Privacy Policy
Effective October 27, 2026
Lunchadoo is a lunch-planning app for families, run by Lunchadoo LLC. This policy explains what we collect, why, who helps us run the service, how long we keep information, and the choices parents have. It covers the Lunchadoo website and app at lunchadoo.com and app.lunchadoo.com.
Who we are and how to reach us
Lunchadoo LLC, 971 US Highway 202N, Suite #5803, Branchburg, NJ 08876. Phone (302) 689-3271. Email privacy@lunchadoo.com.
Accounts are for adults
Lunchadoo accounts are for adults 18 and older. Children do not get accounts, passwords or email addresses in Lunchadoo. An adult household member may create a child profile with a nickname and a preset picture. Kid Mode remains off until the child's parent or legal guardian completes our parental-consent process (see "Children's information and Kid Mode").
Information adults provide about their household and children
- Account details: your email address, and the sign-in codes we email you. We do not use passwords.
- Household details: household name, the adults you invite (their email addresses) and each adult's role.
- Child profiles: a nickname and a preset avatar you choose. We do not ask for a child's full name, birth date, photo, school records or medical details, and you should not enter them.
- Planning information: lunch plans, foods and food library entries, packing checklists, school menus and calendars you enter or import, food feedback, settings and themes.
- Lunch photos: photos you choose to upload of packed or returned lunches. Photos are resized and stored privately. Please keep faces and names out of them.
- Parent PIN: stored in protected (hashed) form and used to keep adult-only actions out of Kid Mode.
- Messages to us: what you send to privacy@lunchadoo.com or support.
- Billing (when subscriptions launch): Stripe collects your card details on its own page. We send Stripe your sign-in email and a household reference, and keep only your plan, subscription status and billing dates. We never receive or store your card number.
Information collected automatically
When you use Lunchadoo, our hosting provider processes technical information such as IP address, browser type, device information and request times, to deliver the service and keep it secure. We keep a small first-party record of account actions (for example, who imported a school menu and when) for security and usage limits.
We do not use advertising, analytics or tracking tools from other companies, and we do not use cookies for advertising. To understand how Lunchadoo is used, we may keep our own aggregate counts (for example, how many households signed up or imported a menu on a given day). These counts never include children's information, content, IP addresses or device identifiers, and we keep them for up to 13 months. Our sign-in provider uses cookies and similar storage to keep adults signed in.
Children's information and Kid Mode
Kid Mode is a supervised, picture-and-button version of the planner used on a household's shared device. Before Kid Mode can collect anything from a child, that child's parent or legal guardian must sign in, review our Kid Mode notice and give permission for that child. Each child gets a separate permission, and the parent or guardian confirms their authority for each child. Being a household member, the household owner or the person who pays does not by itself allow someone to approve. Saying no to Kid Mode does not affect the adult planner.
Information collected when a child uses Kid Mode. With permission, Lunchadoo stores the child's picture/button lunch choices, school-meal choices, "I'm done" choices, and one timestamp of the child's last Kid Mode activity (used only to apply our deletion rule). Optional extras (school-meal preferences, theme choices and favorites, and trying new preset foods) are off until the adult turns each one on.
Kid Mode never offers typing, searching, photos, camera access or uploads. Children cannot change billing, invite adults or change settings; those actions need the Parent PIN.
We use children's information only to run the lunch planner for the household, and adults in the household can see it. We do not sell it, share it for advertising, or use it to build profiles for any other purpose. We do not put children's nicknames or details in emails. Information adults enter about a child, such as a nickname, plans or a lunch photo, is protected under this policy too.
Parents' rights. A parent or legal guardian can, at any time: review the information stored about their child, stop further collection, withdraw permission, or delete the child. Most of this is in Parent Settings; you can also email privacy@lunchadoo.com. Withdrawing permission is as easy as giving it.
- Turning off Kid Mode (withdrawing permission) deletes the choices the child made in Kid Mode. Information an adult added independently, such as plans the adult made, stays unless you delete it too.
- Deleting the child removes the child's profile and all of their information from the household.
If someone tells us permission was given without authority, or parents disagree, we will look into it and may turn off Kid Mode while we do. The household owner's role does not override a parent's or guardian's request about their child.
Permission requests. A request that is not approved within seven days expires, and the pending child profile is deleted. Declining deletes it right away. A pending profile is created by the adult; nothing is collected from the child before permission. We will ask again before Kid Mode collects anything new.
How we use information
- To provide the service: planning, packing lists, syncing across your household's devices, imports and reminders.
