Privacy policy
Draft of 14 October 2026. The app has not been released yet, and this policy may change before it is.
Supperwell is a recipe and grocery list app, made and run by Sean Trostel. This page says what the app keeps, what leaves your phone, who receives it, and how to take it back. It is written to be read, so it uses plain words in place of legal ones.
The short version
- There are no accounts. Supperwell never asks for your name, email address, location or contacts.
- Your shopping list and your recipes are kept on your phone.
- When you use an AI feature, what you ask it to read or look for is sent to Anthropic, the company that makes the Claude AI. It passes through Supperwell's server, which does not keep it. The app asks your permission first, and sends nothing to Anthropic unless you say yes.
- A recipe leaves your phone to be stored in two cases only, both of your choosing: you tick Make public on it, or you send it to someone as a link. You can untick Make public to take a recipe back, and a link stops working after 90 days.
- There is no advertising, no tracking, and no analytics, in the app or on this website.
- Nothing about you is sold or given to anyone for marketing.
What stays on your phone
These are stored on your phone and are not sent to Supperwell:
- your shopping list;
- your saved recipes, and your thumbs up or down on them (unless you make a recipe public, or saved it from the ones other people share: both below);
- your weekly plan, kitchen timers, and settings;
- your reminders. A reminder to plan the week, or to order groceries, is set on your phone and given by your phone. Supperwell's server does not send it and is not told about it;
- which shared recipes, and which sharers, you have chosen to hide;
- how you eat: your diet and the things you avoid (these are sent with AI requests, below);
- your own Anthropic API key, if you choose to add one. It is stored encrypted and is sent only to Anthropic.
The app also makes up a random installation ID the first time it opens. It is a string of letters and numbers that stands for this copy of the app. It is not your name, your phone number, or an ID of your phone, and deleting the app deletes it. You can see it at the bottom of the app's Settings.
What leaves your phone, and when
When you use an AI feature
Supperwell uses Claude, an AI made by Anthropic, to read recipes, sort ingredients, suggest what to cook, write recipes and search the web. The first time you open the app it asks whether it may use Claude, and nothing is sent to Anthropic until you allow it. You can change your answer at any time with the Use Claude switch in the app's Settings. With it off, the app keeps your list and recipes and reads recipes from websites that publish them in a standard form, and does nothing that needs Claude. With it on, the app sends Anthropic what you ask Claude to work on:
- the text of a recipe page you import, or text you paste;
- photos you take or choose of a recipe page (a reduced-size copy);
- items you type onto your shopping list, and the ingredient lines of a recipe you type in or change, so they can be named and sorted;
- what you tell the Suggest screen: the ingredients you have and anything else you ask for;
- your diet and the things you avoid, with every request for a recipe. If you have recorded an allergy or a diet followed for health reasons, that is part of what is sent.
These requests go from your phone to Supperwell's server, which adds Supperwell's own access key and passes them to Anthropic. Supperwell's server does not store or log what is in them. Anthropic handles them under its own privacy policy, which says how long it keeps requests and what it does with them. Your installation ID goes to Supperwell's server with each request, but is not passed on to Anthropic.
If you add your own Anthropic key in Settings, AI requests go straight from your phone to Anthropic and do not pass through Supperwell's server at all.
Counting, to keep the service fair
Supperwell's server counts how many requests come from each installation ID and from each network (IP) address each day, so that nobody can use more than a fair share. It keeps only the counts, not what was asked. A count is erased within two days of the last request from that installation or address.
When you make a recipe public
On a recipe that you added to the app yourself (from a website, typed in, photographed, pasted in as text, or written for you by Claude) you can tick Make public. The box is never ticked for you. It is not offered on a recipe someone else sent you, or one you saved from the ones other people share, unless it came from a website. If you tick the box, the app sends Supperwell's server:
- the recipe: its name, ingredients, method, servings and time, and its web link if it came from a website;
- your thumbs up or down on it, if you have given one;
- your installation ID, and the date.
It is stored in Supperwell's recipe library so that well-liked recipes can be suggested to other people who use the app. They are never shown your installation ID or anything else about you. Recipe photos are not sent. What they are shown depends on where the recipe came from:
- From a website: its name, its ingredients and how well it is rated, with a link to the original page for the method. If you changed your copy of the recipe before making it public, your changes are not sent: it is shared as its website has it.
- Typed in by you, photographed from a page, or pasted in as text: the whole recipe. The app asks you to confirm it is yours to share before it is made public. Only the recipe's text is sent, never the photo.
- Written for you by Claude: the whole recipe.
Before anyone else can see a public recipe, it is checked automatically against the sharing rules. To do that, Supperwell's server sends the recipe's text to Anthropic, as it does for other AI features. Your installation ID is not sent with it. A recipe the check is unsure about is looked at by a person before it is shown to anyone.
Please do not put personal details, yours or anyone else's, into a recipe you make public: its name and its method are shown as you wrote them.
A thumbs up or down on a recipe you have not made public stays on your phone, with the one exception described next.
When you look at recipes other people have shared
When you open the app's Suggest screen, the app asks Supperwell's server for the public recipes, best rated first. The request carries your installation ID, so that your own recipes can be left out and requests can be counted. It does not carry what you type on that screen: recipes are matched to your ingredients on your phone.
If you save one of those recipes and give it a thumbs up or down, that verdict is sent to the server with your installation ID and the date, and counts towards the recipe's rating. The app says so beside the thumbs. Clearing the thumbs, or deleting your copy of the recipe, takes the verdict back. Recipes and sharers you choose to hide are remembered on your phone only.
