JuliaBack to sign up

Privacy Policy

Effective June 20, 2026 · Last updated June 20, 2026

Julia is an AI meal-planning service for families. This policy explains what we collect, why, how we use it, who we share it with, and the choices and rights you have. Julia is operated by Jessica Tiwari, doing business as One Less Thing Labs (“Julia,” “we,” “us”).

Who can use Julia, and who’s in your account

Only adults hold Julia accounts. To create an account you must be at least 18 years old and be a parent, guardian, or caregiver with authority over your household and permission to provide information about the family members you add.

Children exist in Julia only as profiles within a family — information that an adult caregiver chooses to enter about them. This is a deliberate design choice that keeps Julia aligned with the U.S. Children’s Online Privacy Protection Act (COPPA): we do not knowingly collect personal information online directly from children under 13. When you add a child’s details, you are providing that information as the responsible adult.

Julia is a U.S.-based service intended for users in the United States.

What we collect

Account information (about you)

  • Your email address, used to sign in and to contact you about your account.
  • A password, which is held and verified by our authentication provider (Supabase) — we never see or store your password ourselves.

Household information

  • Your family or household name.
  • Your city and state, or precise location if selected — a latitude and longitude, a location label, and your timezone — used to localize meal suggestions and weather context.
  • Your meal history, plans, and ratings, and the chat conversationsyou have with Julia’s planning and cooking assistants.

Information about family members, including children

For each family member you add, you may provide some or all of the following:

  • Name.
  • Birth year (used to understand approximate age).
  • Food preferences and free-text notes.
  • Dietary restrictions, including their severity — up to and including allergies and medically required diets.

As you use Julia, the AI assistants may also record inferred notes — observations derived from your conversations and choices, when those observations would make future suggestions more relevant.

Sensitive information we handle

Some of what you enter is sensitive, and we treat it that way. Under California law this may include health information (allergies and medically required diets) and information that can reveal religious or philosophical beliefs (for example, halal, kosher, or vegetarian restrictions you record as dietary needs).

We collect this information to plan meals that are safe and appropriate for your family. We use it only for that purpose and the closely related functions described below.

How we use your information

  • To generate and refine meal recommendations and cooking guidance.
  • To enforce dietary safety — every meal Julia saves is checked, in code, against your stored restrictions before it is recorded.
  • To remember context across sessions so you don’t repeat yourself.
  • To operate, secure, debug, and improve the service.
  • To respond to your requests and communicate about your account.
  • To comply with legal obligations.

We do not sell your personal information, and we do notshare it for cross-context behavioral advertising. We do not use your family’s data to train AI models, and neither does our AI provider (see below).

The AI behind Julia

Julia’s suggestions are generated by large language models provided by Anthropicthrough its API. To produce a recommendation, the relevant context you’ve entered (such as household preferences and dietary restrictions) is sent to Anthropic’s API as part of the request.

Under our agreement with Anthropic, your data sent to the API is not used to train Anthropic’s models, and Anthropic deletes API inputs and outputs within approximately 30 days, except where it must retain content longer to comply with law or enforce its policies.

Before any free text (names, notes, preferences, meal details) is included in an AI request, it is sanitized to protect the integrity of the system.

Who we share data with

We don’t sell your data. We share it only with the service providers (“subprocessors”) that make Julia work, each under a data-processing agreement that limits them to processing data on our instructions:

  • Supabase — our database and authentication provider; stores essentially all of your account and household data.
  • Vercel — our application hosting and delivery provider.
  • Anthropic — our AI provider, as described above.

To localize suggestions, Julia also sends your coordinates only — with no name or other identifier — to two services:

  • Open-Meteo, to retrieve local weather.
  • OpenStreetMap / Nominatim, to turn coordinates into a place name (reverse geocoding).

If you create access tokens for connected apps (see below), Julia shares the specific, limited data you authorize with those apps. We may also disclose information if required by law or to protect rights, safety, and the integrity of the service.

Connected apps and share tokens

Julia lets you create scoped access tokens so an external tool (for example, a shopping app or a kitchen display) can read a narrow slice of your meal data — either shopping ingredients or your menu. These tokens expose only the specific fields needed for that purpose; private context such as your notes, ratings, recommendation reasons, and single-meal considerations is never included. You can view and revoke tokens at any time in Settings.

How long we keep data

We keep your account and household data for as long as your account is active. If you don’t need a record anymore, you can delete your family or download your data at any time (see your rights, below).

  • Conversations and meal history are retained for the life of your account so Julia can stay useful over time. You can delete them by deleting your family.
  • We keep an internal, append-only audit logof the actions Julia’s assistants take, for safety and investigation. It is deleted when you erase your family.

Your choices and rights

You can exercise the following directly from within Julia, without contacting us and without re-entering your password:

  • Access & portability. Use Download your data to export your family as a JSON file — caregivers (with emails), members and their dietary restrictions, meals, conversations, and connected-app metadata. The export excludes internal audit logs and never includes token secrets.
  • Deletion. Use Delete familyto erase all of your household’s data and every caregiver account tied to it.

Please understand a few things about deletion:

Deletion is scoped to a whole family. Any caregiver on a family can trigger this, which deletes the entire family for all caregivers on it.

When you delete a family, we remove it from our live systems promptly. Encrypted backups held by our database provider may retain copies until they age out on their normal cycle; we do not use backups to restore deleted families, and backed-up copies are overwritten as backups rotate.

Data already sent to Anthropic’s API is deleted by Anthropic on its own ~30-day cycle described above.

If you are a California resident, you have rights under the California Consumer Privacy Act (as amended by the CPRA) to know, access, delete, and correct your personal information, and to limit the use of sensitive personal information. We honor these rights for all users through the in-app tools above, and you may also contact us. We will not discriminate against you for exercising any right.

To make a request we can’t fully handle in-app — including a correction request or a question about your data — contact us at the address below. We may need to verify that the request relates to your account before acting on it.

Security

We design Julia to protect household data by default:

  • Row-level security on every database table, denying access by default and isolating each family’s data from every other family.
  • Connected-app tokens are stored only as hashes, never in plain text, and grant access to a projected subset of columns.
  • All user-entered text is sanitized before it reaches the AI, and tool inputs are validated.
  • A deterministic dietary-restriction safety check runs on every meal that is saved.
  • An append-only audit log and per-family usage limits.

No method of storage or transmission is perfectly secure, but we work to protect your information and to limit access to it.

Children’s privacy (COPPA)

Julia is not directed to children and children cannot create or use accounts. Information about a child is provided by an adult caregiver, who is responsible for that information and for the family members’ participation. If you believe a child has somehow provided us information directly, contact us and we will delete it. An adult can remove all of a child’s information at any time by deleting the family.

Changes to this policy

We may update this policy as Julia evolves. When we make material changes, we’ll update the “Last updated” date above and, where appropriate, notify you. Your continued use of Julia after an update means you accept the revised policy.

Contact us

Julia is operated by Jessica Tiwari, doing business as One Less Thing Labs. For privacy questions or requests, contact us at support@hellojulia.app.