Privacy Policy

This Privacy Policy describes how MyProviders Family LLC (“Oat,” “we,” “us,” or “our”) collects, uses, discloses, and retains personal information in connection with the Oat mobile application, its Apple Watch companion and share extension, the website at www.oatapp.co, and related services (collectively, the “Services”). Personal information means information that identifies, relates to, or can reasonably be linked to an individual.

MyProviders Family LLC operates Oat and is the controller responsible for the personal information processed to provide the Services. Privacy inquiries and requests may be directed to support@oatapp.co. This policy describes our practices; it does not replace any consent required by applicable law or your device’s permission settings.

1. Information we collect

We collect information you provide, information generated through your use of the Services, and information from the services you choose to connect.

Account information. When you create or use an account, we process your email address, account identifier, display name, and authentication information. Email sign-in, with a one-time code, is handled through our authentication provider. If you use Sign in with Apple, we receive the identifier and any name or email address Apple makes available, which may include a private relay email address. We do not receive your Apple account password.
Recipes and shopping information. We process shopping items, quantities, notes, checked-off items, recently purchased items, recipes, ingredients, instructions, favorites, meal plans, reminders, cooking history, and cooking goals. Imported recipes may include source links, images, video links, and text from the page you share. Shopping and cooking records reflect activity you enter in Oat, rather than payment transactions obtained from retailers.
Household information. We process household identifiers, membership, roles, invitation links, and activity associated with shared lists, recipes, and meal planning.
Voice and recipe assistance. If you use voice entry, we process microphone audio and the resulting transcription and list changes. If you request recipe writing or import a recipe using our AI features, we process the submitted notes or page text and your language setting. Section 4 explains the information sent for AI processing.
Device, request, and notification information. Our systems and hosting providers process technical information needed to deliver and protect the Services, such as IP addresses, request times, requested pages or resources, browser or device information supplied with requests, and error logs. Catalog requests include search terms or recipe identifiers; personalized Home requests also include authentication information, the local date, and the time-of-day meal category. If you enable push notifications, we store your device’s push notification token and its association with your account.
Usage information. We keep a record of actions you take in the app, such as marking a dish cooked, rating it, adding a favorite, planning a meal, adding to the shopping list, saving a recipe, or using Plan my week or voice entry, with the time and the dish involved, associated with your account. We use it to understand which features people keep using. It is not shared with advertisers or used to track you across other apps or websites.
Communications. If you contact us, we receive your contact information, message, and any attachments or other information you provide.

Oat does not request access to your contacts, precise device location, or HealthKit data, and does not collect advertising identifiers. Information you choose to enter in recipes, notes, or messages may nevertheless reveal personal preferences or other personal information.

2. How we use information

We use personal information for the following purposes:

To create and authenticate accounts, store your content, and synchronize it across your devices.
To provide recipe search, shopping lists, meal planning, household collaboration, and personalized recipe suggestions based on household activity.
To process voice input and recipe-writing or import requests that you initiate.
To understand how the Services are used and improve them.
To deliver requested reminders, household notifications, and account or service communications.
To respond to support and privacy requests, diagnose failures, secure the Services, and prevent misuse.
To comply with applicable legal obligations and establish, exercise, or defend legal claims.

We do not sell personal information, use it for targeted advertising, or track you across other companies’ apps and websites for advertising purposes. Oat does not include third-party advertising SDKs.

3. Local storage and connected devices

You can use the shopping list without an account; that list is stored locally on your device. Browsing the recipe catalog still requires network requests. Signing in enables account and household synchronization, including uploading your local list. Oat also stores local copies of content and preferences to support normal operation and offline access.

If you use Oat on a paired Apple Watch, account information and a sign-in token are transferred through Apple’s device connectivity services so the Watch can authenticate and synchronize your shopping list. The share extension uses your Oat session to save recipes to your account. Device backups are subject to your Apple settings and Apple’s own privacy practices.

4. Voice input and artificial intelligence

Voice entry requires microphone permission and records while the voice feature is actively listening. Audio clips, the current draft items, and existing shopping-list item names are sent through our backend to OpenAI to recognize your request and return proposed list changes. For AI recipe writing and importing, the submitted recipe notes or shared page text and language setting are sent through our backend to OpenAI to produce structured recipe content. Shared page text may contain information beyond the recipe itself. When you use the meal planning chat, your messages in that conversation, Oat’s earlier replies in it, and the names of dishes your household cooked recently (with how long ago) are sent through our backend to OpenAI to suggest dishes or write a recipe.

Oat does not save voice recordings in its application database or file storage. Resulting list items and saved recipes are retained as part of your content. Processing by a service provider may involve separate retention: OpenAI states that API inputs and outputs are not used to train its models by default and that abuse-monitoring logs may retain customer content for up to 30 days, unless longer retention is legally required. See OpenAI’s API data controls for its retention details and exceptions.

We keep a copy of meal planning chat conversations (your messages and Oat’s replies, but not your cooking history) for up to 30 days to diagnose problems and to detect use of the chat for anything other than planning meals, which we flag for review. This copy is stored without your account, household, device, or any other identifier and is not linked back to you, so we cannot find, provide, or delete a particular person’s conversations. It is deleted automatically after 30 days. Please don’t include personal details in the chat that you wouldn’t want kept for that time.

You may choose manual entry instead of these optional features and may disable microphone access in your device settings. Disabling microphone access stops future recording; it does not delete content already saved or information already submitted for processing.

