Privacy Policy

Last updated: July 22, 2026

This privacy policy for bolo — a weekly meal-planning and social cooking app — covers what we collect, why, who we share it with, and the choices you have. bolo is operated from Australia and can be used worldwide, so this policy is written to reflect the Australian Privacy Principles as well as the rights of users in the EU/UK and other regions.

What we collect

• •Account details you give us directly: your name, email address, and password (stored hashed, never in plain text), plus optional profile details such as a handle and avatar.
• •Content you create: saved recipes, meal plans, shopping lists, photos you upload, notes on what you cooked, and any dietary/household preferences you set.
• •Social activity: the friends, clubs, and households you join or create, invites you send, and what you choose to share with others.
• •Usage & device data: pages and features you use, interactions, and basic device/browser information, collected through our analytics provider to help us understand and improve the product.
• •Technical logs: IP address and request logs, used for running the service, rate limiting, and abuse prevention, and error diagnostics when something crashes.

How we use it

To run the core product: store your recipes and plans, generate shopping lists, power the social features you opt into, send you transactional email (password resets, email verification, invite and billing notices), and score meals for nutrition signals. We also use usage data and error diagnostics to keep bolo working and to improve it. We do not sell your data or use it for third-party advertising.

Content you share with others

bolo has social features. When you post to a club, invite someone to a shared household, add a friend, or create a share link, the content and profile details involved become visible to those people — and, in the case of a public profile or a public share link, to anyone who has the link. This is by design. Only share what you're comfortable with others seeing, and use the sharing controls in the app to decide what stays private.

AI processing

Recipe text, ingredient lists, and photos you submit may be sent to Anthropic (Claude) for parsing, nutrition scoring, and AI-assisted editing. When you import a recipe from a social video (TikTok/Instagram/YouTube), the video, caption, and transcript are processed via Apify and, for image generation, fal.ai or OpenAI. These providers process the data only to return a result to bolo; under our agreements with them they do not use it to train their own models.

Payments

Paid subscriptions are handled by Paddle, which acts as the merchant of record (the seller of record and reseller of bolo). Paddle collects and processes your billing and payment-card details directly, under its own privacy policy — bolo never receives or stores your full card number. We receive limited billing information from Paddle (such as subscription status and country) to manage your account.

Service providers

These providers process data on our behalf as data processors, and don't have independent rights to use it:

• •Vercel — hosting and storage of uploaded images.
• •Neon — our primary database.
• •Upstash — Redis used for rate limiting and short-lived background-job data.
• •Resend — delivery of transactional email.
• •PostHog (EU-hosted) — product analytics. It records usage events, pageviews, and interaction data associated with your account so we can see how features are used. We do not have session replay enabled.
• •Sentry (EU-hosted) — error and crash monitoring. It captures technical error diagnostics; we do not attach your name or email to error reports.
• •Anthropic, Apify, fal.ai, OpenAI, Paddle — as described in the AI processing and Payments sections above.

Where your data is processed

bolo is based in Australia, and your data may be processed and stored overseas by the providers above — primarily in the United States (including Vercel, Neon, Resend, Paddle, and our AI providers) and the European Union (PostHog and Sentry). By using bolo you acknowledge that your information may be transferred to and handled in these locations. We only work with providers that offer appropriate safeguards for the data they handle.

Your rights & choices

You can access and update most of your information directly in the app. Depending on where you live, you may also have rights to access, correct, or erase your personal data, or to object to or restrict certain processing. You can delete your account at any time from Settings, or contact us at mkpropositions@gmail.com to make a request. We'll respond in line with applicable law.

Data retention & deletion

Your data is retained while your account is active. Deleting your account removes your recipes, plans, and personal data from our primary database. Content you shared into a club or via a share link may persist in that shared context; backups are retained for a limited period (typically up to 30 days) before being overwritten.

Children

bolo is not intended for anyone under 16. We don't knowingly collect personal data from children under 16; if you believe a child has provided us data, contact us at mkpropositions@gmail.com and we'll delete it.

Changes to this policy

We may update this policy as the product evolves. If we make a significant change, we'll notify account holders by email or in the app.

Contact

Questions or requests about this policy? Contact us at mkpropositions@gmail.com.