Privacy Policy

1. Who operates List To Ladle

List To Ladle is operated by WODSMITH LLC ("List To Ladle," "we," "us," or "our"). This policy applies to the List To Ladle website, iOS app, and related services.

Operator address: 17810 N Onaway Ave, Nampa, ID 83687

2. Information we collect

• Account and team information: name, email address, password hash, account and team identifiers, team roles, invitations, profile details, and sign-in method.
• Food-planning content: recipes, ingredients, instructions, recipe-book references, meal plans, grocery lists and templates, dates, tags, links, and other notes you choose to save.
• AI assistant content and usage: prompts, assistant messages, attached recipe or meal-plan context, conversation titles, tool activity, token usage, model, completion status, and estimated processing cost.
• Subscription and payment records: Stripe customer and subscription identifiers, plan, subscription status and period, cancellation state, and limited payment-method details such as card brand and last four digits. Stripe receives the full payment and billing details; List To Ladle does not store full card numbers.
• Device, notification, and session information: account and session IDs, IP address, approximate city/country/continent derived by Cloudflare, user agent, authentication type, iOS installation identifier, APNs device token, notification environment and status, and session timestamps.
• Support information: the contents of requests you send us and the contact information needed to respond.

The iOS app also stores an offline copy of your active team workspace on your device using iOS file protection. That local copy is not a separate collection by us, but it may remain on the device after sign-out so unsynced changes are not lost. Removing the app removes its local container.

3. How we use information

• Authenticate accounts, maintain sessions, and protect the service from abuse.
• Sync recipes, meal plans, grocery lists, and other changes across devices.
• Provide team sharing, invitations, roles, and permissions.
• Generate requested AI responses and apply user-approved assistant changes.
• Provide optional reminders through Apple Push Notification service.
• Administer subscriptions, entitlements, billing support, and transaction records.
• Respond to support, privacy, security, and legal requests.
• Operate, troubleshoot, secure, and improve service reliability.

We do not sell personal information, serve third-party advertising, or use information to track you across other companies' apps or websites.

4. Teams and shared content

Content saved to a team is available to team members according to their roles and may be edited or deleted by members with permission. Team owners and administrators control membership and billing. If you leave a team or delete your account, team-owned recipes, lists, plans, and other shared content may remain available to that team because the data belongs to the shared workspace rather than an individual profile.

5. AI, Cloudflare AI Gateway, and OpenAI

When you use the AI assistant, List To Ladle sends your prompt and the relevant team context selected for the request through Cloudflare AI Gateway to OpenAI's GPT model. Cloudflare and OpenAI process that data to route and return a response under the data-handling settings of our configured services. AI Gateway may retain request and response logs according to our gateway settings. Assistant conversations and operational records are also stored by List To Ladle so you can revisit conversations, resume runs, enforce team limits, and audit user-approved changes. Do not submit information you do not want processed by the AI service.

6. Service providers

We use providers to operate specific parts of the service:

• Cloudflare for application hosting, database, key-value storage, security, networking, and AI Gateway routing and logging.
• OpenAI for AI generation.
• Google for OAuth if you choose Google sign-in.
• Stripe for subscription checkout, payment processing, and the billing portal.
• Apple Push Notification service for optional iOS notifications.
• Resend or Brevo, depending on deployment configuration, for transactional email.

These providers process information only for the services they supply, subject to their agreements and applicable law. We may also disclose information when required by law, to protect rights and safety, or as part of a business transfer with appropriate safeguards.

7. Retention and deletion

• Active sign-in sessions expire after 30 days unless ended sooner.
• Account, team, recipe, list, meal-plan, AI conversation, and subscription records are generally kept while needed to provide the service or until they are deleted.
• Disabled push registrations and operational records may be kept to enforce preferences, prevent abuse, resolve disputes, and satisfy legal or accounting duties.
• Provider-managed backups and logs may retain limited copies until they are overwritten under the provider's normal retention cycle.

You can delete individual recipes, plans, grocery items, and AI chats where the product offers that control. You can initiate account and associated personal-data deletion from Settings, then Account on the website, or from More, Account and sessions, then Delete account in the iOS app. Sole-member teams are deleted; shared-team content remains for other members, and a sole active owner must transfer ownership first. Removing the iOS app alone does not delete the server account. Account deletion does not cancel an App Store subscription, which must be managed separately through Apple.

8. Your choices and rights

You may update profile information, manage team access, delete supported content, disable notifications in the app and iOS Settings, cancel a subscription through the Stripe billing portal or Apple subscription settings, or ask us to access, correct, export, restrict, or delete personal information. Available legal rights depend on where you live. We may need to verify your identity before completing a request.

9. Security and international processing

We use administrative, technical, and organizational safeguards designed to protect information, but no system is completely secure. Our providers may process information in countries other than your own, subject to applicable transfer safeguards.

10. Children

List To Ladle is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child has provided personal information. A higher minimum age may apply in some locations.

11. Changes and contact

We may update this policy and will change the date above when we do. Material changes may also be communicated in the service or by email when appropriate.

Privacy contact: support@wodsmith.com

General help is available on the support page.