Privacy

Your account: name, email address and the details you choose to add to your member profile, such as the size of your household and the equipment in your kitchen.

Your ledger: the names you give your guests, the constraints you record, what you served them, and how it landed. This can include information about a person's health, because an allergy or an intolerance is health information. Enter only what you need in order to cook safely.

Your book: dinners logged, the temperatures you recorded, what worked and what failed, the bottles you opened, and any photograph you choose to attach.

Your kitchen notes and your recipes, including anything typed or photographed from a family card.

Basic technical records needed to run the service securely, such as when a member signed in.

To give you the product you asked for: memory of your kitchen, your guests and your cellar. Nothing here is held to build an advertising profile.

Guest details exist so that you can be reminded before you plan a menu. They are not used to contact your guests, and this house does not market to them.

You, and the administrators of this house who are responsible for running it. Records are separated per member: one member's ledger is not readable by another.

Photographs are stored privately and shown to you through a short-lived signed link, not a permanent public address.

Your data is not sold, rented, or shared with advertisers.

Where the house relies on service providers — hosting, file storage, payments, and the language and vision models that power the five voices — they process data on the house's instructions and only for the purpose it was given to them.

For as long as your membership is open, because a memory that is deleted every year is not a memory.

When you close your account the house deletes your ledger, your book and your cellar, except for whatever it is legally required to keep, and except for any copy you have exported yourself.

A copy of your data, in a file you can keep. Correction of anything wrong. Deletion of a guest, an entry or the whole ledger.

You can remove a guest from the ledger at any time. Removing a guest removes their servings from your history.

Where the law gives you additional rights over your own data, those rights apply in full. Nothing in this notice reduces them.

This is a house for adults cooking for guests. Accounts are not intended for anyone under sixteen, and the house does not knowingly hold their data.

The house uses what it needs to keep you signed in and to remember which room you were in. It does not set advertising cookies. The cookies page sets this out plainly.

The five voices are AI. When you ask the house something, the words you send are used to answer you, and may be processed by the model providers that serve the house. Do not put a guest's medical history into a prompt; put the constraint in the ledger, where it belongs and where you can correct it.

Any request about your data can be made from inside your account, and the house will answer it in writing.