1. Local mode

On first launch, OurFam creates a local member identifier, sample dishes, and an empty meal on your iPhone. Your display name, dishes, cooking notes, meal choices, and preferences remain on that device until you choose to create or join a shared space. We do not upload local-mode meal content to our Supabase project. Apple device backups may include local app data depending on your settings.

2. Shared spaces and anonymous accounts

When you create or join a shared space, OurFam creates or uses an anonymous Supabase Auth account. Cloud data includes an account ID and session, display name and avatar initial, space name and description, membership, dishes and cooking notes, meal and grocery choices, meal history, wishes, and space activity. Some content may be entered by other members. This content is linked to the account and space and can be seen or changed by members of that space. Do not enter information you do not want fellow members to see.

An anonymous account does not require an email address or phone number, but it has no cross-device recovery method. Reinstalling the app, clearing its session, or changing devices may permanently remove access to the original account and space.

3. Service providers and sharing

Supabase supplies authentication, database storage, and synchronization. It processes the cloud data above and service-security logs such as IP addresses and request times under its privacy policy. If you use the system share sheet to send an invitation or menu, the recipient and chosen app receive what you select. OurFam does not access your contacts. This support website is hosted on GitHub Pages; GitHub may process website visit data under its own policies.

4. Purpose and features not currently used

We use data to authenticate users, manage invitations, support collaborative meals, sync content, troubleshoot issues, and answer support emails you send voluntarily. The current native app has no ads, third-party behavioral analytics SDK, cross-app tracking, in-app purchases, or push notifications. It does not request location, camera, or contacts permission. A support email may include your email address and the information you choose to send; please do not include passwords or full invite codes.

5. Retention, correction, and deletion

Local data remains on your device until you delete it in the app or clear the app's data through the system. Cloud data remains while the account and space are in use. You can edit your space display name and shared content, and initiate permanent deletion at OurFam → Settings → Delete My Account and Data. After successful deletion, the active anonymous account, spaces you own and their content, local data and local backups are removed. Your membership and related content you created in spaces owned by others are removed. If you own a space, its other members lose access. The app shows the impact and asks you to confirm.

Provider security logs and backups may remain for a period under operational or legal obligations; we cannot promise simultaneous removal from every backup. If you cannot access the original anonymous account, deletion fails, or you have a data question, contact us below. Without a verifiable account, we may be unable to identify which anonymous data belongs to you. See the account deletion guide.

6. Updates and contact

Before a release adds login, notifications, payments, or another material change in data handling, we will update this policy and the App Store privacy answers. Email privacy questions to shijiuhan19@gmail.com.