OurTab privacy policy
Last updated: 18 May 2026
OurTab ("OurTab", "we", "us") is a shared household app for tracking shopping, meals and money. This policy explains what personal data we handle, why, and the rights you have under UK data protection law (UK GDPR).
Who is responsible for your data
OurTab is operated by Kris Deane, a sole trader based in the United Kingdom, acting as the data controller. You can reach us about anything in this policy, including data requests, at kris.deane93@gmail.com.
What we collect
- Account data — your email address, and an encrypted password if you set one. Used to sign you in and secure your account.
- Household data you enter — expenses, repayments, shopping lists, inventory, sales and any notes you add. This is the content of the service.
- AI Chef data — when you ask Chef for meal ideas or a recipe, the relevant inventory, dietary preferences, allergies and your messages are sent to our AI provider to generate a response.
- Payment data — if you subscribe to Premium, payment is handled entirely by Stripe. We never see or store your full card details; we only receive a subscription status and a customer reference.
- Usage analytics — we use a privacy-friendly analytics tool (Plausible) that does not use cookies and does not collect personal data or build profiles of you. We see aggregate page visits only.
Data shared within your household
OurTab is designed for shared use. Anyone who is a member of your household can see the shared ledger, shopping list, inventory and meal activity for that household. Only invite people you intend to share this information with. Removing a member stops their future access but does not retroactively hide entries they already saw.
Why we can use your data (legal bases)
We process account and household data to provide the service you asked for (performance of a contract). We process payment data to take payment for Premium (contract and legal obligation). We use minimal analytics under our legitimate interest in understanding and improving the product, balanced against your privacy.
Who processes data on our behalf
- Supabase — database and authentication. Your household data is stored here, in a London (UK/EU) region.
- Vercel — application hosting and delivery.
- Stripe — payment processing for Premium subscriptions.
- Anthropic — powers the AI Chef. The meal context you send is processed to generate suggestions and is not used to train their models.
- Resend — sends transactional emails such as sign-in links, password resets and household invites.
Some providers (e.g. Anthropic) may process data outside the UK. Where that happens, the transfer is covered by appropriate safeguards such as standard contractual clauses.
AI Chef — important
Chef's meal and recipe suggestions are generated by an AI model and are for convenience only. They are not professional dietary, nutritional or medical advice. Always check ingredients yourself, especially for allergies — you are responsible for confirming any meal is safe for your household before preparing it.
How long we keep data
We keep your account and household data for as long as your account is active. If you ask us to delete your account, we remove your personal data within 30 days, except where we must keep limited records (for example, payment records) to meet legal obligations.
Your rights
Under UK GDPR you have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent where we rely on it. To exercise any of these, email kris.deane93@gmail.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) if you are unhappy with how we handle your data.
Security
Data is encrypted in transit. Access to household data is enforced at the database level with row-level security, so each household can only ever read its own data. AI Chef endpoints require an authenticated session.
Children
OurTab is not intended for anyone under 18 and we do not knowingly collect data from children.
Changes
We may update this policy as the product evolves. Material changes will be reflected by the "last updated" date above and, where appropriate, communicated in the app.