Privacy Policy

Dished is a meal planning app made for families, and we treat your family's information the way we'd want ours treated. This policy explains what Dished collects, why, who helps us run it, and what control you have. Dished is operated by Root & Branch Ventures LLC (“we”).

What we collect

• Your account. When you sign in with Apple, we receive your name and email address (or Apple's private relay address if you choose to hide it). When you sign in with email, we receive the email address you enter and use it only to send your sign-in codes. You can also set a display name and a profile photo.
• Your recipes and photos. The recipes you save, import, type in, or photograph, the photos attached to them, and where an import came from (for example the web page, or the platform and creator of a social post).
• Your household. The people in your household and their roles, and anyone you add to the table who doesn't use the app, such as a partner or a child. For these people we keep the name you enter, whether they're a child, and their reactions to meals.
• Planning details. Household size, dietary preferences, favorite cuisines, cook times, dinner time, and notes you write for your plans. Also your meal plans, grocery lists, pantry, freezer, the ingredients you want to use up, what you cooked, and how each dinner went.
• Calendar (optional). If you let Dished look at your calendar when making a plan, your phone works out how busy each evening is. Only a suggested cooking time limit per meal is sent to us. Event names, times, and other details stay on your phone.
• Photos you choose. Dished only sees the photos and videos you pick.
• Purchases. If you buy Dished Plus, Apple and RevenueCat tell us which plan you bought, the App Store's transaction identifiers, when it started and when it renews or ends, whether it was refunded, and whether it was a test purchase. We never see your card or other payment details; Apple handles payment.
• Feedback you send. If you use Profile › Send feedback, we receive your note, the topic you pick, any screenshot you attach, your app version, iPhone model and iOS version, and, if you ask us to write back, your sign-in email. Screenshots are not stored; they reach us only by email.
• Notifications. If you turn on notifications, we store your device's push token and device name so we can reach the right phone.
• Usage and diagnostics. From the first time you open the app, including the setup questions before you sign in, we record when you use the app and which screens and setup steps you reach, the options you tap on setup screens, and whether actions such as importing a recipe or making a plan succeed or fail. Before you sign in, these records carry only a random identifier made on your phone; when you sign in, they're joined to your account. These records include account and household identifiers, timestamps, app version, iPhone model and iOS version, operation duration, notification delivery, and standard error categories. They never include what you type during setup, names, foods you avoid, diet details, or your email address. When you ask for a new plan you can tell us why; we keep that answer. We also record each import or plan request and its processing cost. These records do not contain your recipe text or photos and are not used for advertising. Records that haven't been sent yet wait on your phone until it's back online.
• Screen recordings. While you set up Dished, the app may record what's on screen so we can see where setup is confusing. Text and photos are blanked out on your phone before the recording is sent, except fixed labels such as headings and buttons, and screens that show names, diet details, notes, your email address, or a sign-in code are hidden completely. Recordings are deleted after 30 days.
• Ad measurement in the app. When you install and open Dished, the app tells Meta (the company behind Facebook and Instagram) that it was installed and opened, along with a device identifier that Meta's software creates for the app and basic device details such as the iPhone model, iOS version, language, and time zone (Meta also sees the network address the request comes from, as any website does). From version 1.5.3 the app also tells Meta, once, when you finish setting up Dished, and when you start a Dished Plus subscription in the app, with only its price and currency; neither event carries anything about you or your answers. Meta's software in the app can also record Dished Plus purchase activity on its own when that option is turned on in Meta's settings for our app: starting, restoring, or not completing a purchase, which plan, its price and currency, and Apple's transaction numbers and dates (and, on some devices, the App Store receipt). That option is off for our app. If it were ever turned on, the app would stop sending its own subscription event, so a purchase is never reported twice. Meta uses all of this to tell us whether our Facebook and Instagram ads led to installs, finished setups, and subscriptions. Dished doesn't ask to track you across other companies' apps and websites, doesn't share your phone's advertising identifier, and sends Meta nothing else about your account, recipes, household, or what you do in the app.
• Visits to this website. Our websites are hosted by Vercel, which processes your IP address and standard request details to deliver pages and protect them from abuse. Unless you opt out, Google Analytics measures visits to our public marketing pages, traffic sources, device and browser information, successful waitlist submissions, and taps on our App Store links, and the Meta Pixel measures the same page visits, successful waitlist submissions, and App Store taps to help us understand our Facebook and Instagram ads. These services use cookie identifiers; see Website analytics and ads below. We do not send your waitlist email address to either service, and neither runs inside the app or on household invitation pages; the app's own ad measurement is described above.
• The waitlist. If you join the waitlist on this site, we collect your email address and the page that referred you, and use them to send you email updates about Dished and other things we build. If you join the Android list instead, we use your email address only to tell you about Dished on Android. Every email has an unsubscribe link, and you can ask us to remove you at any time.

