Privacy policy

Papaya plans your household’s week of meals and, when you ask it to, handles the ordering and booking. To do that well we need to know some things about your household. This policy explains what we collect, how we use it, who helps us, and what you can ask of us.

Papaya is operated by PAPAYA VENTURES INC., a Delaware corporation (“Papaya”, “we”, “us”). This policy covers the Papaya app, the website at papaya.club, and the services we provide through them. If you have a question about it, write to hello@papaya.club.

The short version

• We use what you tell us about your household to plan meals and act on your behalf. That is the whole purpose.
• We never sell your personal information, and we don’t use it for advertising.
• Nothing irreversible happens without you. We ask before any order is placed, any booking is confirmed, or any payment is made.
• We use a small number of service providers, including AI providers, to run Papaya. They process your information for us, under contract, and not for their own purposes.
• You can ask us to see, correct, export, or delete your information at any time.

What we collect

What you give us

• Your account. Your mobile phone number, which is how you sign in today. If we offer Sign in with Google and you choose to use it, we receive the name, email address, and profile picture on your Google account, and nothing else from it.
• Your household. The people in it and their names, birthdates, and roles (including children, if you add them). Dietary needs, allergies, preferences, favorites and dislikes. Your delivery address, the contact details used for bookings, your weekly budget, the kitchen equipment you have, and your usual weekly routine.
• Your conversations with Papaya. Messages you send in the app and the replies you receive.
• Your plans and orders. The meals we plan, the orders and reservations made for you, their amounts, the merchant or restaurant, and any ratings or notes you add.
• Waitlist answers. If you join the waitlist on our website: your email address and, if you choose to answer, your household size, city, the food apps you use, dietary needs, and household income bracket. We also record how you found us, from the campaign tags in the link you followed.

What you connect

• Calendars. If you connect Apple Calendar or Google Calendar, see Calendars below for exactly what we read and keep.
• Ordering and booking platforms. If you connect your own account on a delivery or reservation platform, your signed-in session for that platform is held in a secure browser profile with our browser infrastructure provider, so Papaya can act there for you. Where a platform uses another account to sign in (for example, “Continue with Google”), that profile holds the signed-in session for that account too. Where a platform needs a password, it is stored with that provider, not in our own systems. We don’t record video of these browser sessions.
• Payments. Papaya pays through a card issued by our payment partner. The partner verifies your identity (which can include a photo of your ID and a face scan) and holds your card details. We keep only the card’s brand, last four digits and expiry date, so we can show you which card is in use. Our database never stores the full card number or security code. At checkout, our systems fetch the card from the partner and enter it directly into the merchant’s payment form; the AI model does not type it. Card details are never given to the AI models, as text or image: once the card is entered, our systems hide it from everything the model reads, and screenshots are switched off while the filled payment form is on screen. Our browser infrastructure provider, which runs the checkout page, handles them in order to submit the payment. Filling in the form charges nothing; the order is only placed after you confirm it.

What we collect automatically

• Website analytics. We use Umami, a privacy-focused analytics tool that does not use cookies, to count visits and see which pages are read.
• Security and diagnostics. Our servers process your IP address to prevent abuse (for example, to limit repeated sign-up attempts), and we record technical errors so we can fix them. We avoid putting personal information into error reports.

We don’t use advertising cookies or trackers, and we don’t buy information about you from data brokers. Because we don’t track you across other websites, there is nothing for a browser’s “Do Not Track” signal to switch off, so we don’t respond to it differently.

How we use it

• To provide Papaya: composing your household’s weekly plan, answering your messages, and, with your confirmation, placing orders and making reservations for you.
• To act on your behalf, with your confirmation. When Papaya orders or books for you, it operates on the merchant’s or restaurant’s website the way you would. Before anything irreversible (placing an order, confirming a booking, authorizing a payment, creating an account, or sending a message in your name), Papaya stops and asks you. It does not proceed without your explicit go-ahead.
• To personalize your plans, by learning from what your household enjoys, skips, and rates.
• To communicate with you about your account, your plans, and the service, and, if you joined the waitlist, about your invitation.
• To keep Papaya safe and working: preventing fraud and abuse, enforcing our terms, and fixing problems.
• To meet legal obligations.

Where data protection laws require a legal basis, we rely on performing our contract with you, your consent (for example, connecting a calendar, which you can withdraw at any time), our legitimate interests in running a safe and reliable service, and compliance with law.

AI and your information

Papaya uses AI models to plan meals, understand your messages, and operate websites on your behalf. To do this, the relevant parts of your household’s information are sent to our AI providers when a task needs them: Anthropic, and for search over your household’s history, Voyage AI (or OpenAI, which we may use in its place). When Papaya is ordering or booking, the AI model also sees the pages it is working on.

• We do not use your personal information to train AI models that serve anyone other than you.
• Our AI providers process your information to return a result to us, under terms that do not allow them to use it for their own purposes.

Calendars

Connecting a calendar lets Papaya plan around your real week. For example, it can plan something quick on an evening you’re out late. Connecting is optional, and you choose which calendars Papaya may read. Every calendar starts switched off.

