Privacy policy

Last updated: 5 November 2026 · Version 1

This policy explains what Anaya keeps about you and your family, who else handles it, and what you can ask us to do with it. We wrote it to be read, not skimmed past. If anything is unclear, write to us at privacy@heyanaya.com.

The short version

• Anaya keeps what it needs to plan your family's food: names, ages, allergies, diets, food dislikes, school food rules and your helper's working days.
• Your data is stored in Frankfurt, Germany (EU).
• To plan meals, Anaya sends Anthropic, our technology provider, a label for each person, like "Child A, 72 months", never names or birthdays. Notes you type and recipes you add go to Anthropic as you wrote them.
• We don't sell your data, and we don't show ads in the app.
• Anaya doesn't vet, rate or monitor your helper.
• You can delete your account in the app at any time.

Who we are

Anaya is run by Anaya LLC, licensed in Sharjah Media City (Shams), United Arab Emirates. We decide how your data is used, so we are responsible for it.

Contact: privacy@heyanaya.com

What we keep, and why

If you are a parent

• Your email address, from Sign in with Apple or Google. If you choose "Hide My Email" with Apple, we only get the relay address Apple gives us. If you sign in with Google, our database provider also keeps your Google profile name and photo link with your sign-in.
• Your name, as you type it when you set up Anaya.
• Your language and your role in the family.
• What you tell Anaya about your family (see below), your notes, your reactions to meals, your favourite dishes, and the plans you approve.

We use this to run your account and plan your family's meals.

About your family, including children

A parent enters this when setting up Anaya. Children don't use Anaya and don't have accounts.

• Names, or whatever name you choose to use.
• Birth month and year. We don't keep the day. Anaya works out each child's age in months from it.
• Allergies. You pick these from Anaya's list. If you type an allergy that isn't on the list, we keep what you typed so we can review it, but Anaya can't check for it until it's added to the list.
• Diets (for example halal, meaning no pork and no alcohol, or vegetarian), food dislikes, and your school's food rules, like no nuts.
• Which days each child needs a lunch or snack box, and which lunchbox you use.

Allergies are health information. When you add a child, we ask for your agreement first, and we record that you agreed and when.

We don't ask for photos of children.

About your helper

• Her name, and if you choose to add them, her country and her working days.
• Her language, which she can change.
• If she eats with the family, her allergies and diets, so her meals are checked too.

If she joins Anaya with her own account:

• Her email address from her sign-in, and the name she types when she joins.
• When she marks a task as done. The family can see this.
• The quick notes she sends after a meal, like "Portion too big". The parents can see these.
• Photos of a packed lunchbox, if she chooses to take them. The family can see these.

Things you add

• Notes you write for your helper. We keep them as Anthropic's Claude rewrote them in English and Tagalog.
• Favourite dishes. You can add them by typing a dish name, taking a photo of a recipe, or pasting a link. We keep the dish name, its ingredients and amounts, the link, and any note, rating or answer you add. We read photos and web pages to find the dishes, but we don't store the photos or the pages.
• Box photos taken in the app.

Technical information

• A notification token for your phone, a record of which notifications were sent and opened, and when you last opened the app.
• Invite codes, and who created and used them.
• Sign-in records (time, IP address and device), kept by our database provider.
• Usage counts, like how many plans were generated for your family.
• Crash and error reports, from the app and from our servers. They carry technical details, an ID for this installation of the app and internal record numbers for your family and plan, but no names or email addresses.

On our website

• Visit statistics from Plausible Analytics. Plausible doesn't use cookies and doesn't collect personal data; it counts visits without identifying you.
• The invite page (heyanaya.com/join/…) has no analytics, because the invite code is in the address. Our web host's server logs still record the address for up to 30 days.
• If you email us or message us on WhatsApp, we keep that conversation so we can help you.

What Anthropic's Claude sees

Anaya uses Anthropic's Claude models to draft meal plans, to understand and translate the notes you write, and to read the favourite dishes you add.

