Privacy
Privacy policy
Last updated October 28, 2026.
Whisk & Wonder is a small personal recipe and meal-planning site run by Joseph Dummar. This page explains what it keeps about you and why.
What we collect
- How you sign in. When you sign in with Google we receive your name, email address and profile picture. We don’t get your password or access to anything else in your Google account. If you make an account with your email and a password instead, we keep the email address; the password is handled by Supabase, stored only as a secure hash, and never seen by us. We email you only to confirm the address or to reset your password.
- What you put in the app. Your recipe book (including photos you upload), saved recipes and tags, meal plans, grocery lists, pantry, preferences and goals, and the members of your household.
- On your device. A sign-in cookie to keep you logged in, and a few display settings (like dark mode) stored in your browser.
- The phone app’s offline Recipe Book. If you turn it on, a copy of your recipe book (with small photos), grocery lists, this week’s plan and pantry is kept on that phone so it works without a connection, and kept up to date until you turn it off, which removes it.
How it’s used
Only to run the app for you: show your recipes and plans, build your weekly plan and grocery list, and share them with the people in your household. There are no ads, no tracking or analytics, and your information is never sold.
Where it’s stored and who sees it
- Your data is stored with Supabase, our database and sign-in provider. Google handles the sign-in itself, and Resend delivers our sign-in emails (confirm your address, reset your password).
- People you invite to your household see what you choose for each of them: your recipe book (to view, or to change), or as a partner your plans, lists, pantry and recipes too. Recipes they save from your book are copies in their own book, and keep showing your photos. Everyone in a household, at any access level, can also see the recipes each other’s AI picked for Discover (not what was asked for).
- Photos you upload are stored at private, hard-to-guess web addresses. Anyone who has a photo’s exact link can open it, so don’t upload anything sensitive.
- Scanning a recipe from a photo happens in your browser; the image isn’t sent anywhere for that.
AI assistants you connect
On the Connect AI page you can let an AI assistant (like Claude or ChatGPT) use Whisk & Wonder for you, by signing in from that app or with a personal key. It can then read and change your household’s data the way you can, and what it reads is handled under that AI company’s own privacy policy. Nothing is shared with an AI unless you connect it, and you can disconnect it or turn your key off at any time.
The Chrome extension
- Save this recipe sends the recipe on the page you’re on (its address and the recipe details the page includes) to Whisk & Wonder, only when you click it. It uses your Whisk & Wonder sign-in in that browser, so it’s saved to your recipe book.
- Compare prices reads the product name, price and size from the page you’re on, only when you click Add to compare, or from a product link you paste (it opens that page in a background tab, reads it and closes it). That list stays in your browser and isn’t sent anywhere.
- The extension doesn’t track the pages you visit, show ads, or share anything with anyone else.
Deleting your data
You can delete recipes, plans and lists in the app at any time. A recipe you move to the trash stays there for 30 days so you can restore it, then it and its photos are deleted for good (or right away when you empty the trash). A photo stays while a copy someone saved from your shared book still shows it. To delete your account and everything in it, tap your picture at the top, choose Account settings, then Delete my account. Your recipes, tags, photos, meal plans, grocery lists, pantry, settings and your sign-in are removed right away. People you shared your recipe book with keep the recipes they saved from it (with those recipes’ photos). Your partners keep their own accounts but lose everything you shared, including what they added to your household.
Questions
Email [email protected]. If this policy changes, the date at the top will change too.