Morning Basketmorningbasket

Privacy Policy

Last updated: June 2026

Our promise to you

We built Morning Basket for families trying to stretch their grocery budget. That means you're trusting us with real information about your family — your budget, your kids, your allergies. We take that seriously.

The short version: we use your data to make the app work for you. We never sell it. We never will.

What we collect

What we never do

We will never:

Who we share data with

We never sell your data. We only share what's needed to run the app, with service providers who are contractually bound (through data-processing agreements) to protect it and use it solely to provide their service to us:

Sensitive information & AI meal planning

Some of what you share is sensitive — your food allergies and dietary preferences (which can reveal health conditions or religious or philosophical beliefs, such as Halal, Kosher, or vegetarian diets) and the age ranges of children in your household. We collect this only with your consent, and use it for one purpose: to filter recipes and products so unsafe or unwanted items never appear in your plans. We never use it for advertising, never to build a profile about you, and never sell or share it.

If you use AI meal planning, the preferences you've provided are sent to our AI provider solely to generate your plan. This data is not used to train AI models. AI meal planning is optional.

Your data rights

You can access, delete, correct, or export your data, and opt out of non-essential communications, at any time. Email privacy@morningbasket.app and we'll respond within 5 business days.

Children's privacy

Morning Basket collects children's age ranges solely to provide age-appropriate meal recommendations. We do not direct marketing at children, build profiles on children, or share children's data with any third party for any purpose. The app is intended for adults managing their family's grocery needs.

Data security & retention

All data is encrypted in transit via HTTPS, passwords are hashed (never stored in plain text), and payment data is handled entirely by our payment processor. Account data is deleted within 30 days of account closure; analytics are anonymized after 12 months; payment records are retained for 7 years as required by law. We'll notify you within 72 hours of any breach affecting your account.

Cookies

We use essential cookies only — to keep you logged in and remember your settings. We do not use advertising cookies or third-party tracking cookies.

Contact

Questions about this policy? Email privacy@morningbasket.app, or write to Elm Co LLC, Tennessee, USA.