Dinner Plan by Escape Plan Software

Privacy notice

Last updated 28 October 2026 · applies to getdinnerplan.com

This notice covers Dinner Plan. It adds to our company privacy policy; where they differ, this notice applies to Dinner Plan. The data controller is Escape Plan Software Ltd, company number 17262078, Suite 10906, 5 Brayford Square, London E1 0SG, United Kingdom. Contact: hello@escapeplan.software.

Your answers

To build your plan we ask for your country, how many adults and kids eat dinner, your weekly dinner budget and whether to keep the cost down or make the most of it, how many dinners you want, diet choices (vegetarian, gluten-free, dairy-free, nut-free), foods to leave out and how long you can cook, and, if you want, kitchen equipment and cuisines you'd like more of and whether to cook once and eat twice. We also ask what you want from the week (and, if you pick eating better, whether you want lighter dinners, more protein or more veg), the hardest part of dinner for you, and the day you usually shop. Your goal and its follow-up shape which dinners we pick and set whether we start from keeping the cost down; a "Picky eaters" answer also shapes the dinners, and your shopping day sets when a new plan arrives. Your other answers to the hardest-part question only change the wording of your results page. Your goal, its follow-up, your hardest-part answers and your shopping day also travel in your results link as plain words (for example "h=para"), not encrypted; they say nothing about your health or beliefs. If you came from one of the versions of our front page we're comparing, your encrypted plan link also records which one (a letter such as "d"), so our anonymous daily totals can count plan previews, plans and payments per version.

Some of these can say something about your health: gluten-free, dairy-free and nut-free, and anything about allergies or health needs in a note you write (see "Changes in your own words"). We only use these if you agree on the consent screen that appears when you choose them (for a note, by ticking the box under it), and only to choose your dinners. Vegetarian and the foods you leave out are used the same way but don't need that consent. Your answers are encrypted into your plan link. Our server decrypts them only while it builds your plan, keeps the result briefly in memory to answer your next request faster, and doesn't store them. When you pay, the encrypted reference from your plan link goes to Stripe and Link with your payment so that you get the right plan. They don't decrypt it, but like the link itself it would open your plan preview on our site. We never send your answers or your plan to Meta or any advertiser.

Health-related answers

What: gluten-free, dairy-free and nut-free choices, and any allergy, intolerance or health need you mention in a note. They may be about you or someone you cook for.

Why: only to leave out dinners you can't eat and to follow your note. We don't use them for ads or anything else, and we don't try to work out anything about your health from them. Our anonymous daily totals count only how often the consent step is shown, agreed to and withdrawn, never which choice.

Legal basis (UK): your explicit consent, given by tapping "I agree" on the consent screen or ticking the box under a note (UK GDPR Article 9(2)(a)), together with the steps you ask us to take before buying and, after you pay, our contract with you (Article 6(1)(b)). The consent screen names only the choices you picked, and your consent covers only those. When the note box isn't offered, it doesn't mention notes; if you later write a note, we ask again. We record that you agreed, which version of its wording you saw and the day, with your encrypted answers.

How long: before you pay, they exist only in your plan link. After you pay, they stay in the encrypted reference held with your Stripe and Link order, and our server reads them each time it builds your plan.

Who handles them for us: Cloudflare, which runs our server, and Anthropic, which reads your note (see "Changes in your own words"). Both act only on our instructions. Common health phrases in a note, such as "nut allergy" or "coeliac", are turned into plan settings on your device and on our server and aren't sent to Anthropic.

Withdrawing consent: use "Stop using my health-related answers" on your plan page, or email hello@escapeplan.software. From then on we ignore those answers and your note, and your plan will no longer avoid those foods. Withdrawing doesn't affect plans we built before. To remember that you withdrew, we keep a one-way hash of your checkout reference and the time, for six years.

US residents: see our Consumer Health Data Privacy Policy.

