logs: runtime logs are kept for 1 day, build logs for 7 days.
Transactional email records: delivery metadata is retained for roughly 30 days by our email provider.
Sign-in sessions: rotating 7-day lifetime, refreshed while you use the app; expired sessions are invalid immediately.
AI usage records: kept on a 12-month rolling window for cost control.
Active account data (meal plans, pantry, preferences): kept for as long as your account is active.
Under the GDPR (and UK GDPR) you can:
Access and export your data — download a machine-readable copy at /api/auth/user/export while signed in (Art. 15 and 20).
Rectify anything inaccurate — most data is editable in the app; for the rest, email us (Art. 16).
Erase your account and data (Art. 17) — see the retention section above for the 30-day window.
Object to processing based on legitimate interests (Art. 21), and withdraw consent for analytics at any time.
To exercise any of these, email privacy@wobblepot.com from the address on your account, and tell us which request you are making. We acknowledge within 72 hours and fulfil within 30 days.
You can also complain to your local data protection supervisory authority. In Estonia that is the Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee); if you live elsewhere in the EU or UK, your own national authority is equally competent.
Wobblepot accounts are for people aged 16 or over, across all EU and UK jurisdictions. Household member profiles can describe children — their allergens and dietary needs are often exactly what a family needs planned around. By adding a member under 16, you confirm that you are their parent or legal guardian and consent on their behalf to this data being used for meal planning.
When this policy or the terms of service change materially, we update the date at the top and bump the version users accept at sign-up. If the changes affect you significantly, we will ask you to review and accept them again.
Honkadori OÜ · registry code 14197288 · Peetri 11, 10415 Tallinn, Estonia · privacy@wobblepot.com