Privacy

Updated October 26, 2026. This notice covers the 3Onions website and email list, operated by 3Onions. The iPhone app, its optional account and its purchase handling are also covered below.

What you share

When email collection is enabled and you join, we store your email, signup time, consent notice version and time, any optional cooking-for-one answer and, if you join through the waste quiz, the ingredients you picked. Every signup also gets a personal invite code, and we keep who invited you and when you confirmed your email. We also record campaign/source tags and a referring website’s origin and path when available. We do not store its query string.

Why we use it

We send the emails you asked for, such as your quiz results, receipts and occasional 3Onions news. Unsubscribe anytime. We also use your details to respond to support and to understand which sources bring interest. A signup alerts the owner. Every marketing email has an unsubscribe link, and buyers stop receiving offer emails. We do not sell your contact details.

Purchases

For purchases, Stripe processes payment information; our website does not store full card details. We retain purchaser email, product, payment status, transaction and RevenueCat references, purchase time, campaign attribution, and access activation dates. RevenueCat manages purchase records and app access. These records support fulfillment, refunds and customer support. Purchasing does not by itself subscribe you to marketing emails.

Payments on 3onions.app are processed by Stripe. We receive your email address, what you bought and the payment status, never your full card number.

If you buy a gift, we store your name, the recipient’s name, their email if you choose email delivery, your note, and the delivery date and time zone. We use them only to deliver the gift and to send one reminder if it’s still unclaimed, never for marketing.

Website measurement

We use first-party events for page visits, pricing views, signup starts and accepted signups, plus offer views, checkout starts and completed purchases by offer. A random session identifier and campaign information are stored in session storage. Email addresses are kept out of the general event table. Where your browser sends Do Not Track or Global Privacy Control, optional client events are suppressed. The server still records an accepted signup to maintain an accurate operational record.

Advertising measurement

Unless you turn it off, or your browser sends Do Not Track or Global Privacy Control, we load Meta Pixel on our public pages to measure visits, accepted Free signups and checkout initiation, and on the purchase confirmation page to record a completed purchase (offer and price only). Meta may receive network address, browser/device information, page URL and advertising identifiers, and may use cookies to associate activity with ads. We do not intentionally send email fields, optional cooking answers or private purchase-pass links through the pixel, and load it on the purchase confirmation page only after the private link has been removed from the address. Automatic advanced matching is not enabled by our code. You can turn it off at any time with Ad privacy choices at the bottom of the page; turning it off stops future events but does not erase data already received by Meta. See Meta’s privacy policy.

Website analytics

Unless your browser sends Do Not Track or Global Privacy Control, we use Google Analytics to understand visits, signups and completed purchases (offer, price and a one-way coded order reference; never your email or private purchase link). Google may receive network address, browser/device information and page URL, and may use cookies. See Google’s privacy policy.

iPhone app and purchases

The 3Onions iPhone app stores your cooking preferences, selected dinners, plans, grocery edits, meal feedback and app activity events on your device. You can use the app without an account.

Optional account. If you create an account (Sign in with Apple, Google, or an email code), we store your email address, an account ID, and your name if Apple or Google shares it. Your preferences, week, groceries, the dinners you’ve made and rated, and imported recipes are then synced to your account so you can use them on another device. Supabase hosts accounts and synced data for us. You can delete your account at any time: in the app, open the You tab, scroll to the bottom and tap Delete account. This deletes the account and its synced data and revokes Sign in with Apple access. RevenueCat keeps your purchase record so purchases can still be restored and refunded. Signing out or deleting your account does not cancel an Apple subscription.

Popular dinners. To show which dinners are popular, the app sends the dinners you pick with a random per-install ID. This is not linked to your account, name or email.

Usage events. The app sends short usage events, like “plan made”, “dinner made” or “Solo screen shown”, with a random per-install ID, the app version and the time. They aren’t linked to your account, name or email, and never include recipes or anything you type. We use them to see which parts of the app help people cook, and delete them after 13 months. Because they aren’t linked to you, we can’t look them up or delete them for one person. You can turn them off in Settings → Share anonymous usage.

Feedback. If you send feedback from the app’s Profile tab, we receive the kind you chose (dinner idea, improvement or something’s broken) and your text, with a random per-install ID and the app version. No name, email or account is attached, so we can’t reply to it. Please don’t include personal information. Feedback is deleted after 13 months.

How you found us. If you answer “How did you hear about 3Onions?”, we save your answer with your purchase record at RevenueCat. The app also lets RevenueCat read Apple’s Search Ads attribution token to see which App Store campaign led to an install; this doesn’t use the advertising identifier.

