Last updated: 2 August 2026
This describes exactly what Make Do collects and where it goes. It is short because we collect very little.
This is the part people usually want to know first.
When you scan, the photo is resized in memory, sent to Anthropic's AI for ingredient identification, and then discarded. It is never written to our database or our disk. We keep no copy and cannot look at your photos — not now, not later.
What we keep is the ingredient names the AI returned, and only for as long as your browser session needs them.
| Data | Why |
|---|---|
| Email address | To identify your account and send verification and reset codes |
| Password | Stored only as a bcrypt hash. We cannot read it or recover it. |
| Saved recipes | So you can read them again |
| Staples you add | So recipes assume you have them |
| Scan count | To enforce plan limits |
| Stripe customer ID and plan status | To know whether you are on Pro |
| Verification and reset codes | Temporary, deleted once used |
| Referral code | Only if you arrived through a creator link, to credit them |
| Token counts per request | To track our own running costs. Counts only — not the content. |
We do not store your card details. We do not build an advertising profile. We do not sell anything to anyone.
| Service | What reaches them |
|---|---|
| Anthropic | The photo you scan and the ingredient list, to generate recipes |
| Stripe | Your email and payment details, if you subscribe. They handle the card; we never see it. |
| Resend | Your email address, to deliver verification and reset codes |
| Render | Hosts the app and the database |
Each is a company with its own privacy policy. We share only what the job requires and nothing beyond it.
Two, both necessary, neither for tracking:
No analytics cookies. No advertising cookies. No third-party trackers.
You can ask us to:
Email hello@makedomeals.com and we will action it within 30 days. Deleting your account removes your email, saved recipes and staples. We keep payment records where tax law requires it.
Account data stays while your account exists. Verification and reset codes expire after 15 minutes. Our host takes daily backups kept for 7 days, so deleted data can persist in a backup for up to a week before ageing out.
Passwords are hashed with bcrypt and never stored in readable form. The site is served over HTTPS. Payment card data never reaches our servers.
No system is perfectly secure. If a breach affects you, we will tell you.
Make Do is not intended for children under 13, and we do not knowingly collect their data.
If this policy changes in a way that affects you, we will email you before it takes effect.