5. Disclosure of information

Household members. Joining a household shares its shopping list, meal plans, favorites, cooking activity, goals, and members’ recipes. Other members can view and change shared content. Your display name may appear with your activity and on invitation pages. Anyone who receives or is forwarded a valid invitation link may be able to view the invitation and join the household. Share these links only with people you intend to invite.
Service providers. We use Supabase for authentication, databases, synchronization, file storage, and backend processing; Vercel for website hosting and recipe catalog requests, including personalized requests; OpenAI for the processing described in Section 4; and Apple for Sign in with Apple, device connectivity, and push notification delivery. Notification content may include household activity or meal details and may appear on your lock screen according to your settings. Providers processing information on our behalf are required to protect it consistently with this policy and applicable law, and to use it only to provide their services to us, subject to their legal obligations.
Sharing you initiate. If you export, copy, or send content to another application, the selected information is disclosed as part of that action. For example, a shopping handoff to ChatGPT includes selected items and notes in a prompt and copies that prompt to your clipboard. This is a separate service from Oat’s use of the OpenAI API. The receiving service’s terms and privacy policy govern its subsequent processing.
Legal and safety purposes. We may disclose information where required by law or where reasonably necessary to respond to valid legal process, protect rights or safety, investigate misuse, or establish, exercise, or defend legal claims.
Business transfers. Information may be transferred in connection with a merger, acquisition, financing, reorganization, or sale of the Services, subject to applicable law and appropriate confidentiality protections. We will provide notice where required.

6. External websites and content

The Services may retrieve or display third-party recipe pages, images, videos, or search results, or open external applications. The relevant provider may receive your IP address and request information when that content loads. For example, an ingredient lookup sends the selected search term to Google. External websites may use their own cookies and similar technologies. Their independent practices are governed by their privacy policies. Oat does not use advertising cookies or tracking pixels on its website.

7. Retention and account deletion

We retain account information and saved content for as long as needed to provide the Services, including while your account remains active, unless you delete the information or request deletion, subject to the exceptions below. The separate recently-purchased history is scheduled for deletion after 28 days; this does not automatically remove checked-off items from your shopping list or your cooking history.

To delete your account, open your profile in Oat, go to Account, select Delete account, and confirm. Account deletion removes your authentication account, personal recipes and stored recipe photos, household memberships, invitations you created, registered push devices, and account-linked household notification activity from active systems. If you are the only member of a household, that household and its associated data are also deleted.

If other members remain, shared household records may remain available to them and household ownership may pass to another member. Your account attribution is removed from retained purchase and cooking records. Text you entered into shared items may remain in those items. Other people may also retain copies they previously exported or saved. Contact us if retained shared content contains personal information you wish to have removed.

Signing out clears the app’s local personal data but does not delete your account or its server-side information. Uninstalling the app also does not delete an account. You may request deletion or assistance at support@oatapp.co; we may need to verify your identity before acting.

Limited information may remain in provider backups or operational logs until those records expire under the applicable retention cycles, or where necessary to meet legal obligations, address security incidents, resolve disputes, or defend claims. Retention depends on the information’s purpose, sensitivity, applicable legal requirements, and the time needed to resolve the relevant matter. Such retention does not authorize use for unrelated purposes. AI provider retention and the meal planning chat copy are described in Section 4.

8. Your choices and privacy rights

You may edit or remove content using the available app controls, leave a shared household where that option is available, disable notifications or microphone access in your device settings, or delete your account. Leaving a household does not erase shared records from the other members’ accounts.

Depending on your location and applicable law, you may have rights to obtain information about our processing, access or receive a portable copy of your personal information, correct inaccurate information, request deletion, restrict or object to certain processing, and withdraw consent where processing relies on consent. Withdrawal does not affect the lawfulness of processing before withdrawal. You may also have the right to complain to your local data protection authority or appeal a decision on a privacy request.

Submit a request or appeal to support@oatapp.co. We may request information reasonably necessary to verify your identity and, where applicable, an authorized agent’s authority. We will respond within the period required by applicable law and explain any limitations or refusal. We will not discriminate against you for exercising a privacy right. Some information is necessary to provide a requested feature, so deleting it or declining its processing may prevent that feature from working.

Where applicable U.S. state privacy laws provide rights to opt out of the sale of personal information, sharing for cross-context behavioral advertising, or targeted advertising, Oat does not engage in those activities. We do not use personal information for automated decisions that produce legal or similarly significant effects on individuals.

9. Legal bases for processing

Where data protection law requires a legal basis, we process account and service information as necessary to perform our agreement with you and provide the features you request; rely on legitimate interests to maintain security, diagnose problems, and respond to inquiries, subject to your rights and interests; process information to comply with legal obligations; and obtain consent where required for optional processing. You may withdraw consent through the relevant settings or by contacting us.

10. International processing

Oat’s service providers may process and store information in the United States and other countries whose data protection laws differ from those in your country. Where applicable law requires safeguards for an international transfer, the transfer must be covered by a recognized legal mechanism, such as an adequacy decision or approved contractual safeguards. Contact us for information about the safeguards applicable to your personal information.

11. Security

We use technical and organizational measures designed to protect personal information, including encrypted network connections, authenticated access, and database access restrictions for account and household information. No method of transmission or storage is completely secure. You are responsible for protecting your devices, sign-in credentials, and household invitation links.

12. Children’s privacy

The Services are not directed to children under 13, or children below the minimum age required to provide their own consent under applicable law. We do not knowingly collect personal information from such children. If you believe a child has provided personal information to Oat, contact us so that we can investigate and take appropriate steps to delete it.

13. Changes and contact information

We may revise this Privacy Policy to reflect changes to the Services, our practices, or applicable law. The updated policy will be posted on this page with a revised “Last updated” date. We will provide additional notice of material changes and obtain consent where required by applicable law.

For questions about this policy or to exercise your privacy rights, contact MyProviders Family LLC at support@oatapp.co.