Recipe import. When you paste a recipe link, your phone fetches that page directly and keeps the recipe on your device (and in your account, if you have one).

Apple processes in-app subscription payments. RevenueCat receives purchase and entitlement information, a customer identifier (a random ID made by the app, or your account ID when you’re signed in), and technical information needed to operate purchases, restore access and prevent fraud. We do not receive your full Apple payment-card details. A web purchase claim sends your signed proof and app customer identifier to our Cloudflare service to connect the purchase; existing web purchase records include your purchase email and transaction references. Treat your purchase pass as private. Native purchase records may be connected to an existing web purchase record and its email address. We retain purchase records as needed to provide access, resolve refunds and meet recordkeeping obligations.

The app has no advertising SDKs, does not request the advertising identifier and does not track you across other companies’ apps or websites. Website analytics described here apply when you visit the website, not to the app. See RevenueCat’s privacy policy and Apple’s privacy policy. For access, deletion or support requests, email hello@3onions.app. Deleting local app data does not cancel an Apple subscription; manage subscriptions in your Apple Account settings.

Medication reminders

You add your medicines in the app: each name, the times and days, and any strength, amount or note you choose. Reminders are scheduled on your iPhone, and the notification never names the medicine. The record of the doses you mark Taken or Skipped stays on your iPhone for 90 days. If you have an account, your list of medicines is also saved to it so it works on another device. Marking a dose Taken also counts as a check-in (below), without saying which medicine. Reminders are only reminders. Always follow your doctor’s directions.

Daily check-ins and the Circle

Your Circle is a few people you choose, up to 5. You invite each person with a single-use code that expires after 7 days, shared from your iPhone. You approve each person before they see anything, and you decide what each one sees. You can remove anyone at any time, and they can leave at any time. We don’t ask for their email address or phone number. We never collect your location.

When you check in (with one tap in the app, by marking a dinner made or by marking a medicine Taken), we save the time and how you checked in. People you’ve approved with alerts on can see whether you’ve checked in today, your check-in schedule and your latest check-in. If you choose to share them, they can also see how many dinners you’ve made and how many of your medicines you’ve marked Taken. They never see the names of your medicines. If you miss a check-in, we remind you first. If you still haven’t checked in when your grace time ends, we notify the people in your Circle who have alerts on. These notifications include your name and go through Expo and Apple’s push service.

The Circle and check-in alerts need an account. Supabase hosts this data for us. Check-ins, alerts and shared numbers are deleted after 90 days, and invites 30 days after they expire. 3Onions is not an emergency service. In an emergency, call 911.

Fridge photos

With Solo or Golden and an account, you can photograph your fridge to find tonight’s dinner. Your iPhone sends a smaller copy of the photo, without its location or camera details, to Google’s Gemini AI through our service, which sends back the ingredients it spots. We don’t store the photo. We keep only a count of photos per day, for the daily limit. See Google’s privacy policy.

Golden

Golden is set up by a family member, who pays and sends the invite. The person they invite uses 3Onions on their own iPhone. They run their own day: dinners, medication reminders and check-ins. Accepting the invite creates an account for them without an email address; they can add one later. The family member starts in their Circle with alerts and sharing off, so nothing is shared with the family member until they choose to share it, and they can remove the family member at any time. The family member’s account keeps the short name they gave the invite and whether it was accepted. A family member can suggest a week of dinners or a medicine schedule. A suggestion is saved with what it suggests, including medicine names, and nothing changes until the person accepts it.

Deleting your account also deletes your Circle, your place in other people’s Circles, your invites, check-ins, alerts, shared numbers, suggestions, Golden invites and the medicines saved to your account. If your check-ins are on, people in your Circle who get your alerts get one notice that you closed your account.

Service providers and security

Cloudflare provides website hosting, signup storage and email forwarding. Resend delivers our outgoing emails; we turn off its open and click tracking. Supabase hosts app accounts and the Circle. Expo delivers push notifications through Apple. Google’s Gemini AI reads fridge photos. Providers process data to operate these services. Access is restricted to the operator and necessary service providers. Network addresses may be processed by hosting services for security; our abuse controls store a short-lived salted hash rather than a raw IP address.

Your choices and retention

You may request access, correction, deletion or removal from updates through hello@3onions.app. We keep your email address until you unsubscribe or ask us to delete it. Limited security and compliance records may need to be retained. Do not submit sensitive personal information.

Children and changes

3Onions is intended for adults. Our website and emails are not directed to children under 13. Material changes to the purpose of collection will require an updated notice and, where appropriate, new consent.