Privacy Policy

Ollita: Meal Planner & Budget · Effective November 2, 2026

Ollita is a weekly meal planner for iPhone made by Dogs in Boots, LLC. This policy explains, in plain words, what Ollita collects, why, who receives it, how long it’s kept, and how you can delete it. It covers the Ollita app and this website.

1. Who we are

Ollita is made by Dogs in Boots, LLC (“we”, “us”), a company in the United States. We decide how the information described here is used, and you can reach us at ollita@nookpages.com. Ollita is available in English and Spanish in the United States, Canada and Mexico.

2. What stays on your iPhone

Ollita plans your week, builds your list and estimates its prices on your iPhone, so it works offline, in the store too. This stays on your iPhone, and our servers don’t receive it:

• Your ZIP or postal code. When you choose your store, Ollita looks up your price region from the code on your iPhone, then forgets the code. Only the region (such as “Midwest” or “Ontario”) and the store chain you picked are saved.
• Cook mode: the step you’re on and your running timers, so you can leave and come back.
• Reminder alerts: the alerts for the reminders you turn on (shopping day, tonight’s meal and its prep note, planning next week) and for your cook timers are scheduled on your iPhone; we don’t use push notifications. Which reminders are on, and when, is saved with your settings (see Your plan).
• Working state, such as shopping mode, your answers while you set Ollita up, whether you closed the “next steps” card, whether Ollita has asked you to rate it, and your choice about analytics.
• Recipes, ingredients and prices. They come with the app, and Ollita downloads updated ones about once a month, so planning and pricing work offline.

Ollita reads your iPhone’s Region setting to suggest your country and to choose whether analytics start on; it never asks for your location. Like other apps’ data, what Ollita keeps on your iPhone is included in your iCloud or computer backups.

3. What we collect, and why

Your account

The first time you open Ollita, it creates an account for you automatically: a random account ID, with no name, email or phone number. Your plan, your subscription and your purchases are kept with this ID, and RevenueCat and PostHog, which help us run Ollita, know you by it too.

Signing in is optional. If you sign in, you can bring your plan to another iPhone, or back after you reinstall Ollita:

• With Apple: Apple gives us an identifier for you and an email address: your own, or a private relay address if you choose Hide My Email. Ollita doesn’t ask Apple for your name. We also keep a token from Apple so that, when you delete your account, we can ask Apple to end Ollita’s Sign in with Apple access.
• With email: we store your email address, with the language Ollita is in so the email arrives in it, and send you a 6-digit code to confirm it. We use your email only to sign you in. We don’t send newsletters or marketing email.

To keep accounts secure, our sign-in system keeps a security log of sign-ins and session refreshes (about once an hour while Ollita is open), with the time, the IP address and device type of each request and, if you signed in, your email address. We keep this log for about 7 days. Each session, anonymous ones included, also keeps the IP address and device type of its latest refresh until it ends. The sign-in system also limits how many accounts can be created from one IP address. We also store the date you finished setting up Ollita.

Your plan

Ollita saves what you tell it and what you do with your weeks to our servers with your account, from your first change, even if you never sign in, so that it can come back when you sign in on a new iPhone or after you reinstall Ollita:

• Your settings: how many adults and children you cook for; which days and meals you plan, when your week starts and your shopping day; your country, price region and store chain; your weekly budget; your diets, allergies, the ingredients you leave out and the ones you dislike; your kitchen equipment and how much time you have on weeknights; your units; which reminders are on and when; and your price adjustment (see What you paid).
• Your weeks: each planned week, its meals and how many servings each makes, which meals you locked, skipped, cooked and rated, the store, region, currency and budget the week was priced for, which versions of our recipe and price data it used, and the day you finished shopping.
• Your list: which lines you checked or set aside, and the items you added yourself, with their quantity and aisle.
• Your pantry: your staples and the items you want to use up, with their amounts.
• Your recipes: favourites, ratings and the recipes you asked never to see again.
• When each change was made, so your iPhones agree on the latest one.

Ollita saves a change a couple of seconds after you make it, or when you’re back online. When you remove something, our servers keep a marker that it was removed, so your other iPhones remove it too; the marker goes when you delete your account. Nobody else using Ollita can see your plan.

If you sign in to an account you already had, that account’s settings and weeks are kept, and this iPhone’s list, pantry, recipe preferences and receipts are added to it. Ollita then deletes the anonymous account it was using (see Accounts you can no longer reach for when that can’t happen). When you sign out, Ollita first tries to save any change not yet saved, then removes your plan, your list, your pantry, your settings, cook mode and your reminders from this iPhone; what was saved comes back when you sign in again.

