Privacy Policy
Walk-In Menu phone app (iOS and Android). Last updated 23 October 2026.
Who we are
Walk-In Menu is run by Gabriel Wolfe, a sole trader in the United Kingdom ("we"). We are the controller of the personal data described here. Contact: support@walkinmenu.com.
No account
You don't sign up and the app never asks for your name, email address or a password. Your kitchen, meal plan, shopping list, allergies, liked recipes and settings are kept on your phone.
What we collect and why
| Data | Why | Lawful basis | Kept for |
|---|---|---|---|
| An anonymous subscription ID, made on your phone by RevenueCat (it contains no personal details) | To know which plan you've paid for, and to find your subscription again when you tap Restore purchases | Contract | While RevenueCat holds your purchase records (see below) |
| Your subscription and its status (from Apple or Google, via RevenueCat) | To give you the plan you've paid for | Contract | As long as needed for the subscription, and purchase records as tax law requires |
| A scrambled form of that ID with a daily count of AI requests | To apply your plan's daily AI limit and control running costs | Contract; legitimate interests (cost control) | A few days |
| A scrambled form of that ID with what your AI · best requests have cost this month | To apply Pro's monthly AI · best fair-use limit and control running costs | Contract; legitimate interests (cost control) | Until the month ends (deleted within a few days of it ending) |
| Your kitchen list, amounts, dates, choices, allergies and diet, and any diet or mood text, when you make AI recipes, use Ask the chef or make an AI shopping list | To write them. Sent through our server to Anthropic | Contract; for any health or religious information, your explicit consent (given when you allow AI recipes) | On our server only until the answer reaches your phone, at most a day. Anthropic may keep it briefly (see below) |
| A photo of your shopping, receipt or online order, when you use Scan your shopping (Pro) | To list the food in it so it can go into your kitchen. Sent through our server to Anthropic; prices, card details and shop names are ignored | Contract | On our server only until the list reaches your phone, at most a day. Anthropic may keep it briefly (see below) |
| IP address and technical logs | Security, abuse prevention and fixing faults | Legitimate interests | Up to 7 days |
Offline recipes are made on your phone and send nothing. We do not use advertising, analytics or tracking, and we never sell personal data.
Who we share it with
- Anthropic PBC (USA): runs the Claude AI model that writes AI recipes, as our processor under its commercial terms and data processing addendum. Anthropic does not use this data to train its models. It deletes inputs and outputs within 30 days, unless they're flagged for breaking its usage policies, when it may keep them longer to investigate.
- RevenueCat, Inc. (USA): keeps subscription records from Apple and Google, linked to the anonymous ID. See RevenueCat's privacy policy.
- Cloudflare, Inc. (USA): runs our server and these web pages.
- Apple and Google: take payments for subscriptions as independent controllers under their own privacy policies.
Where data goes outside the UK, we rely on the UK Extension to the EU-US Data Privacy Framework where the recipient is certified, or the ICO's International Data Transfer Addendum to the EU standard contractual clauses.
Launch sign-ups on walkinmenu.com
If you add your email to the "Tell me when it's out" list on walkinmenu.com, we keep your email address, the date, and whether you ticked that you could help test the Android app. We use it only to email you when the app launches and, if you ticked the box, to invite you to test it. Lawful basis: your consent. It's stored in a Cloudflare database and never shared or sold. We delete the list within 12 months of launch, or straight away if you email support@walkinmenu.com and ask.
Age
AI recipes are for people aged 18 and over.
Your rights
You can ask to see, correct, export or delete your personal data, object to or restrict how we use it, and withdraw consent at any time (for example by using offline recipes instead of AI). Because there's no account, we can only find your data if you tell us your anonymous subscription ID; see deleting your data. We reply to requests within one month. If you're unhappy with how we handle your data you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.
Security
Data is encrypted in transit (HTTPS) and at rest by our providers. Our Anthropic and RevenueCat secret keys are kept only on our server, never in the app.
Changes
If we change this policy we'll update the date above and, for significant changes, tell you in the app.