Dahftar — Privacy Policy

Last updated 14 October 2026

Dahftar is a shopping list and meal planner for one household. It is built to work without an account at all, and it collects as little as it can get away with. This page says exactly what that is.

Using the app without an account

You do not need an account, and if you do not create one nothing leaves your phone. The shopping list, recipes, meal plan, pantry, purchase history and settings are stored in a database on the device itself. There is no sign-up wall and no reduced mode: every feature except sharing works this way.

If you choose to share a list

Sharing a list with your household is the only reason to create an account. To do that we collect:

• Your Apple or Google sign-in. You sign in with Apple or Google. They tell us an account identifier, and we keep only a one-way hash of it — enough to recognise you next time, not enough to work out who you are. We do not keep your email address or your name from them.
• A display name you choose, so other members can see who added what.
• The phone number you send an invitation to, if you invite someone. The invitation itself goes from your own phone's messaging app; the number is kept with the invitation so you can see who it is waiting for.

If you sign in with Apple, Apple also gives us a token we keep for one purpose: to tell Apple to disconnect Dahftar from your Apple ID when you delete your account.

Once you are signed in, the content your household creates — list items, recipes, the meal plan, pantry contents and the record of what was bought — is stored on our server so the people in your household see the same list.

What we do not collect

• No analytics. No usage tracking, no session recording, no crash-reporting SDK.
• No advertising of any kind, and no advertising identifiers.
• No third-party trackers. The app contains no ad or analytics SDKs. The only third-party code is Google's sign-in library, which runs only when you choose to sign in with Google.
• No location, contacts, camera, microphone or photos. The app asks for no device permissions at all.
• No payment details. Subscriptions are paid to Apple or Google; we never see a card number or billing address.

If you subscribe

Apple or Google take the payment. On the phone, the app asks the store whether this store account has a Dahftar subscription — that answer stays on the phone. Only if you are signed in to share a list does the app send the store's record of the purchase to our server, which checks it with Apple or Google and keeps which plan it is, when it renews or ends, and the store's reference for the purchase with your household, so everyone in it is covered. That record is deleted with the household, or when the person who bought the subscription leaves it or deletes their account.

Importing a recipe from a link

When you paste a recipe address, that address is sent to our server, which fetches the page and returns the ingredients. We do this on the server rather than on your phone because a phone cannot reliably read an arbitrary website. The address is used for that request and is stored with the recipe you save so you can find it again. Entering a recipe by hand sends nothing.

Who else is involved

• Cloudflare hosts the service and stores household data.
• Apple and Google verify who you are when you sign in with them, distribute the app, and sell and bill the subscription. What they collect when you sign in or download is governed by their own policies, not by us.

There is nobody else. We do not sell or rent personal information, and we have never done so.

How long it is kept

Household data is kept while the household exists. We take a nightly backup so a household can recover from a mistake or a failure; backups are automatically deleted after 90 days. A sign-in stays valid for 30 days before you are asked to sign in again.

Deleting your account

You can delete your account inside the app, without asking us: Settings → Delete my account. What happens depends on whether anyone else is left:

• If you are the only member, the whole household is destroyed — every list, recipe, plan, pantry entry and purchase record, and the backups too.
• If other people remain, your sign-in and name are destroyed and your account is closed. The recipes and history you contributed stay with the household, because they belong to the people still using them, and are shown as added by a former member.

Either way your sign-in is removed from our systems, Apple is told to disconnect Dahftar from your Apple ID if you used it, and the account can no longer be signed in to. You can also export everything the household has as a single file first, from the same screen.

Children

Dahftar is not directed at children and we do not knowingly collect anything from a child under 13.

Security

Traffic between the app and our servers is encrypted in transit. Each household's data is stored in its own isolated database, and which household you can reach is decided by the server from your verified sign-in rather than by anything the app sends. Sign-in is through Apple or Google — there is no password here to be stolen or reused.

Changes

If this policy changes materially we will update this page and the date at the top.

Contact

Questions, or a request about your data: privacy@certopartners.com.

Dahftar is made by Certo Partners LLC, Reno, Nevada, USA.