When you send a recipe as a link
The Share button offers two ways to send a recipe. Send as text hands the recipe's words to your phone's own sharing and stores nothing anywhere. Send a link stores a copy of the recipe on Supperwell's server, so that whoever opens the link can add it to their own Supperwell. The app tells you this before anything is sent. What is stored is:
- the recipe: its name, ingredients, method, servings and time, and for a recipe from a website its web link and the address of its photo;
- your installation ID, and the date.
Anyone who has the link can get the recipe, so send it only to people you mean to have it. The link is long and random, and cannot be found by guessing or by searching. A linked recipe is not part of the public library: it is not listed, not rated, and not shown to anyone without the link. The link's own web page shows the recipe's name and how many ingredients and steps it has. Nobody who opens the link is shown your installation ID. A link stops working after 90 days, and the copy is then deleted.
When you report a recipe
If you report a recipe from the library, the reason you choose, any note you add, your installation ID and the date are sent to Supperwell's server, so that the report can be looked at.
When you import a recipe from a link
The app fetches that web page, as a browser would. The website receives the request and can see your network (IP) address, as any website you visit can.
If the app cannot fetch the page itself, and you have allowed the app to use Claude, the page's address is sent to Anthropic, whose servers fetch the page and read the recipe from it. The website then sees a request from Anthropic and not from you.
Some pages are opened in a browser inside the app instead: a page that cannot be fetched directly, and the page of a recipe another person shared from a website, which you visit before you can add the recipe, so that whoever wrote it gets the visit. Such a page loads as it would in any browser. The website, and any advertising or analytics services it uses, can see your network (IP) address and can set cookies in the app's browser, and their own privacy policies apply. Supperwell is sent nothing about the visit.
When you share with your household
If you start or join a household, your shopping list and your plan for the week are kept in step with the other phones in it. Each line of the list and each planned meal (with a copy of its recipe) is encrypted on your phone, with a key that is part of the household's invite link, before it is sent to Supperwell's server. The server keeps the encrypted entries so the other phones can fetch them, but cannot read them: the key is never sent to it. It can see how many entries there are, when they changed, and your app's ID. Anyone who has the invite link can join the household and read the list and plan, so share the link only with the people you shop with. "Start a fresh link" deletes the old household, and a household nobody opens for six months is deleted by itself. Your saved recipes are not shared.
When you order online
If you tap the button to order from a store, the names and amounts of the items on your list are put into a link that opens in your phone's browser on that store's website. From there the store's own privacy policy applies. Supperwell never sees your store account, your address or your payment details, and does not place orders.
Some stores cannot take a whole list. For those, the app can show the store's website in a browser inside the app, with your list underneath, and search the store for one item at a time. The item's name goes to the store as a search, as it would if you typed it. You sign in to the store on its own page. Supperwell does not read that page, what you type on it, or the store's cookies, which stay in the app's browser so that you remain signed in.
For Instacart, where the app offers to send your whole list, the names and amounts of the items go to Supperwell's server, which passes them to Instacart and gets back a link to a page Instacart has made from them. Supperwell's server does not keep the list or the link, and tells Instacart nothing about you or your phone. The page then opens in your phone's browser, on Instacart's website.
This website
These pages set no cookies and use no analytics. Like every website, the company that hosts them receives your network (IP) address in order to send you the page.
Who else handles your information
| Who | What for | What they receive |
|---|---|---|
| Anthropic | Answering AI requests, and checking a recipe you make public | What you ask Claude to work on, listed above, and the text of a recipe you make public |
| Cloudflare | Running Supperwell's server and this website, and storing the recipe library and recipes sent as links | Requests to the server, including your network (IP) address. See Cloudflare's privacy policy |
| A store you choose to order from | Showing you products to buy | The items on your list, when you tap the button |
Supperwell uses these companies only to make the app work. Nothing is shared with advertisers, data brokers or anyone else.
How long things are kept
| What | Kept |
|---|---|
| Everything on your phone | Until you delete it, or delete the app |
| What AI requests contain | Not kept by Supperwell. See Anthropic's policy for what Anthropic keeps |
| Daily counts of requests | Erased within two days of the last request |
| A recipe you made public, and your thumbs up or down on it | Until you take it back, or it is removed: for breaking the sharing rules, or because its author asked |
| Your thumbs up or down on a recipe you saved from the ones other people share | Until you clear it or delete your copy, or the recipe leaves the library |
| A recipe you sent as a link | 90 days from the day you made the link, then deleted |
| A report you sent | Until it has been dealt with |
Taking things back
- A public recipe: open it in the app and untick Make public, or delete the recipe. Your copy of it and your thumbs up or down are removed from the library. If other people made the same web recipe public, it stays in the library on their account, without your part in it.
- A thumbs up or down on a shared recipe you saved: tap the same thumb again to clear it, or delete your copy of the recipe.
- A recipe you sent as a link: the link stops working by itself after 90 days. To have one removed sooner, write to the address below with the link.
- Permission to use Claude: switch off Use Claude in Settings. From then on nothing is sent to Anthropic.
- How you eat: change or clear it in Settings. It is then no longer sent.
- Reminders: switch them off in Settings, or in your phone's own notification settings.
- Everything on your phone: delete the app.
Depending on where you live, the law may give you rights over information about you, such as to see it, correct it or have it deleted. Supperwell holds nothing under your name. If you write to the address below with your installation ID, anything held against it will be sent to you or deleted, as you ask.
Children
Supperwell is not meant for children under 13. It asks nobody their age and holds no information that could tell.
Where information is processed
Supperwell's server runs on Cloudflare's network, which has computers in many countries, and Anthropic is a company in the United States. Your information may therefore be handled outside the country you live in.
Changes to this policy
If the app is going to change what it collects or shares, this page will be updated, and the date at the top changed, before that version of the app is released.
Contact
Supperwell is run by Sean Trostel. For questions, for requests about your information, or to report a recipe, write to sean.trostel@gmail.com.