How we use it

We use your information to run Dished: importing and organizing your recipes, generating your meal plans and grocery lists, learning which meals your family loves, sending the reminders you turn on, keeping your household in sync, and helping when something goes wrong. We do not sell your personal information. The only advertising use is measuring our own ads with Meta: the Meta Pixel on this website and the install, open, setup, and Dished Plus purchase events from the app, both described above. Nothing else from the app is used for advertising.

Service providers

We share information only with the providers that help us run Dished, and only what each one needs:

• Supabase hosts our database, file storage, and servers.
• OpenAI reads what you import (recipe text, web pages, photos, video frames, and video audio) to turn it into a recipe, and can create a recipe photo when you ask. To make a plan, OpenAI receives your recipes and planning details, including the first names of the people at your table and their meal reactions. OpenAI's API terms say that data sent this way is not used to train their models by default.
• ScrapeCreators receives the public link of a social post you import from TikTok, Instagram, YouTube, Facebook, or Pinterest, and sometimes the creator's public handle, so we can read the post's caption and video. It receives nothing about you or your account.
• Resend delivers the sign-in codes we email you, and passes the notes you send through Send feedback to our inbox. It receives your email address and the code, or your note and what goes with it, nothing else.
• Apple handles Sign in with Apple, delivers notifications (which can include a recipe name), and processes any purchases.
• RevenueCat manages Dished Plus subscriptions for us. It receives an account identifier and your purchase history from Apple, but no recipes or household details.
• PostHog, in the United States, receives the usage records and screen recordings described above so we can see where people get stuck. We've set it not to keep your network address or work out your location. It receives no recipes, names, notes, or email addresses.
• Vercel hosts trydished.com and dishedmeals.com.
• Kit stores the waitlist and sends our emails.
• Google handles email you send us, and website analytics unless you opt out. Meta receives website ad measurement events, also unless you opt out, and the app's install, open, setup, and Dished Plus purchase events described above. See Google's Privacy Policy and Meta's Privacy Policy.

When you import from a link, your phone or our servers load that page or post the way a browser would, so the website or platform you're importing from sees that request.

What other people can see

• Your household. Members of your household see its shared recipes, plans, grocery lists, and meal reactions, along with your display name and profile photo.
• Recipe share links. When you share a recipe, anyone with the link can see that recipe, its photo, and the name you shared it under. A link stays active until it's turned off in the app, even if the recipe is later deleted.
• Dinner polls. People you send a dinner poll link to can see the week's ideas without an account. If they vote, we store the name they type, their choices, and any cravings they add, linked to a random identifier stored in their browser. Your household sees these, and they're used when making that week's plan.

Website analytics and ads

Our public web pages load Google Analytics and the Meta Pixel when you visit, and both set cookies so they can recognize a returning browser. To opt out, choose Opt out in the notice at the bottom of any page. Opting out stops both services on that page, removes their cookies from this site, and keeps them from loading on later visits. We remember the choice in your browser's storage on this site, so it applies only to that browser and is lost if you clear the site's data; choose Opt back in to undo it. You can use the site and join the waitlist after opting out. Opting out does not erase data a provider has already received. Your browser's settings and content blockers can also block these services.