Your diets and allergies

Diets, allergies and the foods you leave out can say something about your health or your beliefs. Ollita uses them only to choose which recipes it plans and offers you, on your iPhone. They are saved with your account, like your other settings, so that they come back on a new iPhone. They are never sent to analytics, never used for ads, never sold, and never shared with anyone except the company that stores our database for us (Supabase). You can change or remove them at any time in Settings › Diets & allergies, and deleting your account deletes them. Ollita leaves out the ingredients you choose, but products vary: always check labels.

What you paid

After shopping, you can tell Ollita what you paid. It saves that amount with the week, the day you entered it, your country, store chain, price region and currency, Ollita’s estimate at the time, how many lines of the list were planned and bought, whether you bought other things too, and which versions of our data made the estimate.

• For you: your iPhone compares what you paid with Ollita’s estimates and adjusts your future estimates a little. You can reset this in How we price this.
• To check our prices: we also compute, on our server, how close Ollita’s estimates are to what people paid, per country and per store chain, such as the median difference and how often the amount fell inside the range. Only receipts for a whole list count, a group needs at least 10 accounts to be shown, and we keep only the resulting figures, not a copy of anyone’s receipts. These figures never go through analytics.

Subscriptions

If you buy Ollita Pro, Apple handles the payment. We never see your card or your Apple Account details.

RevenueCat manages purchases for us, so that Ollita can give you Pro and show your renewal date. Each time Ollita opens, even if you’ve never bought anything, it asks RevenueCat whether you have Pro. That request carries your account ID, your App Store country, your IP address and technical details: your iPhone model, iOS and app versions, your language settings, and an identifier Apple gives apps from the same developer on your iPhone. When you buy or renew, RevenueCat receives the purchase from Apple: the plan, price and currency, dates, whether it will renew, whether it was shared through Family Sharing, and transaction numbers. Our servers keep a copy of your Pro status and a log of the purchase notifications RevenueCat sends us.

How Ollita is used, and errors

We use PostHog to understand how Ollita is used and to find and fix problems. While analytics are on, Ollita sends PostHog, linked to your account ID:

• What you do in Ollita: when you open it, the kinds of screen you view (your week, a recipe, the list, the pantry, settings), and actions such as planning a week (how many meals, whether it fit the budget and how long planning took), seeing a priced week, swapping, moving, skipping, locking or hiding a meal, updating a plan, using a suggestion to fit your budget (which kind), starting and finishing cook mode (how many steps and timers), marking a meal cooked (whether you rated it, not the stars), starting and finishing shopping (roughly how much of the list you checked), entering what you paid (not the amount), sharing your list (how many items), opening a meal’s swap sheet, using the next-steps card, adding your own items or pantry items, which section of settings you changed (not what you chose), turning reminders on or off, answering the notifications prompt, viewing the subscription screen, buying or restoring, and signing in or out.
• Your progress through setup: which steps you see and finish, never what you answer.
• Your status: whether you have Pro and whether it will renew, whether you’ve signed in, whether notifications are allowed, and how many reminders are on.
• A random ID that PostHog creates when Ollita is installed. It isn’t your iPhone’s advertising identifier. It stays on your iPhone until you delete your account or delete Ollita.
• Device details: your iPhone model (not its name), iOS version, app version, language and region settings, time zone and screen size.
• Your IP address and approximate location: PostHog keeps your IP address with each event and, as each event arrives, works out from it your country, region, city and postal code, and the coordinates and time zone of that area. It keeps that location with the event and in your analytics profile.
• Error reports: what went wrong, its error code, the kind of screen you were on, and a short trail of earlier technical messages.

Analytics never include your recipes or meals, your diets, allergies or dislikes, your budget, how many people you cook for, your store, chain, region or postal code, your list or pantry, what you paid or Ollita’s estimates. PostHog doesn’t record your screen, what you type or where you tap, and we don’t use it for advertising. Analytics start on in the United States, Canada and Mexico, and Ollita says so on its welcome screen; when your iPhone’s Region is in the EU or the EEA, the UK or Switzerland, they start off, and Ollita asks you once, while you set it up, whether to share them. You can turn them on or off at any time in Ollita’s Settings › Privacy; see Your choices.

Recipe and price updates

When Ollita checks for new recipes and prices, your iPhone asks our servers for the newest files. Those requests carry your IP address and which files your iPhone needs, but no account ID.

