Privacy Policy

Last updated: 17 August 2026

Overview

Harvenna ("we", "us", "our") is a meal planner for families, at harvenna.com. This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have.

Information We Collect

Account

You sign in with Google, Microsoft, or Apple, so we do not store passwords. From your chosen provider we receive your email address and, where available, your name and avatar. Each active session records the IP address and browser/device (user agent) it was created from, so you can tell your own sessions apart and we can detect abuse.

Household and family members

To build meal plans you can add the people in your household, including children. For each person you may enter a name, age, sex, activity level, and dietary, allergy, or other health notes, and optionally a photo. This information is used to tailor plans and nutrition, and, where you use AI features, some of it is sent to our AI provider (see below). Please only add health details you are comfortable sharing for that purpose.

Your content

We store the recipes, meal plans, shopping lists, and preferences you create. On the Family plan we also store receipt photos you scan and the price and spending history derived from them. Receipt photos can contain a masked card number and your shopping history, so they are kept in private storage and served only to your household through the authenticated app, never on a public link. Recipe and food images you add are served from public storage so the app can display them quickly.

Payments

Subscriptions are handled by Stripe (on the web) or Apple (in the iOS app). We never see or store your card details; the payment provider does. We keep a record of your plan and its status so we know what you have access to.

Diagnostics and product analytics

For reliability we collect operational traces and server logs, which include identifiers such as your user and household IDs and the request path, but not your recipes, family details, or receipt contents.

On the website we also use PostHog for product analytics, to see which parts of Harvenna are used and where people get stuck. It records the pages you visit, the controls you use, a handful of events we have written by hand (such as "a plan was generated" or "a receipt was scanned"), your browser and device type, and an approximate location derived from your IP address. Once you sign in we attach your user ID, so a journey can be followed across visits. We do not send it your email address or your name.

Three things it deliberately does not do. It does not record your screen — session replay is switched off in the app itself, not merely unconfigured. It does not capture the text on the controls you use, so a family member's name, a recipe title or a shop's name on a receipt is not collected even as a label. And it is not advertising: we run no ad networks, no ad pixels, and no cross-site tracking, and we do not sell or share this data. The iOS app sends nothing to PostHog at all.

PostHog processes this data in the United States. Analytics requests are routed through our own domain, so blocking third-party trackers in your browser may not stop them; if you would rather not be counted, most tracker-blocking extensions can block harvenna.com/ingest directly, and we honour the "Do Not Track" setting if your browser sends one.

One exception, because it is the kind of thing a policy should say plainly: when an AI feature fails to read a response from our AI provider, we record a short excerpt of that response in the error log so the fault can be diagnosed. For a receipt or recipe that excerpt is content — part of what was being read at the time. These logs are kept for up to 30 days like any other, and are never shown to anyone outside our own operations.

AI Features

Some features use a third-party AI provider, Anthropic (Claude), and only Anthropic; we do not send your data to any other AI company from our servers. What is sent depends on the feature:

• Meal planning: your family members' names, ages, sex, activity level, and dietary/health flags are sent so the plan can account for them.
• Recipe import: the URL, text, or photo of the recipe you are importing.
• Receipt and eat-out scanning (Family plan): the photo you scan, which may contain a masked card number.
• Nutrition estimation: the recipe or dish text.

We use the commercial API versions of these services, which means your inputs are not used to train their general models. Anthropic may retain inputs and outputs for a limited period (typically up to 30 days) to run the service and for safety, a period we don't control.

Anthropic processes this data in the United States. That means the information listed above — including your family members' ages and any dietary, allergy, or health notes you have entered, and the contents of receipts you scan — is disclosed overseas when you use an AI feature. We send it under Anthropic's commercial terms, which restrict their use of it to providing the service to us and exclude training on it. If you would rather nothing left Australia, you can use Harvenna without the AI features: planning, recipes, shopping lists, and nutrition targets all work without them.

Separately, Harvenna lets you connect your own AI assistant (for example Claude or ChatGPT) to your household data. If you set that up, you are choosing to send your data to that assistant's provider under their terms, not ours.

Who We Share Data With

We use the following providers only as needed to run the service. Where a provider is outside Australia, using that part of Harvenna means your information is disclosed overseas.

When you invite someone to your household, we send their email address to Resend to deliver the invitation, even if they never create an account.

Where Your Data Is Stored and Processed

Stored in Australia. Our servers, database, and file storage run on Google Cloud Platform and Neon in the Australia (Sydney) region. Your account, household, recipes, plans, shopping lists, and receipt photos live there. Data is encrypted in transit (TLS) and encrypted at rest by those providers. We do not apply an additional layer of application-level encryption to your stored content. Access to production systems is restricted and logged.

Some of it is processed overseas. Storage is not the whole picture: several of the providers in the table above operate outside Australia, so using those parts of Harvenna discloses information to them in their country. The significant one is Anthropic in the United States, which receives household and receipt details when you use an AI feature, as described under "AI Features" above. Payments, sign-in, invitation emails and website analytics are handled by overseas providers too, though they receive far less: a payment provider sees your billing details and not your household data, our email provider sees only the address an invitation is sent to, and our analytics provider sees which screens you used and never what is on them.

We use each of these providers under their commercial terms, which limit them to processing your information for the purpose of providing that service to us. We do not sell your information, and we do not disclose it to anyone else.

Your Choices and Rights

• Access and edit your data at any time in the app.
• Delete your account from Settings (web) or the Account screen (iOS). This permanently removes your account and its data; see the next section for the detail.
• Contact us at privacy@harvenna.com for any privacy request.

Deleting Your Account

Deleting your account is permanent and immediate. We remove your profile, sessions, sign-in links, subscriptions record, and, for households only you belong to, all of that household's recipes, plans, shopping, receipts, and photos. Where you share a household with others, the household continues for them and your own family profile is removed from it. Where you delete a household you were the only member of, its receipt and recipe photos are deleted from storage. An active web subscription is cancelled, and your Sign in with Apple link is revoked.

We keep one thing after deletion: a one-way cryptographic hash of your email address, with no name and no readable email, solely to stop a deleted account from repeatedly claiming a new free trial. It cannot be reversed back to your address.

Some copies are outside our reach and expire on their own rather than on deletion:

• Operational traces and server logs: up to 30 days.
• Website analytics events already recorded against your user ID: these are not tied to your account once it is gone, and are removed on request.
• Data sent to Anthropic for AI features: up to about 30 days, per their terms.
• Invitation emails held by our email provider: per their retention period.
• Payment and tax records kept by Stripe or Apple: per their legal obligations.
• Recipe and food images that were public may remain in browser or intermediary caches for up to a year after deletion.

Deleting your account does not cancel an App Store subscription; only you can do that, in your Apple ID settings.

Data Retention

We keep your account and content for as long as your account is active. When you delete your account we remove your data as described above; where a subscription lapses we retain your data but restrict paid features until you resubscribe.

Children's Privacy

Harvenna is for adults running a household. We do not knowingly allow anyone under 16 to create an account. You may add details about your children to plan for them; that information is treated with the same protections as all other household data, and you can remove it at any time.

Changes to This Policy

We may update this policy from time to time and will note significant changes in the app or by email.

Contact

For any privacy question or request, email us at privacy@harvenna.com.