- To send account and service emails: sign-in codes, invitations, permission notices, PIN resets, billing notices and important changes. We do not send marketing email without your permission.
- To keep Lunchadoo secure, prevent abuse and enforce usage limits.
- To support you when you ask for help. Support works from what you tell us and does not browse your family's content without your request.
- To meet legal obligations.
We do not sell personal information or share it for cross-context behavioral advertising.
AI menu and calendar import
You can ask Lunchadoo to read a school lunch menu or calendar. This feature is for clean, school-wide documents only. Before you choose Read this document, check every page and confirm it has no child names, photos, individual schedules, medical details or private notes. When you choose it, the selected file is sent to Anthropic to read the menu or dates. Your confirmation does not give permission on behalf of other people named in a document. If you upload something by mistake, email privacy@lunchadoo.com and we will help delete it. We do not add your household or child profiles to the request. Lunchadoo does not automatically remove personal information from documents, so if a document has private details, use a clean school-wide copy or enter the meals by hand.
Who helps us run Lunchadoo
We share information with the service providers below, which help us run Lunchadoo. Each one has signed a data processing agreement with us that limits its use of your information to running Lunchadoo and bars selling it or using it for advertising. Stripe also uses payment information for its own fraud prevention and legal obligations, under its own privacy policy.
| Provider | Purpose | Information | How long they keep it |
|---|---|---|---|
| Cloudflare | Hosting, database, photo storage | All app data and request metadata | Only as long as we keep it, plus automatic backups for up to 30 days. Deleted or returned if we stop using Cloudflare. |
| Clerk | Adult sign-in | Adult email, sign-in and session data, including technical details of the device in use | Until your account is deleted (we delete you from Clerk when you delete your account). Deleted within 90 days if we stop using Clerk. |
| Resend | Email delivery | Adult email address and message content (no child names) | Short-term delivery records; our own delivery records are kept 7 days. Deleted within 90 days if we stop using Resend. |
| Anthropic | Reading imported school menus and calendars | Only the document you choose to import | Not used to train models. Deleted within 30 days, unless needed to investigate misuse of its service. |
| Stripe | Payments (when subscriptions launch) | Billing details | Stripe keeps payment records as financial and anti-fraud laws require, under its own privacy policy. |
We may also share information if required by law, to protect the safety of a child or others, or as part of a sale or merger of Lunchadoo, in which case this policy continues to apply.
How long we keep information
| Information | How long |
|---|---|
| Child information from Kid Mode | Until the parent deletes it or withdraws permission. Each choice is deleted 12 months after it was made, and everything is deleted after 12 months with no Kid Mode activity. We warn the household 30, 7 and 1 day before. |
| Lunch photos | 90 days, then deleted automatically |
| Plans, food feedback and history | 12 months, then deleted automatically |
| Pending permission requests | 7 days |
| Proof of permission (who approved, dates, notice version, choices; no child content) | While permission is active and 90 days after it is withdrawn or the child is deleted. Deleted right away if the whole household is deleted. |
| Email delivery records | 7 days after delivery finishes |
| Account and household | While the account is active. Read-only households are deleted 12 months after a plan lapses, with warnings first. |
| Automatic backups by our hosting provider | Up to 30 days, then they expire. Deleted information is not restored from them into use. |
| Billing records, including your agreement to automatic renewal and the billing emails we sent | 4 years after your subscription ends, or longer if tax law requires |
Our providers may also keep limited security logs for the periods in their agreements with us. Each provider must tell us promptly about any security incident affecting your information.
Your choices and rights
You can view and update your household's information in the app, download a copy of your household data, delete a child, and delete your account in Settings › Account & household › Delete my account. Deleting your account also deletes any household where you are the only adult. In a household with other adults, deleting your account removes you and leaves the household with them. A parent's or guardian's request about their own child is handled separately. After an account or household is deleted, we keep only the billing records described above. You can also ask us to delete your account and household by emailing privacy@lunchadoo.com. We will confirm requests within 10 days and complete them within 30 days, or tell you why we can't. Depending on where you live, you may have more rights, such as to correct information or appeal a decision; email us and we will honor them as the law requires. We will not treat you differently for using your rights.
Security
We use encryption in transit, private storage, adult-only access controls, a household Parent PIN, and limits on what reaches our providers. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.
Where information is processed
Lunchadoo is run from the United States, and our providers may process information in the United States and other countries.
Changes to this policy
We will post changes here and update the effective date. If a change affects how we use children's information, we will ask parents for fresh permission before applying it. For other material changes, we will email account holders before they take effect and, where required, ask you to accept them.