When you contact us

If you email us, we receive your email address and what you write, and use them only to help you. Settings › Contact support opens your email app with a message to us; nothing is sent until you send it. Our email is hosted by Google.

This website

This website sets no cookies. To count visits and see how quickly its pages load, it uses Cloudflare Web Analytics: Cloudflare adds a small script to each page, and your browser downloads it from Cloudflare. For each page you view, the script sends Cloudflare:

• the page’s address and the address of the page that sent you here, both without any query string, and when you opened the page;
• how quickly the page loaded and responded when you tapped, clicked or typed, naming the page elements involved (such as the one you tapped), and how much memory the page used;
• your browser and operating system versions;
• a random ID that is new for every page view.

The script doesn’t use cookies or store anything on your device, and its ID changes with every page, so these reports don’t recognize you when you come back. Cloudflare receives your IP address with each report and says it discards it at the nearest Cloudflare data center, without storing it in its core databases or logs. Its reports show us visits by country, browser, operating system and type of device. Cloudflare says it doesn’t fingerprint visitors or track them across its customers’ websites. Content blockers can stop the script, and Ollita’s Settings › Privacy switch covers the app, not this website. Cloudflare, which hosts this website, also processes visitors’ IP addresses and request details to deliver and protect it. If a page fails to load, some browsers also send Cloudflare a short error report: the page’s address, the page that linked to it and the kind of error. Cloudflare says it drops the IP address at once.

4. No AI in the app

Ollita has no AI features. The planner, the list and every price run in code on your iPhone, and nothing you enter, such as your diets, your list or what you paid, is sent to an AI provider. Our recipes are written with the help of AI before they ship and checked by code and by people; that work uses no one’s personal data.

5. Who receives your data

These companies run parts of Ollita for us, and each receives what its part needs, for the purposes in this policy:

Supabase

Hosts our database, sign-in, file downloads and server code, and so stores everything we keep on our servers, your plan included.

RevenueCat

Manages purchases (see Subscriptions).

PostHog

Analytics and error reports (see How Ollita is used, and errors).

Resend

Delivers sign-in code emails. It receives your email address and the message.

Cloudflare

Hosts this website and counts its visits (see This website).

Expo

Delivers updates to the Ollita app. When Ollita starts, it asks Expo’s servers whether an update is ready. That request carries your IP address, a random ID for this installation of Ollita (not your account ID), technical details about the version of Ollita you have and, if an update failed to start, the error it caused. Ollita’s analytics switch doesn’t turn this check off.

Google

Hosts our email, including the messages you send to ollita@nookpages.com and our replies.

These companies act on our behalf, under agreements that limit their use of your data to providing their service to us. They protect your data at least as well as this policy does.

Apple processes App Store purchases, refunds, Family Sharing and Sign in with Apple, under its own terms and privacy policy. If you’ve chosen in iOS to share analytics with app developers, Apple also gives us crash reports and app usage statistics that don’t identify you.

Our prices come from public sources, such as the U.S. Bureau of Labor Statistics, Statistics Canada and Mexico’s PROFECO, and from prices people check on stores’ websites. Those sources and stores receive nothing about you. Ollita isn’t affiliated with any store it names.

We may also disclose information if the law requires it, to protect someone’s safety, or as part of a merger or sale of our business, in which case this policy keeps applying to it.

6. What we never do

• Show ads or sponsored products in Ollita.
• Sell your personal information, or share it for targeted advertising.
• Track you across other companies’ apps or websites. Ollita doesn’t use your iPhone’s advertising identifier and never shows Apple’s tracking prompt.
• Ask for your location, your contacts, your camera, your microphone or your photos.
• Store your ZIP or postal code.
• Send you marketing email.
• Send what you enter to an AI provider, or use your data to train AI models.

7. Where your data is processed

Our service providers store your data in the United States and process it there, with three exceptions: some requests, including downloads and checks for app updates, may first be handled by servers closer to you; Google, which hosts our email, may store and process the emails you send us in other countries; and this website’s visit reports are processed at the Cloudflare data center nearest you. If you live outside the United States, such as in Canada or Mexico, this means your data is transferred to the United States, where it is protected as this policy describes but may be accessed by US courts, law enforcement and national security authorities under US law.

8. How long we keep it

On your iPhone

Your plan, list, pantry, settings, cook mode and reminders: until you remove them, sign out (what was saved comes back when you sign in again), delete your account, or delete the app. Working state such as your analytics choice: until you delete the app.

Your account

Your account ID, email and Apple sign-in, the date you set up Ollita, your Pro status, and the IP address and device type your sessions last used: until you delete your account.

