Privacy policy

Last updated October 16, 2026. This policy covers getcauli.com, the Cauli waitlist and the Cauli app for iPhone and iPad. It says what we collect, why, who helps us process it, how long we keep it and what you can do about it.

If you live in Washington, Nevada or Connecticut, or another state with a consumer health data law, also read our Consumer Health Data Privacy Policy. It covers your weight, goal, allergies and eating records in more detail.

Who we are

Cauli is made by CW Frontier Innovations LLC ("Cauli", "we", "us"), a Tennessee limited liability company. We decide how your information is used. Contact us at info@cwfrontierinnovations.com or by post at CW Frontier Innovations LLC, c/o Registered Agents Inc, 116 Agnes Rd, Ste 200, Knoxville, TN 37919, USA .

The short version

• We collect what Cauli needs to plan your eating week, and we use it for that.
• We don't sell your information. We don't share it for targeted advertising. The app has no advertising and no ad-tracking SDKs.
• Your weight, goal, allergies and diet in the app never go into our analytics or to any ad platform.
• AI models from third-party providers help plan your Week, answer the chat and read your photos. They process your data for us and, on the settings we use, don't keep it or train on it.
• You can delete your account in the app at any time (Settings › Delete account). It's immediate and final.

What we collect in the app

• Your account. You sign in with Apple or Google. We get your email address (or Apple's private relay address if you chose Hide My Email), your first name if the sign-in shares it, and an account id. We don't get or store a password.
• About you and your goal. Your goal (lose fat, build muscle, recomp or maintain), sex, age (a number, not a date of birth), height, current weight, goal weight if you give one, pace, the days you train and how active your day is. From these we work out your calorie and protein targets, or you can set your own.
• Your food rules and tastes. Allergies, the way you eat (for example vegetarian or halal), foods you won't eat, flavours you like, how much you cook, who you cook for and your budget feel.
• Your week and your stores. Your busy nights, Reset day, the meals Cauli plans, your Batches and Leftovers, grocery lists, the store chains you shop at (a chain name, never your location or ZIP code) and any store prices you enter.
• What you eat and think of it. Meals you mark Ate it or won't eat, your reactions ("loved", "not again"), swaps, your Cookbook and the things Cauli has learned about you (shown in What Cauli knows, where you can remove them).
• Weigh-ins and Check-ins. The weights you enter and your progress over time.
• Chat messages. What you write to Cauli and its replies, and any images you attach.
• Photos. Kitchen photos (fridge, freezer, pantry, counter), pictures of product packs and nutrition labels, barcodes you scan, and screenshots or photos you add to a recipe. Grocery receipts and order screenshots are read once and the image is then deleted; we keep only what was read from it.
• Recipes you bring in. Links you share to Cauli from TikTok, Instagram, YouTube or the web, and recipe text you paste.
• Device and settings. Your home time zone (to know when your day starts), units, notification choices, a push notification token if you allow notifications, app version and device model.
• Subscription status. Whether you have an active free trial or subscription, its renewal date and the offer you used. Apple handles payment; we never see your card details.
• Usage and crash data. Which screens you open and which buttons you tap (for example "Week confirmed" or "Ate it"), tied to your account id but never to your weight, goal, allergies or diet. Crash reports with the device, app version and what went wrong. Our analytics also work out your approximate location (city level) from your IP address. The app does not record your screen today; if we ever turn on session recording, text fields and images (including kitchen photos, receipts and chat) stay masked.

We don't collect your precise location, contacts, health app data or photos you didn't choose to share.

What we collect on the website and the waitlist

• Waitlist details you give us: your email address and, if you choose to share them, your goal and the busy nights you tried in our demo.
• How you found us: the campaign tag in the link you used (for example utm_source=tiktok) or, when the link has no tag, the site that referred you, and which version of the page you saw.
• How you use the site: pages viewed, clicks, how far you scroll, page speed, errors, the site that referred you, your approximate location (city level, worked out from your IP address) and device type. If you accept cookies, we may also record sessions to see where the page is confusing; everything you type into a field is hidden from those recordings. If you join the waitlist, this activity is linked to your email so we can see how people find Cauli.
• Creator links: if you arrive through a creator's link (getcauli.com/r/…), your browser remembers that creator's code for up to 180 days, so it can be saved with your waitlist signup. It isn't used to follow you on other sites.

