Privacy Policy

Version: 0.3 (interim) · Effective date: July 19, 2026 Controller: Tidbix LLC, a Texas limited liability company · legal@tidbix.com

This is an interim version, in effect while review by a licensed Texas attorney is completed. It was prepared with AI assistance. A revised version may replace it; material changes will be announced as described in Section 13.

The short version: Forage plans your household's meals. Your household's information stays between you, Forage, and the small set of service providers that run the app. We do not sell your personal data. We do not show ads. We do not use your content to train AI models unless you explicitly opt in (no such program exists today). You can export or delete everything, any time.

1. Who we are and what this covers

Tidbix LLC ("Tidbix," "we") operates Forage, a household meal-planning service. This policy covers the Forage app and website. The Service is offered to adults (18+) in the United States.

Washington and Nevada residents: our separate Consumer Health Data Privacy Policy also applies to your health-related data.

2. What we collect

We collect only what you give us, plus minimal technical data:

Account data (when you sign up): your email address, sign-in records, and your acceptance of the Terms (version and timestamp).

Household profiles (you enter these): for each household member, a name or nickname (a nickname is all we need — we suggest you use one), age, adult/child designation, food allergies, food dislikes, dietary preferences (e.g., vegetarian or vegan), goals, activity level and sport, and meal participation (who eats which meals).

Personalized food lists (you import or enter these; adults only; behind the health-data opt-in): food recommendations derived from a test you chose to take (for example, Viome), consisting of food names in categories like "superfood" or "avoid," the test date, and the source. We never receive your raw test report or images — list extraction runs on your own device, and only the resulting food-name list reaches the app. (In today's demo, the in-app import button simulates a result and labels it "simulated demo.") The app will not attach a food list to a child's profile; the app enforces this, and a database-level check will additionally apply when server accounts launch.

Plans and activity: the weekly meal plans you generate, which recipes you keep or swap, your rolling ingredient-usage history, and household preferences (budget weighting, organic preference, cook nights).

Optional wellness tracking (entirely behind the health-data opt-in): daily adherence, energy level, foods a child newly tried, and — for adults only — weigh-ins. The app will not record a weigh-in for a child; the app enforces this, and a database-level check will additionally apply when server accounts launch.

Stores you add: store names, your quality ratings, and availability/restock notes you enter.

Technical data: a single locally-stored state record in your browser (see Section 9), plus standard server logs (IP address, request metadata) kept by our hosting infrastructure. We run no third-party analytics, advertising SDKs, or tracking pixels.

We do not collect: precise location, contacts, photos, microphone or camera data, payment card numbers (Stripe processes payment; we never see the full card), government IDs, or biometric identifiers.

3. Health-related information and your consent

Food lists, wellness tracking, and weigh-ins, together with allergies, are health-related information, and we use all of it only to plan your household's meals and show your progress. Food lists and wellness tracking are collected only behind a separate opt-in toggle (Section 8). Allergies and food dislikes are different, on purpose: the planner's safety guardrails cannot work without them, so they are collected as necessary to provide the service you ask for — not behind the toggle — and are used only for that. We do not sell any of it, share it for advertising, or use it to train AI models (and would never do the latter without a separate, explicit opt-in from you — no such program exists today). Withdrawing the opt-in (Section 8) stops new collection and stops your food lists from being used in AI planning; the data already on your device stays there, under your control, until you delete it (Household → Privacy & your data → Delete health data, or Delete everything).

4. How we use information

We do not use your information for targeted advertising or profiling with legal effects, and we do not sell it.

5. Children

Forage is for adults. We do not allow users under 18 and do not knowingly collect information from children. Parents may enter limited information about their children (nickname, age, allergies, dislikes, sport, lunch style, meals they eat, new foods tried) so meals can be planned for the whole family. This child-related information: is entered and controlled by you (the parent/guardian); is never sold, and never shared beyond the processors in Section 7 (the AI-planning digest in Section 6 includes it, so the planner can feed your whole family safely); is never given a test-derived food list or weight tracking (the app enforces this, with a database-level check to follow at server launch); and is deleted with your account. If you believe a child under 18 has created an account, contact legal@tidbix.com and we will delete it.

6. AI processing

Meal plans may be generated by a large language model operated by Anthropic as our processor. What Anthropic receives is a limited, filtered text digest: each member's name as you entered it (a nickname works — we suggest one), age, adult/child designation, allergies, dislikes, dietary flags, goals, activity/sport, children's new-food pace and lunch style, the subset of adult food-list entries relevant to our recipe library (only while your health-data toggle is on), meal-participation patterns, and a rolling count of recently used ingredients so weeks don't repeat. It never receives raw test reports, images, weigh-ins, or your check-ins. Anthropic retains API inputs and outputs for up to 30 days (longer only for content flagged by its trust-and-safety systems), and under its commercial terms your data is not used to train Anthropic's models. Every AI suggestion is re-checked by our own software against your allergy, avoid, and dislike settings before you see it — and you should always verify ingredients yourself (see Terms §10).

7. Who we share with (all of it)

We share personal data only with processors that run the Service, under contracts limiting them to our instructions:

That is the complete list. We do not share with data brokers, advertisers, or "partners" for their own use. We may disclose data if required by law or legal process (we will notify you unless prohibited), or in a merger/acquisition (your data remains subject to this policy or you will be notified and offered deletion).

8. Your rights and controls

You can, at any time:

Requests can also be made at legal@tidbix.com. We respond within 45 days. We do not discriminate against you for exercising rights. Because we do not sell data or run targeted advertising, there is nothing to opt out of in those categories — if that ever changed, we would update this policy first, provide the opt-out, and (for sensitive data) ask for opt-in consent beforehand.

9. Cookies and local storage

Forage stores your household state in a single record in your browser's local storage (`forage-state-v1`) so the app works quickly and offline; nothing is stored until you accept the Terms during onboarding. Our service worker also keeps an offline cache of app pages in your browser. Both are strictly necessary for the Service, stay on your device, and are removed together by the app's "Delete everything" function (or via your browser settings). We set no third-party cookies and use no cross-site tracking.

10. Retention and deletion

11. Security

Household data is protected by, among other measures: on-device storage by default (your data is not kept on our servers today), encryption in transit, server-side-only handling of AI processing (your data is never exposed to other users or client-side keys), and least-privilege access. When server accounts launch, per-household row-level access controls enforced in the database itself will protect any data stored there. No system is perfectly secure; if a breach affects your data we will notify you as required by law.

12. Where data lives

Data is stored and processed in the United States. The Service is offered only to US residents; if we expand internationally, this policy will be updated first with the required transfer mechanisms and rights.

13. Changes

We will post changes here with a new effective date and version. For material changes we will notify you in-app (and by email, once accounts exist) at least 30 days in advance. The current version is always available in the app under About → Legal & your data.

14. Contact

Tidbix LLC · Tarrant County, Texas (registered address available on request) · legal@tidbix.com Texas residents: you may also contact the Texas Attorney General regarding privacy concerns.