Home · Rhythm · Harmony
Last updated: July 24, 2026
This Privacy Policy explains what information Household Cadence ("we," "us," "our") collects when you use householdcadence.com (the "Service"), how we use it, and the choices you have. By using the Service, you agree to the practices described here.
Household Cadence is operated by its founder as an individual, not a separate registered company. Wherever this policy says "we" or "us," it means the person operating Household Cadence.
Account information. Email address, name (if you choose to provide one), and a hashed password. We never store your password in plain text.
Content you create. Recipes, meal plans, shopping lists, pantry items, cleaning checklists, to-do lists, calendar events, home inventory entries (including item photos and purchase price), and budget/expense entries (amount, category, note, who paid) that you or people you've shared with enter into the Service.
Dietary and allergen information. If you choose to use the allergen-tagging feature, we store the allergens/dietary restrictions you tell us about, and match them against recipe ingredients to show you a warning. This is optional and only used to power that feature.
Uploaded photos. Recipe photos, inventory item photos, and recipe-book cover images you upload are stored with our cloud storage provider (see Section 4).
Login and security metadata. We record the IP address of each device you log in from, so we can warn you by email if a login happens from somewhere we haven't seen on your account before. We also keep a durable log of security- and consent-relevant events on your account — shares granted or revoked, household/group joins and departures, password changes, two-factor authentication changes, and new-device logins — so you can see exactly what happened and when.
Billing information. If you subscribe to a paid plan, payment is handled entirely by Stripe (see Section 4) — we never see or store your card number. We keep only your Stripe customer/subscription reference IDs, your plan, and your billing status.
Communications. If you contact us through the Contact Us form, we store your message and email address so we can respond.
We use your information only to operate and improve the Service: to run your account, store and display the content you create, power features like allergen warnings and the weekly email digest, process payments, send you transactional emails (verification, password reset, security alerts, digest emails you've opted into), and respond to support requests. We do not use your data for advertising, and we do not sell your data to anyone.
Nothing is shared with other users of the Service unless you take an explicit action to share it. Every recipe, list, and plan you create is private by default. Sharing with a specific person, a Family Group, or your whole household is something you choose to do, one grant at a time — and unless you separately make something public (see below), it's never visible to anyone you haven't explicitly shared it with. Sharing grants viewing access only; the person you share with cannot edit or delete your original.
Community Cookbook. If you choose to mark a recipe public, it becomes visible to anyone browsing the Community Cookbook. This is a deliberate, one-way action you take yourself — it is never automatic, and we show you a clear warning before you confirm (making a recipe public currently cannot be undone).
Service providers. We use a small number of third-party providers to run the Service, each of which processes only the data needed to perform its function:
We do not use any advertising or analytics/tracking services, and we do not run any third-party tracking scripts on the Service.
Legal requirements. We may disclose information if required by law, or to protect the rights, property, or safety of Household Cadence, our users, or others.
We use only the cookies strictly necessary to run the Service: a session cookie (keeps you logged in) and a CSRF-protection cookie (prevents cross-site request forgery). Both are marked HttpOnly and Secure. We do not use advertising or tracking cookies, and there is no cookie-consent banner because there is nothing beyond strictly necessary cookies to consent to. Your light/dark theme preference is stored in your browser's local storage, not in a cookie.
If you are in a jurisdiction that grants you additional rights under a law like the GDPR or CCPA (for example, the right to correct inaccurate data, or to object to certain processing), please contact us using the form below, and we will honor those rights.
We keep your data for as long as your account is active. Cancelling a paid subscription does not delete anything — cancelling only stops billing, and your data stays put.
Deletion of long-inactive accounts. To avoid holding personal data indefinitely, we permanently delete accounts that are both (a) without an active subscription or trial and (b) inactive — that is, you haven't signed in — for 90 consecutive days. Before anything is deleted, we email you in advance (around 30 days before, and again about 7 days before), and each of those emails includes a direct link to download a full copy of your data. Signing back in at any point during that window keeps your account and resets the clock — you never lose anything just for being away, only for being both unsubscribed and completely inactive for the full 90 days. Once the window passes, your account and its content are permanently deleted and cannot be recovered.
If you delete your account yourself, your content is removed, subject to the blockers described in Section 6. In either case, residual copies may persist briefly in encrypted backups or security logs for a limited period for security and legal-compliance purposes before being overwritten.
The Service is not directed at children under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us, and we will delete it.
We use industry-standard measures to protect your data: passwords are hashed (never stored in plain text), all traffic is encrypted in transit (HTTPS), sensitive configuration is encrypted at rest, and we support two-factor authentication for your account. We maintain a durable audit log of consent- and security-relevant events on your account, and we email you if your password changes, your two-factor settings change, or a login happens from a device/location we haven't seen before. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
The Service and its data are hosted with DigitalOcean in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email.
Questions about this Privacy Policy, or requests related to your data, can be sent through our Contact Us form.