Privacy
bananabay is a small app in early development. This page may change as the app changes; the goal is to explain how data is treated today in plain language without pretending the project is more finished than it is.
Plain version
- bananabay does not sell personal information or share it for cross-context behavioral advertising.
- bananabay is committed to achieving GDPR and CCPA compliance before launch.
- Some third-party services are used to operate the site, including Clerk for authentication and Vercel for hosting and deployment.
Privacy requests
Download or delete app-owned data from Settings. Send correction, sale or sharing, and sensitive-data-use requests to privacy@bananabay.xyz. Requests are tracked manually for now; that is enough until the product has a real support queue.
- Download or delete app-owned data in Settings
- Correct inaccurate app-owned data
- Ask about sale, sharing, or targeted advertising
- Ask about limiting sensitive data use
Data inventory
| Data | Why | Retention | Processors |
|---|---|---|---|
| Site settingsAccount preferences | Store time format and food-retention preferences. | Kept until changed or deleted by a privacy/account data request. | MongoDB Atlas, Vercel, Clerk |
| Food inventoryFood inventory records | Track current pantry/freezer inventory and product metadata chosen by the user. | Kept until item removal, account data deletion, or a future retention workflow. | MongoDB Atlas, Vercel |
| Food intake logFood consumption records | Calculate daily consumed foods and nutrition totals. | Controlled by the user's consume-log retention setting; default 365 days. | MongoDB Atlas, Vercel |
| Personal food factsUser-created food facts | Store user-specific food names, UPCs, nutrition facts, and aliases. | Kept until edited, account data deletion, or a future retention workflow. | MongoDB Atlas, Vercel |
| Food imagesFood inventory media | Store user-uploaded item images and personal food-fact images. | Kept until replaced, account data deletion, or a future retention workflow. | MongoDB Atlas, Vercel |
| Food labelsUser-created label vocabulary | Store reusable inventory and food-fact labels created or touched by the user. | Kept until archived, account data deletion, or a future retention workflow. | MongoDB Atlas, Vercel |
| Open Food Facts contribution logFood facts contribution records | Record explicit user-initiated contribution attempts to Open Food Facts. | Kept until account data deletion or a future retention workflow. | MongoDB Atlas, Vercel, Open Food Facts |
| Food removal logFood inventory audit records | Support undo and audit behavior for consumed or trashed inventory. | Controlled by the user's consume-log retention setting; default 365 days. | MongoDB Atlas, Vercel |
| Food trash logFood disposal records | Track recently trashed items for recovery and auditing. | MongoDB TTL plus the user's consume-log retention setting; default 365 days. | MongoDB Atlas, Vercel |
| Schedule configurationSchedule preferences | Store per-user schedule engine and timing overrides. | Kept until changed or deleted by a privacy/account data request. | MongoDB Atlas, Vercel |
| Schedule recovery eventsWake and sleep tracking records | Generate recovery-aware schedules from manual or wearable sleep inputs. | Kept until deleted by a privacy/account data request. | MongoDB Atlas, Vercel |
| Schedule tracking stateActivity tracking records | Store current activity tracking state and comments. | Kept until replaced, stopped, or deleted by a privacy/account data request. | MongoDB Atlas, Vercel |
| Schedule snapshotsGenerated schedule records | Cache generated daily schedules for app display. | Pruned by deterministic retention cleanup; default 365 days. | MongoDB Atlas, Vercel |
| Schedule weather cacheWeather cache records | Legacy cache for server-side weather data previously used for schedule generation. | MongoDB TTL plus deterministic retention cleanup; default 365 days. | MongoDB Atlas, Vercel, OpenWeather |
| Schedule weather fetch logWeather request log records | Rate-limit weather API calls. | MongoDB TTL plus deterministic retention cleanup; default 365 days. | MongoDB Atlas, Vercel, OpenWeather |
| Weather fetch logWeather request log records | Rate-limit weather API calls without storing browser coordinates or weather reports. | MongoDB TTL plus deterministic retention cleanup; default 7 days. | MongoDB Atlas, Vercel, OpenWeather |
| Meal plansMeals records | Store planned meals and references to inventory items. | Kept until deleted by the user or by a privacy/account data request. | MongoDB Atlas, Vercel |
| Task definitionsTask and routine records | Store user-created one-off, recurring, and condition-based task definitions. | Kept until archived/deleted by the user or by a privacy/account data request. | MongoDB Atlas, Vercel |
| Routine definitionsTask and routine records | Store user-created routines and their task membership. | Kept until archived/deleted by the user or by a privacy/account data request. | MongoDB Atlas, Vercel |
| Task completionsTask completion records | Track completed tasks, completed subtasks, and retained completion metadata. | Controlled by the user's completed-task retention setting; retained records are kept until changed or deleted. | MongoDB Atlas, Vercel |
| Clerk authentication dataAuthentication and account identity | Authenticate accounts, sessions, and access control. | Managed in Clerk until account deletion or provider-side retention applies. | Clerk |
| Vercel infrastructure dataHosting, security, and operational logs | Host, secure, and operate the web app. | Managed by Vercel platform retention and project configuration. | Vercel |