Privacy policy

Last updated: October 18, 2026

Trapeza hasn't launched yet. Today the only thing we collect is your waitlist sign-up. This policy also explains how the app will handle your information when it launches. We'll update it before launch and tell waitlist members about any important change.

Trapeza (“we”, “us”) is a meal-planning app for households in the United States. It plans a week of dinners around everyone's allergies, diets and tastes, and turns the plan into one grocery list you can send to Instacart. This policy explains what we collect, why, who we share it with, and the choices you have. Our Consumer health data privacy policy adds detail about allergy and other health-related information, including rights under Washington, Nevada and Connecticut law.

The short version

• We collect what we need to plan your meals and run your account, and nothing more.
• Allergy, diet and religious dietary details are sensitive. We use them only to plan your meals. We never sell them, never use them for advertising, and never send them to Instacart.
• We don't sell your personal information, share it for targeted advertising, or use it to train AI models.
• Chat messages are deleted after 90 days. When you delete your account, we delete your household's data within 30 days.

The waitlist (today)

When you join the waitlist, we store your email address, the referral code we give you (if you sign up again with the same address, you get a new code each time, and your earlier codes keep working and count as yours), the referral code of the friend whose link brought you here (if any), and when you signed up. We use your email only to tell you about Trapeza's launch and your place on the list. After you join, your browser keeps your own referral code in local storage so the page can show your sharing link; your email address isn't stored in your browser.

The website doesn't use advertising or analytics cookies or tracking pixels. Like any website, our host receives your IP address and basic browser details when you visit, so it can deliver the pages and protect the site from attacks. When you join the waitlist, our host, Cloudflare, also uses those details and how your browser behaves to tell people from automated sign-ups (Cloudflare Turnstile), and briefly uses your IP address to limit repeated attempts. We don't store your IP address or browser details with your sign-up.

You can leave the waitlist at any time with the unsubscribe link in any email, or by writing to support@trapeza.io.

What the app will collect

• Account details: your email address and sign-in information. If you sign in with Apple or Google, we receive the name and email address you choose to share with us.
• Your household: your ZIP code (to find stores and estimate prices), your weekly budget and number of dinners, and the people you add: a first name or nickname is enough, plus an age range.
• Allergies, diets and preferences: each person's food allergies and intolerances (and how serious they are), diets, the fasting calendar you choose or upload (the days it marks and who in your household keeps it), food dislikes, favorite cuisines, cooking time and kitchen equipment.
• Calendars you upload: if you upload your parish's fasting calendar as a PDF or photo, we read it once to find its fast days. We don't keep the file; only the days you check and confirm are saved.
• Your conversations: the messages you exchange with the setup assistant, which is an AI, that learns about your household.
• Your plans: weekly dinner plans, meal swaps, ratings and notes on meals, the grocery lists made from them, and when you tap “Shop on Instacart”.
• Reports you send us about AI-generated content, messages you send to support, and anything you write in our feedback form.
• Your choices about consent: which terms and consents you accepted or withdrew, and when.
• Device and technical data: app version, device type, a device token for push notifications, and error logs, so we can keep the app working.
• Usage events: which parts of the app you use and when, such as finishing setup or opening a plan, tied to your account.

Account holders must be at least 18. You may add other members of your household, including children, so their needs are part of the plan. By adding someone, you confirm you're allowed to share their information with us for this purpose. Trapeza isn't meant for children to use directly, and we don't knowingly collect information from children under 13 except what a parent or guardian adds to plan their household's meals. If you believe a child has given us information directly, tell us and we'll delete it.

How we use it

• To plan dinners that fit everyone in your household and build your grocery list.
• To check, with automatic safety checks, that every plan follows your household's allergy and diet settings, and to fix problems.
• To run your account, keep it and the service secure, and answer your questions.
• To send service emails, such as launch news or important changes, and, if you turn it on, a weekly summary of your plan. You can opt out of anything that isn't essential.
• To understand how the app is used and improve it, from usage events tied to your account. We never sell them or use them for advertising.
• To comply with the law and protect people's safety and our rights.

We don't sell your personal information, share it for targeted advertising, or use it to build advertising profiles. We don't use your personal information to train AI models, and we don't sell or give it to others for that purpose. Choosing meals for your plan is automated, but we don't use your information to make decisions that have legal or similarly significant effects on you.

Allergy, diet and religious dietary information

We treat allergies, intolerances, health-related diets and religious dietary practices as sensitive information. We ask for your consent before collecting them, collect only what meal planning needs, and use them only to plan your household's meals and check those plans. We never sell them, never use them for advertising, and never include them in what we send to Instacart, Impact, or our analytics and error-tracking providers. You can change or remove them at any time. If you withdraw your consent, we delete your account and everything your household has added or done in Trapeza, not just this information, within 30 days. Our Consumer health data privacy policy has the details.