Your plan

Your settings, weeks, list, pantry and recipe preferences: until you change or remove them, or delete your account; the markers of what you removed stay until you delete your account. What you paid: until you delete your account.

Price accuracy figures

The figures we compute from receipts (groups of at least 10 accounts) hold nothing about any one person, and we may keep them.

Accounts you can no longer reach

If you delete Ollita from your iPhone without having signed in, the anonymous account Ollita was using stays on our servers, at RevenueCat and at PostHog, with no set end date. It has no email address, but it keeps your plan, and the IP address and device type it last used; PostHog keeps its analytics profile, and its events for up to 1 year. It can no longer be deleted from Ollita. To delete it, use Settings › Delete account before you delete Ollita. That includes the new anonymous account Ollita starts right after you sign out or delete your account. When you sign in to an account you already had, Ollita deletes the anonymous one it was using, once your data and purchases have moved; if that can’t happen within an hour (for example, Ollita is offline or closed), the anonymous account stays too.

Subscription records

RevenueCat keeps your purchase history until you delete your account, when we ask it to delete your record. Our log of purchase notifications for your account is deleted with it.

Analytics events and error reports

Up to 1 year. When you delete your account, we ask PostHog to delete them, and it does within about a week.

Your analytics profile

Until you delete your account, when we ask PostHog to delete it along with your events.

After you delete your account

We keep its account ID for 48 hours, only to ask RevenueCat and PostHog a second time to delete anything that reached them meanwhile. If one of them couldn’t be reached, we keep the ID until that’s done.

Server logs and backups

About 7 days, our sign-in security log included. Server logs include IP addresses, the approximate location our hosting provider works out from them, device types and account IDs. They don’t include your plan, unless our database refuses a change from Ollita: then its log may show that change.

Sign-in code emails

Resend keeps each sign-in email (your address and the message, whose code expires within an hour) and its delivery log for 30 days.

Website visit reports

Cloudflare keeps every report for 7 days, then only a sample, and lets us see the last six months.

Support emails

As long as we need them to help you and to keep a record of our conversation.

9. Deleting your account and data

To delete your account, open Ollita and go to Settings › Delete account, near the bottom. Any account can be deleted, including an anonymous one. This deletes:

• From our servers: your account and email, your Apple sign-in (we also ask Apple to revoke it), your profile, your settings, weeks, list, pantry, recipe preferences and what you paid, your Pro status, and our log of purchase notifications for your account.
• At RevenueCat: your customer record, which we ask RevenueCat to delete.
• At PostHog: your analytics and error data, which we ask PostHog to delete. Ollita also replaces PostHog’s random ID on this iPhone, so what it sends afterwards isn’t linked to your deleted account.
• From this iPhone: your plan, list, pantry, settings, cook mode and reminders.

Two days later, we ask RevenueCat and PostHog again, for anything that reached them meanwhile. If either can’t be reached when you delete your account, your account is still deleted, and we keep asking until it confirms.

Deleting your account doesn’t remove:

• Your App Store subscription. Cancel it separately in your iPhone’s Settings › your name › Subscriptions; deleting your account doesn’t stop Apple from charging you.
• Copies in our backups and server logs, including our sign-in security log, until they expire after about 7 days.
• Price accuracy figures already computed, which hold nothing about any one person.
• Any other Ollita account, such as an anonymous one left on our servers when you deleted Ollita without signing in (see Accounts you can no longer reach).
• Working state on this iPhone, such as your analytics choice, and backups of your iPhone. Delete Ollita from your iPhone to remove its working state.

You can also email us to ask for a copy of your data, to correct it, or to delete it. So that we give your data only to you, we answer a request only when it comes from your Ollita account’s email address, or when you make it in Ollita while you’re signed in to that account, such as deleting it in Settings › Delete account. An anonymous account has no email address, so we can’t confirm that a request about it is yours: you can see and change everything it holds in Ollita, and delete it yourself in Settings › Delete account.

10. Your choices

• Signing in with Apple or email is optional.
• Your settings: change any of them, your diets and allergies included, in Ollita’s Settings.
• Analytics: use Share usage analytics in Ollita’s Settings › Privacy to turn them on or off. While the switch is off, Ollita sends PostHog nothing: no usage data, no error reports and no other requests, and what it hadn’t sent yet is discarded. Turning it off doesn’t delete what PostHog already has; deleting your account does.
• Reminders: Ollita asks before sending notifications, only when you turn a reminder on. Turn reminders off in Settings › Reminders, or all of Ollita’s notifications in your iPhone’s Settings › Notifications › Ollita.
• What you paid is optional. Reset in How we price this sets your own price adjustment back to none.

