Privacy Policy

The short version

Fullwell stores account and household information to provide a private, collaborative food journal. Household journal content stays private unless a member deliberately publishes a collection snapshot.

What Fullwell stores

We store your display name, sign-in identifiers, household memberships, connected agent permissions, and operational security records. Household journals may contain food names, recipe links, selected preparation notes, meal proposals, proposer and withdrawal history, confirmed time zone, compatibility caveats, and the household's explicit allergy and food-sensitivity answer. Do not include names, diagnoses, severity, or medical narratives in meal-planning constraints.

We do not ask agents or browsers to store your Fullwell password because Fullwell does not use service-specific passwords.

Meal planning and recipe research

Connected household members can see the shared meal-planning constraint profile, weekly reviews, proposals, attribution, caveats, and withdrawals. Meal-planning data is excluded from public collection snapshots. Fullwell does not promise that a recipe is allergy-safe.

Codex or Claude recommends meals under your direction. Internet recipe research happens only after you approve it in the agent host, and the agent asks separately before sending allergy or sensitivity terms to a search provider for that search.

Private recipe boards and weekly tasks

Codex or Claude may create a bounded private recipe board under the Codex home on your computer. Recipe images load directly from their named source hosts, which receive ordinary network metadata and may receive existing site state. Later board creation removes expired or excess generated boards; uninstalling does not guarantee immediate deletion.

Any optional weekly meal-planning task belongs to Codex or Claude, not Fullwell. Fullwell stores no schedule, task receipt, calendar event, or task prompt. The task remains in its host until you pause or remove it there.

WhatsApp restocking

If you link WhatsApp, Meta carries your request and Fullwell's reply. Fullwell briefly stores encrypted message text and bounded delivery state so your Mac can receive the task. Product reasoning and approved-retailer cart control happen locally through Codex or Claude; the server does not receive the selected product, store, cart quantity, or browser session.

You can revoke the connection from Account. Link challenges expire after ten minutes, encrypted transport records expire within seven days, and disconnecting the runner removes its local snapshot and action receipts.

Public collection links

A collection link shows only the snapshot fields chosen by its publisher. It does not reveal household membership, order identifiers, private evidence, purchase dates, private notes, or the rest of a household. Anyone with an active link can view that snapshot until it expires or is revoked, so share links thoughtfully.

Service providers and location

Fullwell uses DigitalOcean for application hosting and durable journal storage, Neon for operational PostgreSQL data, Backblaze for encrypted off-site backups, Resend for sign-in and notices, Apple when you choose Continue with Apple, and Meta when you enable WhatsApp restocking. Codex or Claude, recipe search and image hosts you approve, and an approved retailer process only the work and permissions you choose in those services.

Control and retention

You may export household data you can access, revoke agent access, choose whether a search may disclose constraint terms, remove local recipe boards, pause or remove host-native weekly tasks, leave households, and request account deletion. Security and household audit records may retain a pseudonymous former-member label so remaining members can understand changes. Backup retention and deletion timing follow the published production schedule.

Contact

Privacy questions or requests can be sent to privacy@fullwell.ai. Product support is available at support@fullwell.ai.