Your family’s privacy

Version 2026.09 · in effect from 23 September 2026

Who is responsible

Data controller: Raccah Agency
CHE-209.020.027 MWST/TVA
hello@aylablossom.com

Raccah Agency is responsible for personal data processed by Little Plate. Write to us with any privacy question, or to ask what we hold about your family, to correct it, or to have it deleted.

Information the planner uses

Your account email, household name, adult count, children’s display names and ages, food preferences, meal choices, menus and shopping lists let us provide the family planner. Children do not need accounts. We do not request school names, addresses, dates of birth or child photographs — a child’s age is enough to size a portion, so that is all we ask for.

Children

Little Plate accounts are parent and guardian accounts, and the account holder must be at least 18. A child never signs in. A child reaches only a private link that covers one child and one week, expires automatically and can be revoked by the parent. The parent enters the child’s details and authorises their participation. Keep those links private.

Your control

The account area provides family-data export and deliberate account deletion. Deletion cancels billing first, then erases your household records.

Services we use

• Supabase — account authentication and application data
• Vercel — application hosting and delivery
• Stripe — subscription and payment processing
• Resend — transactional email delivery

Sign-in uses a one-time email link; there is no password to store. Payments are handled by Stripe, which processes your card details directly; Little Plate never sees or stores them.

How long we keep things

Your household data is kept while your account is active. When you delete your account, your household records are erased through the deletion workflow described above.

Two honest limits. Stripe keeps its own billing and payment records independently, for its own legal obligations — deleting your Little Plate account does not erase those, and we cannot promise that it does. And erasure from infrastructure backups follows normal backup rotation rather than happening at the same instant; the exact rotation period is being documented and is not yet fixed.

Operational and security logs are kept only as long as needed to run and debug the service.

Cookies

Essential cookies keep you signed in and remember your chosen language for up to one year. We do not use analytics cookies, advertising profiles or tracking across other websites.

We count public page views, planner link clicks and recipe sharing as daily totals by page and broad source (such as Instagram or search). These totals contain no visitor identifiers, IP addresses or complete referral URLs. A temporary browser-session marker prevents counting the same page repeatedly; it does not identify you. Signed-in visits are excluded.

Questions

If anything here is unclear, or you want to know exactly what we hold about your family, write to hello@aylablossom.com and we will answer.