11. Children

Ollita is a general-audience app for people who plan and cook meals. It has no chat, no social features and no ads, and nobody else can see your plan. It isn’t directed to children under 13, and we don’t knowingly collect personal information from children under 13. Ollita asks how many children you cook for, as a number only: it collects nothing about them. If you think a child under 13 has given us personal information, email us and we’ll delete it. If the child used Ollita without signing in, open Settings › Delete account on their iPhone instead: we can’t find an account that has no email address.

12. Your rights

Wherever you live, you can ask us what information we hold about you, for a copy, to correct it, or to delete it, and you can turn analytics off at any time. Email ollita@nookpages.com. We’ll confirm the request is yours (see how) and reply within the time your local law requires. We won’t treat you differently for using these rights.

Complaints. If you think we’ve mishandled your information, email ollita@nookpages.com with “Privacy complaint” in the subject. The person in charge of protecting personal information at Dogs in Boots, LLC looks into it and replies with what we found and what we’ll do. If you’re not satisfied, you can contact your regulator (below).

United States

If you live in California or another state with a consumer privacy law, you also have the right to opt out of the sale of personal information, targeted advertising and certain kinds of profiling. We don’t do any of these. In the categories California law uses, we collect identifiers (account ID, installation ID, IP address and, if you sign in, your email address), commercial information (purchase history, and what you paid for groceries if you tell us), internet or other electronic network activity (how you use Ollita), geolocation data (an approximate location worked out from your IP address, and the price region you choose; never your precise location), and the diets and allergies you choose to give us. Some states, such as Washington, treat information about diet or allergies as consumer health data: we collect it only to plan your meals, as Your diets and allergies describes, never sell it or share it, and you can delete it at any time. You can use an authorized agent to make a request. If we decline a request, you can appeal by replying to our answer.

Canada

Under PIPEDA and, in Quebec, the Act respecting the protection of personal information in the private sector, you can access and correct your information and withdraw your consent. The person in charge of protecting personal information at Dogs in Boots, LLC can be reached at ollita@nookpages.com. If you aren’t satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.

Mexico

Under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties, Dogs in Boots, LLC is responsible for your personal data, and this policy is our privacy notice. We use your data to provide Ollita as you ask: your account, your plan, prices and purchases. Analytics and error reports are a secondary purpose: you can refuse them at any time in Ollita’s Settings › Privacy, and that never affects the service. The companies in section 5 handle your data on our behalf; we don’t transfer it to anyone else for their own use. You have the right to access your personal data, to correct it, to have it deleted and to object to its use (your ARCO rights), and to withdraw your consent. To use them, email ollita@nookpages.com from your Ollita account’s email address (see how we confirm a request is yours), saying which right you want to use and for what data. We reply within 20 business days. If you aren’t satisfied with our answer, you can go to Mexico’s data protection authority.

European Union, European Economic Area and United Kingdom

Ollita is offered in the United States, Canada and Mexico. If you use it while you’re in the EU, the EEA or the UK, the GDPR or the UK GDPR applies, and Dogs in Boots, LLC is the controller of your personal data. We use it to provide Ollita as you ask (a contract with you); for analytics and error reports, with your consent, which Ollita asks for there before sending any; for our legitimate interests in keeping Ollita and this website secure, working and free of abuse (logs, limits on accounts, counting this website’s visits); and to meet legal obligations. You have the rights described above, plus the rights to restrict how we use your data, to receive it in a portable format and to object to uses based on our legitimate interests. You can also complain to the data protection authority where you live or work, or, in the UK, to the Information Commissioner’s Office (ICO). For transfers to the United States, we rely on our providers’ data processing terms, which include the European Commission’s standard contractual clauses and the UK’s addendum to them, or on the EU-U.S. Data Privacy Framework and its UK extension where a provider is certified under them.

13. Security

Ollita’s connections are encrypted, and on our servers each account can reach only its own data. Our providers encrypt stored data and limit who can access it. No system is perfectly secure; if a breach puts your data at risk, we’ll tell you and the authorities as the law requires.

14. Changes to this policy

When we change this policy, we’ll update this page and the date at the top. If a change is significant, we’ll also let you know in Ollita or on this page before it takes effect. The Spanish version of this policy is a translation; if they differ, this English version applies, unless your local law says otherwise.

15. Contact us

Dogs in Boots, LLC
ollita@nookpages.com