• To plan meals, Anthropic gets a label for each person, like "Child A, 72 months", their allergies, diets, dislikes and school food rules, your cuisine choices, which meals and days to plan, recent dishes, and which dishes your family liked or didn't. Your own favourite dishes go by their name with family names removed. Anthropic never gets names or birthdays for planning.
• Notes you type and recipes you add (photos, web pages, dish names) go to Anthropic as you wrote them, including any names you type. Anthropic translates your notes into your helper's language.

Anthropic deletes what we send within 30 days, unless it is flagged for a breach of its usage policy, when it can keep it for up to 2 years (Anthropic's retention policy). Anthropic doesn't use what we send to train its models.

The checks for allergies, diets and school food rules are fixed rules in Anaya; Claude doesn't decide what is allowed. They check the ingredients of the dishes and boxes Anaya plans from its own recipes. Dishes you add yourself are checked only for the ingredients Anaya recognises. Notes you write aren't checked. School food rules apply to school boxes.

Who else handles your data

We use these companies to run Anaya. Each one only gets what it needs for its job.

Links you add. When you paste a recipe link, Anaya opens that web page to read it. For a TikTok link, Anaya asks TikTok for that post's caption. The website or TikTok sees a request from our server, not from you, and gets nothing about your family.

Where your data is

Your data is stored in Frankfurt, Germany (EU). Some processing happens outside the UAE and the EU, as listed in the table above: mainly the United States, for Claude, notifications and our review tool. We send data abroad only to provide the service you asked for.

What we don't do

• We don't sell your data.
• We don't show ads in the app.
• We don't ask for your location, your contacts or photos of your children.
• Anaya doesn't vet, rate or monitor your helper. Parents react to dishes, not to her.

Who in your family can see what

• Parents in the family can see the family's details, plans, notes, grocery lists, when tasks were marked done, your helper's quick notes and box photos.
• Your helper, once she joins, can see the family members' names, ages, allergies and diets, the week's meals, the grocery list, the notes and photos of packed boxes. She gets her tasks once a parent approves the week. Photos of boxes that came back from school are for parents only.
• No other family can see your family's data. This is enforced by the database, not just by the app.

How long we keep it

• Your account and family data: until you delete your account.
• Crash and error reports: 90 days.
• Database backups: up to 7 days after deletion, then they are overwritten.
• Data sent to Anthropic: up to 30 days at Anthropic (see above).
• Emails and WhatsApp messages to us: until you delete your account.

When you delete your account

You can delete your account in the app. Parents: Home → your avatar → Settings → Account → Delete account. Helpers: your profile → Delete account. You can also email privacy@heyanaya.com.

• Your Anaya account and sign-in record are deleted, along with the notes you wrote.
• If you are the last parent in the family, the whole family's data is deleted: the plans, grocery lists, notes, box photos and family details, including children's allergies. Your helper's and any other parent's accounts are deleted too. They aren't told beforehand.
• If another parent stays, the family's data stays for them. Your name, allergies and food preferences stay on the family list, because the family's meals are planned around them. Meals you approved and favourites you added stay, without your name.
• If your helper deletes her account, her name, allergies and diets are removed. Her country, working days and language can remain on the family's saved helper record.
• Box photos: if a helper or another parent deletes their account, the photos they took stay in our private storage until the family's account is deleted.
• Records that no longer identify anyone can stay, like an allergy word we reviewed, or a picture of a dish.

Your rights

You can ask us to:

• show you the data we hold about you, and give you a copy;
• correct it;
• delete it;
• stop or limit how we use it;
• withdraw your agreement to keeping your family's health information. We then can't plan around allergies, so this means deleting the family's data.

You can correct and delete data in the app. For a copy, or anything else, email privacy@heyanaya.com. We'll reply within 30 days.

If you're not happy with our answer, you can complain to the UAE's data protection authority.

Security

Data is encrypted when it travels between your phone and our servers, and when it is stored. Each family's data is walled off by rules in the database, so one family's account can't read another's. Only the people who run Anaya can reach the database directly, through our database provider and our internal review tool, and only to run the service.

If a breach puts your data at risk, we'll tell you and the authorities as the law requires.

Changes to this policy

If we change this policy in a way that matters, we'll tell you in the app before the change takes effect. The date at the top shows the latest version.

Contact

privacy@heyanaya.com Anaya LLC, Sharjah Media City (Shams), United Arab Emirates