Privacy

Last updated 9 November 2026

FeastFlow (feastflow.co.uk) helps you plan and cook a big meal. This page explains what it collects about you, why, who else handles it, and your rights. In short: we keep what's needed to run your account and save your feasts, we don't sell anything about you, and there are no ads. We count visits and which features get used, without cookies and without knowing who you are.

Who we are

FeastFlow is run by Cael Jones in the United Kingdom, who is the data controller for the information below. Contact: hello@feastflow.co.uk.

What we collect and why

• Your account. When you sign in with Google or Apple we receive your email address and an account ID (and your name if you share it). We use these to sign you in and link your plan to you. If you use Apple's "Hide My Email", we only see the relay address.
• Your feasts. Menus, recipes, timings, kitchen settings and any guest details you add, including names and allergies or dietary needs. We store these so your plan is on all your devices, and use them only to build your plan and warn you about allergens. Only you can see them. Allergy information is health information, so please only add it with your guests' agreement.
• Payments. Stripe takes your card details; we never see or store them. We keep your Stripe customer ID, which plan you have, and when your access ends.
• What you ask the AI. When you use the assistant, plan a menu, import a recipe from a link or photograph your food, the text, link or photos are sent to our AI provider to produce the answer. We don't keep the photos or the messages on our servers.
• Visits and feature use. We count page visits and actions such as using a calculator, choosing a plan, starting checkout, creating a feast or using an AI feature, along with your rough location (country and city), browser, device type and the page that sent you. This tells us which pages help people and where the site needs work. It's done without cookies or anything stored on your device: visitors are counted with a code made from your IP address and browser that changes every day, and the IP address itself is thrown away. It isn't linked to your account, your name or your email.
• Technical logs. Our servers record which feature was used, how long it took and how much AI processing it needed, so we can keep the service running and its costs under control. They don't record what you wrote or photographed.

Our legal bases under UK GDPR are: providing the service you asked for (your account, feasts, payments and AI requests); your explicit consent for allergy and dietary details, which you can withdraw by deleting them; our legitimate interest in keeping the service secure and working (logs) and in understanding how the site is used so we can improve it (visit counts); and legal obligations (tax records).

Stored on your device

FeastFlow keeps a copy of your feasts and settings in your browser so it works offline while you cook, and stores your sign-in session there. These are needed for the app to work. We don't use advertising or analytics cookies, and our visit counting stores nothing on your device.

Who else handles your data

We use these companies to run FeastFlow. They only process your data on our instructions:

• Cloudflare: hosting the website and its servers.
• Supabase: sign-in and storing your saved feasts.
• Stripe: taking payments and managing subscriptions.
• OpenAI: the AI that answers requests. Data sent through its API isn't used to train its models and is kept for up to 30 days for abuse monitoring.
• PostHog: counting visits and feature use, on its servers in the EU.
• Google or Apple: whichever you sign in with.

Some of these companies process data outside the UK, including in the United States. Where they do, they use the protections UK law requires, such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses.

We don't sell or share your personal information for advertising.

How long we keep it

We keep your account and feasts until you delete them or ask us to close your account. Deleted feasts are removed from our database straight away, apart from a short marker so they don't reappear on your other devices. We keep payment records for six years, because UK tax law requires it.

Your rights

You can ask us for a copy of your data, to correct it, to delete it or your whole account, to restrict or object to how we use it, or to receive it in a portable format. Email hello@feastflow.co.uk and we'll reply within a month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

If you live in the United States, you have the same choices: ask us to see or delete your information at any time. We don't sell personal information.

Children

FeastFlow is for adults. You must be 18 or over to buy a plan, and it isn't meant for children under 13.

Changes

If we change how we handle your data, we'll update this page and the date above. For significant changes we'll tell you in the app or by email.