Privacy Policy — Juusto.app

Last updated: September 2026

Juusto.app ("Juusto", "we", "the app") is a hobby project built and run by Juho Karhu. This policy explains what personal data we collect, why, and what rights you have over it.

Who is responsible for your data

Juho Karhu is the person responsible for your data (the "data controller"). If you have questions or requests about your data, contact:

karjuho@gmail.com

What data we collect

• Account info: your name and email address
• Content you create: recipes, meal plans, and grocery lists you add to the app
• Grocery list history: when an item is ticked off your grocery list, we record when. Items that are deleted or cleared from the list (one at a time, with "Remove completed" or with "Empty list") aren't erased straight away: they're marked as deleted and kept, together with when they were added and ticked. This history belongs to your household's grocery list, not to one person
• Household data: if you're part of a shared household, the other members of that household can see content linked to it, including its grocery list history
• Demo data: if you try Juusto without an account, we create a temporary guest account with no name or email. It holds the example recipes and anything you add while trying the app
• Usage statistics: anonymous page views, such as which pages are visited and roughly from where (see "Cookies and browser storage")

We don't collect payment information, precise location data, or anything beyond what's needed to run the app.

Why we collect it

We use your data only to:

• Let you log in and use your account
• Save and display your recipes, meal plans, and grocery lists
• Let household members share meal planning with each other
• Let you undo deleting items from your grocery list
• Show you and your household your own shopping history, for example how often you've bought something over a year
• Understand how Juusto is used, looking at grocery list history across households, so we can improve the app
• Send you occasional service emails (like this one) about important changes to the app

Legal basis: we process this data because it's necessary to provide the service you've signed up for (contract), and in some cases based on your consent (e.g. continuing to use the app after this policy). Keeping grocery list history and using it to understand and improve Juusto is based on our legitimate interest in making the app better. You can object to it at any time (see below).

AI processing

Some features of Juusto may use AI agents or AI-powered tools (for example, to sort your grocery list by store section, or to help generate, organize, or process recipe and meal content). Your content may be sent to third-party AI providers as part of delivering these features. We don't use your data to train AI models ourselves, and we choose providers that don't use submitted data for training either, where possible.

Who else has access to your data

We use third-party services to run the app, including:

• Hosting and database providers (e.g. Supabase) to store your account and content
• Lovable, our app development platform, which may have technical access as part of building and hosting the app
• AI service providers, for features described above
• Cloudflare, for the anonymous usage statistics described below

We don't sell your data or share it for advertising.

Cookies and browser storage

Juusto doesn't use advertising or tracking cookies, and doesn't ask for cookie consent because it doesn't need to: everything it stores in your browser is needed for the app to work. That includes:

• Staying signed in: your login session, so you don't have to sign in every time
• Working offline: a copy of your meal plan, household members, and grocery list changes made without a connection, so the app keeps working and syncs when you're back online
• Sign-up in progress: a pending household invite or demo plan, kept while you create your account so it can be added to it
• Small preferences: such as which panel you had open and the language you picked
• The installed app: if you add Juusto to your home screen, the app's files are stored so it opens quickly and offline

This data stays in your browser. Signing out removes your session and the offline copies, and you can clear the rest at any time in your browser settings.

Usage statistics: we use Cloudflare Web Analytics to count page views. It doesn't use cookies, doesn't store anything in your browser, and doesn't follow you across other websites. We use it based on our legitimate interest in understanding how Juusto is used.

How long we keep it

We keep your data as long as your account is active. If you stop using Juusto, we may delete inactive accounts and their content after a reasonable period. You can also request deletion at any time (see below).

Guest accounts from trying the demo are erased automatically, together with everything in them, 7 days after they're created. If you create an account while trying the demo, the demo plan moves to your new account and the guest account is erased straight away.

Recipes you delete are kept for 30 days, so a deletion can be undone, and are then erased automatically. Meals you had already planned with a deleted recipe keep its name and ingredients.

Grocery list history, including items that were deleted from the list, is kept for as long as your household uses Juusto, so it can go back more than a year. If you'd like it erased while keeping your account, email us and we'll delete it. When a household is deleted, its grocery list history is deleted with it. Because the history is shared by everyone in a household, if other members are still using it, we'll talk with you about what to remove.

Your rights

Under GDPR, you have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your account and data ("right to be forgotten")
• Export your data in a portable format
• Object to us keeping your grocery list history or using it to understand how Juusto is used
• Withdraw consent at any time, where consent is the basis for processing
• Complain to your local data protection authority if you believe your data has been mishandled

To exercise any of these rights, email karjuho@gmail.com.

Changes to this policy

As Juusto is an evolving hobby project, this policy may be updated from time to time. We'll notify users of significant changes by email.

Contact

Questions about this policy or your data? Reach out to Juho Karhu at karjuho@gmail.com.