AI processing

Trapeza uses AI models from Anthropic to run the setup conversation and to choose meals for your plan. The app tells you when you're talking with the AI, and before your first conversation it asks for your consent and tells you what is sent. We send what the AI needs for those jobs: your messages and your household's allergies, diets and preferences. If you upload a fasting calendar, we send the file to Anthropic so the AI can read which days are fast days, and we don't keep it. We don't send your email address or your sign-in details. Anthropic processes this information for us under its commercial terms, which don't allow it to train its models on what we send. You can withdraw this consent in the app's settings. Withdrawing it closes your account, and we delete everything as described under "How long we keep it." The app tells you this before you confirm.

AI can make mistakes. That's one reason every plan is checked against your household's allergy and diet settings, and why you should always read product labels (see our Terms).

Who we share it with

We share information only with service providers that help us run Trapeza. They act on our instructions under contracts that limit how they can use it, and each one gets only what it needs:

• Cloudflare hosts this website, stores waitlist sign-ups, protects the site from attacks, and forwards email sent to our support address.
• Supabase hosts the app's database, sign-in and server functions.
• Anthropic provides the AI models described above.
• An email provider sends waitlist and account emails, and the weekly summary if you turn it on.
• Error-tracking and product-analytics providers help us find bugs and see which features are used. They get technical data and usage events, not your household's allergy, diet or religious dietary details.
• Apple and Google handle sign-in if you choose them, and deliver push notifications, such as when your plan is ready.
• Google also hosts our feedback form (Google Forms), if you choose to send feedback. Please don't include allergy, health or religious details there; the app doesn't send any to the form.

Instacart: when you tap “Shop on Instacart”, we send Instacart the list of ingredients and quantities so it can create your shopping list page. We don't send your name, email address, or any allergy, diet or religious dietary information. What you do on Instacart, including your order and payment, is covered by Instacart's own privacy policy.

Commissions: we may earn a commission when you shop on Instacart through Trapeza. To pay that commission, Instacart and its affiliate network, Impact, may tell us that an order came from Trapeza. We don't send either of them your name, email address, or any allergy, diet or religious dietary information.

We may also share information when the law requires it, to protect people's safety, or as part of a sale or merger of our business, in which case this policy continues to apply to your information.

How long we keep it

• Chat messages: deleted after 90 days.
• Account and household data: kept while your account is open. When you delete your account, from the app or the account deletion page, we delete your household and everything tied to it within 30 days.
• When you withdraw consent: if you withdraw your consent to health data or to AI processing, we delete your account and everything your household has added or done in Trapeza within 30 days, including allergies, diets and preferences, plans, chat history, recipes and ingredients you imported or built, photos, fasting calendars you uploaded, and your support emails. We keep only a record that you made the request, for 24 months, and your email on our unsubscribe list if you opted out, as the law requires.
• Waitlist sign-ups: deleted within 30 days after the last launch invitation goes out, unless you create an account. You can unsubscribe or ask us to delete yours sooner.
• Usage events: kept while your account is open and deleted with it. Totals that don't identify anyone may be kept to measure how Trapeza is doing.

Deleted data may stay in our encrypted backups until those backups expire, which happens within 30 days.

Your choices and rights

Wherever you live in the United States, you can ask us to:

• confirm whether we have your information, and see it, including what we've inferred about you;
• correct it;
• delete it;
• give you a copy in a portable, machine-readable format;
• tell you which service providers and other parties we've shared it with;
• withdraw a consent you gave.

We don't sell personal information, use it for targeted advertising, or use it for profiling with legal or similarly significant effects, so there's nothing to opt out of; if that ever changes, we'll ask first and give you a way to say no.

How to ask: use the settings in the app, or email support@trapeza.io. We'll confirm your identity, usually by asking you to reply from the email address on your account, and you can use an authorized agent if your state allows it. We'll respond within 45 days, or tell you within those 45 days if we need up to 45 more and why. Requests are free, up to twice a year.

Appeals: if we turn down your request, you can appeal by replying to our answer with “Appeal” in the subject line. We'll answer in writing within 45 days and explain our decision. If we deny your appeal, you can contact your state attorney general.

We won't treat you differently for using these rights.

Do Not Track and Global Privacy Control

We don't track you across other websites, and we don't let other companies collect information about your activity on our website over time and across other sites. Because of that, our website works the same whether or not your browser sends a Do Not Track signal. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale of your information and targeted advertising, which we don't do in any case.

Security

We use encryption in transit, access controls that limit who can see your information, and tests that check one household can never see another household's data. No system is perfectly secure, so please keep your sign-in details private and tell us if you think your account has been misused. If a security incident affects your information, we'll notify you as the law requires.

United States only

Trapeza is offered only in the United States, and your information is stored and processed in the United States.

Changes to this policy

If we make an important change, we'll tell you in the app or by email before it takes effect. If a change would let us use information we already have in a materially different way, we'll ask for your consent first where the law requires it. The date at the top shows when this policy last changed.

Contact

Questions or requests about your privacy: email support@trapeza.io or use the Support page.