If your browser sends a Global Privacy Control signal, the Meta Pixel does not load; Google Analytics still runs unless you opt out. If you chose “Analytics only” in the cookie banner this site used before October 2026, the Meta Pixel stays off in that browser too, until you choose Opt out and then Opt back in, which turns both services back on (except the Meta Pixel while your browser sends Global Privacy Control). The notice at the bottom of the page says when Meta ad measurement is off.

Google advertising personalization and Google signals are disabled in our website integration. We exclude arbitrary query strings and URL fragments from the page addresses we send to Google Analytics and use campaign labels to understand which promotions bring visitors to Dished. App Store links on our website carry that campaign label (for example “website” or the name of an ad campaign) so Apple’s App Store Connect can report, in aggregate, which promotion led to a download; the label never identifies you. The Meta Pixel reports the page address as your browser shows it, so before either service loads we remove everything from that address except campaign labels, Facebook's ad click identifier, and a link to a section of the page; an email address or other personal detail in a link is never sent to Meta. Please do not include personal information in campaign links.

Notifications

Dinner reminders, grocery-day reminders, and similar notifications are optional. You choose them in the app, and you can turn any of them off at any time in Dished or in iOS Settings.

How long we keep it

We keep your account information for as long as you have an account. Records of your import and plan requests and their processing cost are part of that account information, because we need them for billing. Records of how you use the app (sessions, screens, and whether actions succeed) are deleted on a rolling basis once they are 13 months old; the copies PostHog keeps are deleted after 12 months, and screen recordings after 30 days. Some data is never tied to your account: the details we read from a public social post are stored without any link to you, reused for up to 30 days so the same post doesn't have to be processed twice, and then deleted on a rolling basis. Records of each purchase, its renewals and refunds are kept for our accounting and so that one purchase can't be claimed by two accounts. Notes you send through Send feedback are deleted two years after you send them, or sooner if you delete your account; the email copy we receive is kept only as long as we need it to follow up. Records we use to prevent abuse of our public pages store only a scrambled form of the IP address, never the address itself, and are deleted on a rolling basis after a day. We don't keep a copy of the install, open, setup, and purchase events the app sends to Meta; Meta keeps them under its own privacy policy.

Deleting your data

To delete your account, open Dished and go to Profile › Personal Details › Delete Account, or email support@trydished.com. Deleting your account removes your profile, your sign-in, your devices, your usage records, and your personal photos. If you're the only member of your household, the household and everything in it are deleted too.

If you share a household with other people, the household and its recipes, plans, and meal history stay with them; when you were the owner, it passes to another member. What you added stays for the household, no longer linked to your account. Recipe share links you created, in any household, are turned off and removed. To leave the waitlist, email us. We also ask PostHog to delete the usage records and screen recordings tied to your account, and keep asking until it's done. We ask RevenueCat to delete the purchase record it keeps for your account; if that doesn't go through, email us and we'll have it removed. We keep our own record of each purchase, its renewals and refunds, no longer linked to your account, for our accounting. Apple keeps its own purchase records under its policies.

Deleting your account doesn't cancel a Dished Plus subscription. Cancel it first in iOS Settings → Apple ID → Subscriptions, or Apple will keep renewing it.

Your choices

You can view and edit most of your information in the app. To ask for a copy of your information, a correction, or its deletion, email support@trydished.com. Depending on where you live, you may have additional rights under local law, and we'll honor them.

Children

Dished is built for parents and is not directed at children under 13, and we do not knowingly collect personal information from children through their own use. Parents can add a child to their household's table so plans fit the whole family. We use a child's name and meal reactions only to plan that household's meals. A first name or nickname is all Dished needs.

Changes

If this policy changes in a way that matters, we'll say so in the app before the change takes effect.

Contact

Dished is operated by Root & Branch Ventures LLC. Questions about privacy? Email support@trydished.com.