How we use it

• To provide Cauli: plan your Week, portion meals to your targets, keep out your allergies and foods you won't eat, make your grocery list, re-plan when you ask, read your photos and recipes, and show your progress.
• To personalise it: Cauli learns from your reactions, swaps and chat so later Weeks fit you better.
• To run your account and subscription, and to send the notifications and emails you've allowed (your week is ready, Set your week, trial and renewal reminders, purchase confirmation). You can turn each one off in Settings.
• To tell waitlist members when Cauli opens and send occasional product updates.
• To keep Cauli working and safe: fix crashes, stop abuse, enforce usage limits and our Terms.
• To improve Cauli: understand which features and pages work, using analytics that don't contain your health information.
• To answer you when you contact us, and to meet legal duties.

We don't use your information for advertising, we don't sell it, and we don't build profiles of you for anyone else.

AI processing

Cauli uses AI models to write your Week's meals and recipes, answer chat messages, read photos (kitchen photos, labels, receipts, recipe screenshots) and read recipes you share. To do that, we send the models what they need for the task: for example your targets, food rules, the Week so far and your message or photo. We don't send your name or email address.

The models are made by Anthropic, Google and OpenAI. We reach them through OpenRouter, an AI routing service. Our OpenRouter account allows only providers with zero data retention, which means the provider doesn't store your requests after answering them. Under these providers' API terms, data sent through their APIs isn't used to train their models. We may later reach the same providers through another gateway, such as Vercel AI Gateway, on the same terms; we'll update this policy if the providers change.

Your calorie and nutrition numbers come from food data and our own code, not from an AI model. Allergy checks are done in code too. AI output can still be wrong, so check what matters to you (see our Terms).

Who processes it for us

These companies process information on our behalf, under contract, only to provide their service to us:

• Clerk: sign-in and accounts.
• Neon: our database, where your account and app data live.
• Vercel: hosts getcauli.com and Cauli's servers.
• Cloudflare (R2 storage): stores your private photos and the dish pictures shown in the app.
• Upstash (QStash): runs background tasks, such as building your Week. Task messages carry ids, not your health details.
• OpenRouter and the model providers above: AI processing.
• Apple (App Store and push notifications) and RevenueCat: subscriptions and purchase status. RevenueCat knows your account id and purchase history, not your email or health data.
• Expo: delivers push notifications to Apple. It receives your push token and the notification text.
• Resend: sends the app's emails to your account email.
• Brevo: stores the waitlist and sends waitlist emails.
• PostHog: product and website analytics, feature switches and website session recordings. It gets your account id (or, on the website, your waitlist email) and usage events, never your weight, goal, allergies or diet from the app. On the website it sees how many busy nights you try in the demo, never the goal.
• Sentry: crash and error reports, linked to a random account id only.
• ScrapeCreators and Tavily: fetch the captions or page text of a recipe link you share. They receive the link, not who shared it.

Some services only ever receive food queries, never anything about you: USDA FoodData Central, Open Food Facts and FatSecret (barcode and product lookups), and Runware, which makes the dish pictures from a recipe's description.

If you sign in with Apple or Google, they know you used that sign-in for Cauli. If you ask, Apple also processes your purchases and refunds under its own privacy policy.

When else we share information

Only if the law requires it (for example a valid court order), to protect people's safety or our rights, or as part of a merger, sale or transfer of the business, where this policy keeps applying to your information. We'll tell you if that happens unless the law forbids it.

Advertising and attribution

Cauli has no ads and doesn't track you across other companies' apps or websites. We don't use an ad network SDK or ask for Apple's tracking permission. If we run Apple Search Ads, the app may collect Apple's privacy-preserving attribution token, through RevenueCat, so we can see which ad keyword led to a free trial. It doesn't identify you to Apple or to us beyond that. We'll update this policy before adding any other kind of advertising measurement.

Cookies and similar technologies

getcauli.com uses a small number of first-party cookies and browser storage, and only after you choose Accept on the cookie notice. There are no advertising or cross-site tracking cookies, and nothing from Meta, Google Ads or TikTok runs on the site.

• Your cookie choice (local storage, strictly necessary): whether you accepted or declined, so we don't ask on every page. Kept until you clear your browser's site data.
• PostHog analytics cookie (named like ph_…_posthog, first-party, set through our own getcauli.com address), after you accept: a random id that recognises a returning browser and holds the current session, so we can count visits, see which pages work and, if you join the waitlist, link your visit to your signup. It lasts up to a year. PostHog also keeps a copy in your browser's local storage.
• Session storage, after you accept: the campaign tag and referring site of your current visit, so a signup on a later page keeps them. Cleared when you close the tab.
• Creator code (local storage), after you accept: if you came through a creator's link, that creator's code, for up to 180 days.

