Privacy Policy

Henry (“we,” “our,” or “us”) operates the Henry meal planning application and website at henry.kitchen. This Privacy Policy explains how we collect, use, and protect your information when you use Henry.

Information We Collect

Account Information

When you create a Henry account, we collect your email address, name, and password (stored securely and never in plain text).

Household Information

To personalize your meal plans, we collect information you provide about your household including: household name, number of people, dietary preferences and restrictions, food allergies, ingredient dislikes, cooking time preferences, weekly grocery budget, and the names and ages of household members.

Calendar Data

If you connect Google Calendar or Apple Calendar, Henry reads upcoming calendar events to detect busy evenings when cooking may not be practical. We process event titles and times to identify schedule conflicts. We do not store calendar event details — only the resulting “busy night” day names (for example, “Tuesday” and “Thursday”) are retained in our database.

Payment Information

Henry uses Stripe to process payments. We do not store, see, or have access to your credit card numbers or banking information. Stripe's privacy policy governs how your payment data is handled. We retain records of subscription status, plan type, and payment dates.

Usage Data

We collect information about how you use Henry including: meal plans generated, meals locked or regenerated, shopping lists created, and features accessed. This helps us improve the product.

Health-Related Data (Allergies & Diets)

The allergies and dietary restrictions you provide may qualify as “consumer health data” under certain state laws (such as Washington's My Health My Data Act). How we handle that specific category of data is described in our separate Consumer Health Data Privacy Policy.

Meal Feedback and Taste Preferences

When you react to meals (“Loved it,” “Skip it,” pausing a meal, or redoing a day), Henry records those reactions to learn your household's taste preferences — including, if you choose to tell us, which family members especially liked a meal and any notes you write about a recipe (for example, “less spicy next time”). Notes are stored word-for-word with the saved recipe in your Family Cookbook and are used only to personalize your household's meal plans. You can see your saved recipes and notes in the Cookbook, and all taste data is deleted when you delete your account.

Device and Technical Data

We automatically collect certain technical information including your device type, operating system, browser type, IP address, and crash reports when errors occur. If you enable push notifications on iOS, we store a device push token (an Apple-issued identifier) so we can deliver notifications; it is removed when you delete your account.

How We Use Your Information

We use the information we collect to:

• Generate personalized weekly meal plans tailored to your household
• Detect busy evenings from your connected calendar to suggest meal delivery
• Build consolidated grocery shopping lists from your meal plans
• Process grocery orders through Instacart and other partner services
• Send transactional emails including trial reminders, receipts, and account notifications
• Improve Henry's meal suggestions and product features over time
• Prevent fraud and ensure platform security
• Comply with legal obligations

Information We Share

We do not sell your personal information. We share information only in the following circumstances:

Service Providers

We share information with third-party services that help us operate Henry:

• Supabase — database hosting and user authentication (supabase.com/privacy)
• OpenAI — AI meal plan generation. We send household dietary preferences and constraints to OpenAI to generate meal plans. We do not send your name, email, or personal identifiers to OpenAI. (openai.com/privacy)
• Stripe — web payment processing (stripe.com/privacy)
• Apple / RevenueCat — iOS in-app subscription processing and entitlement management. RevenueCat receives your account identifier and purchase status, never your payment details. (revenuecat.com/privacy)
• Kroger — only if you connect a Kroger account, we send your shopping list items to Kroger to fill your cart (kroger.com/privacy)
• Instacart — when you tap “Shop with Instacart,” we send your ingredient list to Instacart to generate a shoppable cart. (instacart.com/privacy)
• Resend — transactional email delivery (resend.com/privacy)
• Google — if you connect Google Calendar, we access your calendar data through Google's API (policies.google.com/privacy)
• Vercel — application hosting and content delivery (vercel.com/legal/privacy-policy)

Affiliate Partners

Henry participates in affiliate programs with Instacart, DoorDash, Uber Eats, and Amazon. When you click through to these services from Henry, we may earn a commission. These partners may collect their own data governed by their own privacy policies.

Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect the rights, property, or safety of Henry, our users, or others.

Business Transfers

If Henry is acquired, merged, or its assets are sold, your information may be transferred as part of that transaction. We will notify you of any such change.

Calendar Integration Privacy

Henry's calendar integration is designed with privacy as a priority:

• Henry reads calendar events only at the time of meal plan generation — not continuously
• Event titles and times are processed server-side to detect busy evenings
• Event details are never stored in Henry's database
• Only the resulting busy night day names are retained
• You can disconnect your calendar at any time in Settings → Calendar
• Disconnecting immediately stops all calendar access

Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or financial compliance purposes (such as payment records, which we retain for 7 years per financial regulations).

Meal plans, shopping lists, and household preferences are deleted immediately upon account deletion.

Your Rights and Choices

You have the following rights regarding your information:

Access: You may request a copy of the personal information we hold about you by emailing hello@henry.kitchen.

Correction: You may update your account information at any time in Settings.

Deletion: You may delete your account at any time in Settings → Account → Delete Account. We will delete your data within 30 days.

Disconnection: You may disconnect Google Calendar or Apple Calendar at any time in Settings → Calendar.

Email Preferences: You may unsubscribe from non-transactional emails at any time using the unsubscribe link in any email we send.

California Residents (CCPA): If you are a California resident, you have additional rights under the California Consumer Privacy Act including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information (we do not sell personal information).

Children's Privacy

Henry is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at hello@henry.kitchen and we will delete it promptly.

Household member names and ages entered for meal planning purposes are used solely to personalize meal plans and are not used to identify or contact minors.

Security

We implement industry-standard security measures to protect your information including:

• Encryption of data in transit using TLS
• Encryption of sensitive credentials (calendar tokens, API keys) at rest using AES-256-GCM
• Row-level security on all database tables ensuring users can only access their own household data
• Regular security reviews of our codebase and infrastructure

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your information using reasonable measures.

Cookies and Tracking

Henry uses essential cookies required for authentication and session management. We do not use advertising cookies or third-party tracking cookies. We do not use analytics services that track individual users across websites.

Affiliate Disclosure

Henry participates in affiliate marketing programs. This means Henry earns a commission when you complete a purchase through certain links in the app, including Instacart grocery orders, DoorDash orders, Uber Eats orders, and Amazon purchases. These commissions are earned at no additional cost to you and help support Henry's development and operations. We only recommend services we believe provide genuine value to Henry users.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a prominent notice in the app. Your continued use of Henry after changes become effective constitutes your acceptance of the updated policy. The “Last updated” date at the top of this page reflects when the policy was last revised.

Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us:

Email: hello@henry.kitchen
Website: henry.kitchen
Mailing Address: Double Springs Technology, LLC P.O. Box 1261 Jackson, MS 39215