Privacy Policy

• Account information. When you sign in with Google, we receive your name, email address, and profile image to create and secure your account.
• Google Calendar data. With your explicit consent, we request read-only access to your calendar (the calendar.readonly scope). We read upcoming events only to understand how busy your week is, so Sous can plan quick meals on hectic days and more involved ones when you have time. We do not create, modify, or delete calendar events.
• Phone number and messages. If you opt into SMS, we store your phone number and the content of messages exchanged with Sous, so we can run onboarding, deliver meal plans and grocery lists, and learn your preferences over time.
• Household preferences. Dietary restrictions, cuisines, skill level, budget, pantry staples, and similar details you share so Sous can plan for you.
• Billing information. Subscription and payment processing is handled by Stripe. We store your subscription status and Stripe customer/subscription identifiers — never your full card number, which is held by Stripe.
• Usage and device data. Basic, aggregate analytics (pages visited, general usage) to improve the product. See Cookies & analytics below.

Sous's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs adheres to the Google User Data Policy, including the Limited Use requirements. Specifically: we request only read-only calendar access; we use Google Calendar data solely to provide and improve the meal-planning features you asked for; we do not use this data for advertising; we do not sell it; and we do not allow humans to read it except with your explicit consent, for security purposes, to comply with applicable law, where the data has been aggregated and anonymized, or in the limited course of operating and troubleshooting the service (for example, reviewing an individual failed request to diagnose it), always under confidentiality.

Google user data is never used to create, train, or improve any machine-learning or artificial-intelligence models — neither ours (we train none) nor any third party's. Where calendar-derived context is processed by our AI provider to generate your plans (see AI processing below), that processing is governed by commercial terms that prohibit the provider from training models on the data. You can revoke Sous's access at any time from your Google Account permissions page.

• To provide meal plans, grocery lists, and text-based assistance.
• To personalize plans based on your calendar and preferences.
• To process your subscription and send service messages.
• To secure accounts, prevent abuse, and comply with the law.
• To improve Sous in aggregate — never to sell your data.

Sous uses Anthropic's Claude models, accessed through Anthropic's commercial API, to generate meal plans and conversational replies. Relevant context — such as your household preferences, recent messages, and schedule information derived from your calendar — is sent to Anthropic solely to produce your responses. Anthropic's commercial terms prohibit it from training its models on data submitted through the API, so nothing we send — including any Google Calendar data — is used to create, train, or improve AI models. We share only what is needed to generate your plan, and we train no models of our own.

Message and data rates may apply. Message frequency varies with your plan and activity. You can opt out at any time by replying STOP, and get help by replying HELP. We use Twilio to send and receive messages; message content passes through Twilio to deliver it to you.

We share data only with the service providers who help us run Sous, each only to the extent needed to provide the service. All of them process data in the United States.

• Google — sign-in, and read-only access to the calendars you select.
• Twilio — sends and receives your texts; sees your phone number and the content of those messages.
• Anthropic — generates your plans, grocery lists, and replies. Prompts include your preferences, your plan, and relevant calendar details. Anthropic's commercial terms prohibit training on this data.
• Inngest — schedules Sous's work and makes message delivery reliable. It holds account identifiers in readable form; message content is encrypted with a key only we hold.
• Vercel — hosting and request logs.
• Supabase — our database: everything in your account is stored there.
• Stripe — payments and subscriptions. Card numbers go to Stripe directly; we never see them.
• Langfuse — monitoring and troubleshooting of our AI requests, including the content of those requests and responses.
• Resend — sends sign-in links to your email address.
• Microsoft — only if you connect an Outlook calendar; sees the calendar data you select.

We may disclose information if required by law or to protect the rights and safety of our users. We do not sell your personal information.

We keep your information for as long as your account is active. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it to comply with legal, tax, or accounting obligations.

• Revoke Google Calendar access from your Google Account at any time.
• Opt out of SMS by replying STOP.
• Request access to, correction of, or deletion of your data by contacting us.
• Cancel your subscription from the billing portal.

We use industry-standard measures to protect your data in transit and at rest. No system is perfectly secure, but we work to safeguard your information and limit access to those who need it to operate the service.

Sous is not directed to children under 13, and we do not knowingly collect their personal information.

We may update this policy from time to time. When we do, we'll revise the “Last updated” date above and, for material changes, notify you.

Questions about your privacy? Email us at privacy@textsous.com.