Home · Rhythm · Harmony
Last updated: September 25, 2026
This Privacy Policy explains what information Household Cadence ("we," "us," "our") collects when you use householdcadence.com (the "Service"), how we use it, and the choices you have. By using the Service, you agree to the practices described here.
Household Cadence is operated by its founder as an individual, not a separate registered company. Wherever this policy says "we" or "us," it means the person operating Household Cadence.
Account information. Email address, name (if you choose to provide one), and a hashed password. We never store your password in plain text.
Content you create. Recipes, meal plans, shopping lists, pantry items, cleaning checklists, to-do lists, calendar events, home inventory entries (including item photos and purchase price), and budget/expense entries (amount, category, note, who paid) that you or people you've shared with enter into the Service.
Emergency Plan. If you use the Emergency Plan, we store what you enter: your household's state, home address and nearest cross street, meeting places, emergency contacts and their phone numbers, where supplies and utility shut-offs are kept, supply details, and the people and pets in your household. People start as placeholders like "Child 1" — real names and general reminders (such as "needs glasses") are optional. The plan is designed not to need medical details, ID numbers or account numbers, so please don't enter them.
Dietary and allergen information. If you choose to use the allergen-tagging feature, we store the allergens/dietary restrictions you tell us about, and match them against recipe ingredients to show you a warning. This is optional and only used to power that feature.
Uploaded photos. Recipe photos, inventory item photos, and recipe-book cover images you upload are stored with our cloud storage provider (see Section 4).
Login and security metadata. We record the IP address of each device you log in from, so we can warn you by email if a login happens from somewhere we haven't seen on your account before. We also keep a durable log of security- and consent-relevant events on your account — shares granted or revoked, household/group joins and departures, password changes, two-factor authentication changes, and new-device logins — so you can see exactly what happened and when.
Billing information. If you subscribe to a paid plan, payment is handled entirely by Stripe (see Section 4) — we never see or store your card number. We keep only your Stripe customer/subscription reference IDs, your plan, and your billing status.
Communications. If you contact us through the Contact Us form, we store your message and email address so we can respond.
We use your information only to operate and improve the Service: to run your account, store and display the content you create, power features like allergen warnings and the weekly email digest, process payments, send you transactional emails (verification, password reset, security alerts, digest emails you've opted into, Emergency Plan reminders, and a notice when you become an Emergency Plan's manager), and respond to support requests. We do not use your data for advertising, and we do not sell your data to anyone.
Nothing is shared with other users of the Service unless you take an explicit action to share it. Every recipe, list, and plan you create is private by default. Sharing with a specific person, a Family Group, or your whole household is something you choose to do, one grant at a time — and unless you separately make something public (see below), it's never visible to anyone you haven't explicitly shared it with. Most sharing grants viewing access only. A few features are made to be kept up together — a shared pantry, cleaning checklist, home inventory or shopping list — and sharing those lets the people you choose edit them too.
Emergency Plan. A household's Emergency Plan is private to the person who manages it until they choose to share it with the household (view and print only). The manager can separately let specific household members edit it. If the manager leaves the household or deletes their account, a plan they shared passes to the household owner, who is notified by email; a plan they never shared is deleted.
Community Cookbook. If you choose to mark a recipe public, it becomes visible to anyone browsing the Community Cookbook. This is a deliberate, one-way action you take yourself — it is never automatic, and we show you a clear warning before you confirm (making a recipe public currently cannot be undone). Public recipes, and ratings you leave on them, show your name only the way you choose in your Account settings — unless you choose otherwise, you appear as “A Household Cadence cook.” Your email address is never shown publicly.
Service providers. We use a small number of third-party providers to run the Service, each of which processes only the data needed to perform its function:
We do not use any advertising or analytics/tracking services, and we do not run any third-party tracking scripts on the Service.
Legal requirements. We may disclose information if required by law, or to protect the rights, property, or safety of Household Cadence, our users, or others.
We use only the cookies strictly necessary to run the Service: a session cookie (keeps you logged in) and a CSRF-protection cookie (prevents cross-site request forgery). Both are marked HttpOnly and Secure. We do not use advertising or tracking cookies, and there is no cookie-consent banner because there is nothing beyond strictly necessary cookies to consent to. Your light/dark theme preference is stored in your browser's local storage, not in a cookie.
If you are in a jurisdiction that grants you additional rights under a law like the GDPR or CCPA (for example, the right to correct inaccurate data, or to object to certain processing), please contact us using the form below, and we will honor those rights.
We keep your data for as long as your account is active. Cancelling a paid subscription does not delete anything — cancelling only stops billing, and your data stays put.
Deletion of long-inactive accounts. To avoid holding personal data indefinitely, we permanently delete accounts that are both (a) without an active subscription or trial and (b) inactive — that is, you haven't signed in — for 90 consecutive days. Before anything is deleted, we email you in advance (around 30 days before, and again about 7 days before), and each of those emails includes a direct link to download a full copy of your data. Signing back in at any point during that window keeps your account and resets the clock — you never lose anything just for being away, only for being both unsubscribed and completely inactive for the full 90 days. Once the window passes, your account and its content are permanently deleted and cannot be recovered.
If you delete your account yourself, your content is removed, subject to the blockers described in Section 6. In either case, residual copies may persist briefly in encrypted backups or security logs for a limited period for security and legal-compliance purposes before being overwritten.
The Service is not directed at children under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us, and we will delete it. A parent or guardian may choose to list children in their household's Emergency Plan; those entries start as placeholders ("Child 1"), and adding a name or a general reminder is optional.
We use industry-standard measures to protect your data: passwords are hashed (never stored in plain text), all traffic is encrypted in transit (HTTPS), sensitive configuration is encrypted at rest, and we support two-factor authentication for your account. We maintain a durable audit log of consent- and security-relevant events on your account, and we email you if your password changes, your two-factor settings change, or a login happens from a device/location we haven't seen before. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
The Service and its data are hosted with DigitalOcean in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email.
Questions about this Privacy Policy, or requests related to your data, can be sent through our Contact Us form.