• What we read: the time, title and location of events on the calendars you switch on, and the names of your calendars, so you can choose among them.
• How we use it: each time your calendar syncs, the upcoming events are sent to our AI provider, together with the names of your household members, so it can tell us which evenings affect a meal (for example, “out for dinner Thursday”). The raw event details are then discarded. We don’t store them, log them, or show them to anyone.
• What we keep: short notes per evening, refreshed on each sync. A note says whether the evening affects a meal, which household members it involves, roughly when you’ll be home, and, where it helps plan a meal out, a short place hint (such as a neighborhood or restaurant name). We also keep any answers you give Papaya about those evenings, the names of the calendars you connect, and, for Apple Calendar, the name of the device that syncs it and an identifier specific to Papaya on that device.
• Sensitive events: we instruct the model not to describe medical, legal, therapy, or similar appointments in its notes.
• Disconnecting: you can disconnect a calendar at any time, and Papaya stops reading it. When you disconnect your last connected calendar, we delete the evening notes as well. While another calendar stays connected, the notes remain, because they describe your household’s week rather than any one calendar.

Google user data

If you connect a Google account, Papaya requests read-only access to your calendar events and uses that access only as described above. Specifically:

• What we store: the access credential Google issues to Papaya, which we keep encrypted and use only to read your calendars; the Google account’s email address, so you can see which account is connected; and the names of your calendars. We delete the credential when you disconnect the account or when you delete your Papaya account. Event details are handled as described above and are not stored.
• We use Google user data only to provide and improve the calendar-aware planning you see in the app.
• We share it only with the service providers who help deliver that feature (our AI provider and our hosting providers), only to deliver it, and never with advertisers, data brokers, or information resellers.
• No person at Papaya reads your Google data unless you ask us to (for example, to help with a support request), it is needed for security, or the law requires it.
• We do not use Google user data to develop, improve, or train generalized AI or machine-learning models.

Papaya’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove Papaya’s access at any time from your Google Account permissions page, or by disconnecting the calendar in the app.

Who we share it with

We never sell your personal information, and we don’t share it for advertising.

We share information only in these situations:

• Merchants and restaurants you order from or book with. When you confirm an order or reservation, they receive what they need to fulfil it, such as your name, contact details, delivery address, and the order itself. Their own privacy policies then apply to what they hold.
• Our payment partner, which verifies your identity, issues and manages your card, and processes payments.
• Service providers who help us run Papaya, under contracts that limit their use of your information to providing services to us:

What they do	Provider
Database, sign-in, and real-time messaging	Supabase
Sign-in text messages	Twilio
Application hosting	Railway, Vercel
Household knowledge store	FalkorDB
AI models	Anthropic, Voyage AI, OpenAI
Background task processing	Inngest
Browser sessions for ordering and booking	Anchor Browser
Card issuing and payments	AgentCard
Email delivery	Resend
Website analytics	Umami
Error monitoring	Sentry

• For legal reasons, when we believe in good faith that the law requires it, or to protect the rights, safety, or property of our users, Papaya, or others.
• In a business transfer, such as a merger or acquisition, where your information would remain subject to this policy. We’ll tell you before it becomes subject to a different one.

How long we keep it

• Your account and household information: for as long as your account is open. When you ask us to delete your account, we delete it within 30 days, except where we need to keep something to meet a legal obligation (such as payment records).
• Calendar event details: not kept. Only the per-evening notes described in Calendars, refreshed on each sync and deleted when you disconnect your last calendar.
• Waitlist information: until you ask us to remove it, or until it is no longer needed to invite you.
• Diagnostic logs: for a limited period, then deleted.

Copies held in backups are removed as those backups expire on their normal cycle. Until then they are kept isolated and are not used.

Your choices and rights

Wherever you live, you can ask us to:

• show you the personal information we hold about you, and give you a copy you can take elsewhere
• correct anything that’s wrong
• delete your information and close your account
• stop a particular use, or withdraw a consent you gave (such as calendar access)

To make a request, email hello@papaya.club. We’ll confirm it’s you using the phone number or email address on your account, and we’ll respond within 30 days. You can also ask someone to make a request for you; we’ll ask them for proof that you authorized it. Depending on where you live (for example, the European Union, the United Kingdom, Israel, or California), you may have further rights under local law, including the right to complain to your data protection authority. We won’t treat you differently for exercising any of them.

Children

Papaya accounts are for adults aged 18 or over. Parents and guardians may add their children to the household profile so that meals suit everyone. When they do, that information is provided by and managed by the adult account holder. We don’t knowingly collect information directly from children. If you believe a child has given us information directly, contact us and we’ll delete it.

Security

We protect your information with encryption in transit, encryption of sensitive credentials at rest, and access limited to the people and systems that need it. Full payment card details are held by our payment partner and are never saved in Papaya’s database; at checkout they are entered by our own systems rather than typed by an AI model and are never given to the AI models, as text or image. No service can promise perfect security, but we take it seriously and will tell you promptly if a breach affects you.

Where your information is processed

Papaya is a US company, and our service providers process information in the United States and other countries. When information moves across borders, we rely on appropriate safeguards required by applicable law, such as standard contractual clauses.

Changes to this policy

When we change this policy, we’ll update the date at the top. If a change is significant, we’ll tell you in the app or by email before it takes effect.

Contact

PAPAYA VENTURES INC. · hello@papaya.club