Privacy Policy

Last updated: September 27, 2026

Shopping List Builder ("the app") is a personal, invite-only application used by a single household to manage recipes, weekly menus, and shopping lists. It is not a public or commercial service, and access is restricted to an explicit allowlist of email addresses controlled by the app owner.

Who runs this app

This app is self-hosted and operated by its owner (contact: josh.r.russo@gmail.com). There is no separate company or third-party operator.

Information we collect

• Account information: When you sign in with Google, we receive your name, email address, and profile picture (the email, profile, and openid scopes) to create and identify your account. Sign-up is gated by an allowlist — only pre-approved email addresses can create an account.
• Application data you enter: Recipes, meals, weekly menus, shopping list items, tags, and related preferences you create in the app.
• Files you choose to import: If you connect Google Drive or Dropbox, the app reads (read-only) files you select in order to extract recipes or shopping items. It does not browse or modify your cloud storage beyond what you explicitly import.
• Basic operational logs: Standard server logs (timestamps, request paths, error traces) used only for debugging and keeping the app running.

How we use your information

• To authenticate you and keep your household's data separate from anyone else's.
• To display and organize the recipes, menus, and shopping lists you create.
• To extract structured meal/ingredient data from files you import, using the Anthropic Claude API. Only the content of the file you choose to import is sent to Claude for extraction — never your full Drive or Dropbox contents.

We do not sell your data, use it for advertising, or share it with any third party except the service providers listed above, solely to provide the app's functionality.

Data retention and deletion

Your data is retained for as long as your account exists. You can request deletion of your account and all associated data at any time by contacting josh.r.russo@gmail.com.

Data storage and security

Application data is stored in a PostgreSQL database on infrastructure controlled by the app owner, accessed only over HTTPS. Google and Dropbox OAuth tokens are stored server-side and used solely to perform the file-import actions you request.

Third-party services used

• Google Sign-In & Google Drive API — authentication and optional file import.
• Dropbox API — optional file import.
• Anthropic Claude API — extracting recipe/meal data from imported files.

Each of these providers has its own privacy policy governing how they handle data transmitted to them.

Children's privacy

This app is used privately by one household and is not directed at or marketed to children.

Changes to this policy

If this policy changes, the "Last updated" date above will be revised. Since this is a small, personal application, changes will typically be minor clarifications rather than substantive shifts in how data is handled.

Contact

Questions about this policy or your data: josh.r.russo@gmail.com.