Until you choose, and if you decline, PostHog stores nothing on your device. Before you choose, it still counts anonymous page views and clicks on the page you're on, forgetting you when you leave the page, and makes no session recordings; if you decline, it stops capturing anything. You can change your mind at any time with "Cookie settings" at the bottom of every page, or block or delete cookies and site data for getcauli.com in your browser; the site works either way. If your browser sends a Do Not Track signal, we don't capture any analytics from your visit and don't show the notice. The Cauli app doesn't use cookies; its analytics work as described above.

How long we keep it

• Your app data: while your account exists. Delete your account and we delete it at once from our live systems: your Weeks, Cookbook, Weigh-ins, What Cauli knows, Your kitchen and Kitchen photos, chats, settings and the photos stored for you. Your sign-in account at Clerk is deleted too, and if you used Sign in with Apple we ask Apple to revoke Cauli's access. Database backups are overwritten within 30 days. Nothing can be restored after deletion, including by us.
• Receipt images: deleted once they're read.
• Purchase records: Apple and RevenueCat keep records of your purchases for billing, tax and refunds. Deleting your Cauli account doesn't cancel your subscription; cancel it in iOS Settings.
• Analytics and crash reports: kept by PostHog and Sentry for a limited period under their retention settings. They are tied only to a random account id once your account is deleted.
• Waitlist details: until you unsubscribe, ask us to delete them, or we close the waitlist.
• Emails you send us: as long as needed to help you and keep a record.

Your choices and rights

• Delete your account in the app: Settings › Delete account.
• See and change your information in the app: Settings shows your profile and targets, What Cauli knows shows what Cauli has learned, and you can remove photos and Weigh-ins.
• Get a copy, correct or delete anything else, including waitlist details: email info@cwfrontierinnovations.com. We'll confirm who you are (usually by replying from your account email) and answer within 30 days, or 45 where your state's law allows.
• Notifications and emails: turn them off in Settings or iOS Settings. Every waitlist email has an unsubscribe link.

We won't treat you differently for using any of these rights. If we turn down a request, you can appeal by replying to our answer; we'll respond within 45 days and tell you how to contact your state attorney general if you disagree.

California residents

Under the California Consumer Privacy Act (as amended by the CPRA), you can ask what personal information we collect, use and disclose, ask us to delete or correct it, and limit the use of sensitive personal information. In the last 12 months we collected the categories listed above: identifiers (email, account id), personal characteristics (age, sex), sensitive personal information (health information such as weight, goals, allergies and diet), commercial information (subscription status), internet activity (app and site usage), approximate location from IP address, and inferences (what Cauli has learned about your tastes). We got them from you, your device and our processors, for the purposes above, and disclosed them only to the processors listed. We use sensitive personal information only to provide the service you asked for. We don't sell or share personal information as the CCPA defines those words, and we don't knowingly sell or share the information of anyone under 16. To make a request, email info@cwfrontierinnovations.com; an authorised agent can ask for you with your signed permission.

Visitors from the EU, UK and elsewhere

Cauli is made for the United States, but the site is open to anyone. If data protection law such as the GDPR or UK GDPR applies to you, our legal bases are: performing our contract with you (providing the app), your consent (health information you choose to enter, and the waitlist), and our legitimate interests (keeping Cauli secure and understanding how it's used). You can ask to access, correct, delete, restrict or port your data, object to processing, withdraw consent at any time, and complain to your local data protection authority. Your information is stored and processed in the United States; where the law requires it, our processors' standard contractual clauses protect transfers.

Security

Data is encrypted in transit and at rest with our providers. Private photos are kept in a private store and shown only to you through short-lived links. Access to production systems is limited to the people who need it to run Cauli. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

Children

Cauli is for people 16 and over, and people under 18 can only plan to maintain their weight. It isn't made for children, and we don't knowingly collect information from anyone under 16. If you think a child under 16 has given us information, email us and we'll delete it.

Changes

If we change this policy we'll update the date above. If the change is significant, we'll tell you in the app or by email before it takes effect.

Contact

CW Frontier Innovations LLC, c/o Registered Agents Inc, 116 Agnes Rd, Ste 200, Knoxville, TN 37919, USA. Email info@cwfrontierinnovations.com.