Anonymous counts

We count, as daily totals, how many times pages and quiz steps are viewed, plans are built, checkout is started and payments are completed, how often people accept or reject the cookie choice or opt out of sharing, how often a visitor taps, clicks, scrolls or presses a key on our front page or our switching page at least once, which kind of thing on our front page is tapped first (for example a goal button or an example recipe) and how far down the page a visitor scrolls (in quarters), which of the versions of our front page or switching page was shown, and how often its quiz button is tapped (or, on the version that opens straight on the quiz, how often its first question is answered), how often the email window on our front page is shown, opened, closed and used, and how often the pay button is pressed before the UK consent box is ticked, how often the UK consent step appears on the plan page and is completed, how often plans are opened, how often a list is shared or copied, cooking mode is opened and the plan is added to a home screen, how often the health-data consent step is shown, agreed to and withdrawn (never which choice), how often checkout or delivery fails or is refused because of the buyer's country, how often our server fails to answer, how often a plan is emailed from the preview page and how often tips and offers are asked for and confirmed, how many emails we send and why we didn't send one (for example, because someone turned them off), how often links in our emails are clicked, how often people turn emails off, and how many plan-link requests we receive and whether a purchase was found. Each count holds only the event, the day, the ad code from the link you arrived by (for example "m3"; for emails, the type of email or link instead), which offer and which front-page version was shown, US or UK, and your approximate region (US, UK or other), worked out from the country Cloudflare tells us (we don't store the country itself). If a request comes from the network of a search engine, an ad-review service or a cloud provider, the count goes in an "automated" group instead of a region. It holds no cookie, IP address, device identifier or anything else that could identify you. We use these totals to see which ads and pages work (our legitimate interest in running and improving the service) and keep them for 25 months.

On your plan preview we may ask, with one tap, what's holding you back (you pick from fixed answers and there's nothing to type): the anonymous daily totals above count only how often the question is shown, closed or answered, whether it came after you closed the trial screen or as you were leaving the page, which answer was picked and how often the email form in it is shown and used, and your browser keeps a small note on your device ("dp_cikis_" with a short code made from your plan link) so we don't ask again.

Changes to your plan

You can swap, remove or add dinners and ask us not to suggest a dinner again. Before you pay, these changes are encrypted into your plan link with your answers, and our server doesn't store them. After you pay, we keep your changes so your plan link keeps showing them: which dinners are in your plan for the week (recipe codes such as "r014") and which ones you asked us not to suggest, linked to a one-way hash of your Stripe checkout reference, and nothing else about you. We delete them 13 months after you last open your plan. The anonymous daily totals above also count how often plans are changed and how many changed plans are bought.

Changes in your own words

You can tell us what you want this week in a short note, for example "no fish, use up the spinach". To read it, we send the note, and nothing else about you, to Anthropic, whose Claude model turns it into plan settings such as "leave out fish". Our code then picks the dinners from our own recipes and works out every amount and price. Anthropic acts as our processor under its Commercial Terms and Data Processing Addendum. It doesn't use what you type to train its models, and it deletes it within 30 days, unless its safety systems flag misuse or the law requires it to keep it longer. We don't store your note, count it, put it in any link or send it to Meta or any advertiser.

What we keep is the result: before you pay, the settings travel encrypted in your plan link with your other answers; after you pay, the dinners we picked are kept like any other change to your plan (above), with a note that the week was changed in your own words (not what you asked for), and the settings themselves travel encrypted in your plan page's link and stay on your device (below), so swaps and added dinners keep following them; we don't store them. On another device, those settings aren't there and the page says so. The anonymous daily totals above also count how often the note is used, which kinds of setting it led to (such as "leave out an ingredient") and how often we couldn't do what was asked, never what you wrote. To stop abuse, we count notes per plan link or checkout reference for up to three days, using a one-way hash; we count notes per IP address for up to three days, using a keyed hash that changes every day; and Cloudflare limits how many notes one IP address can send. We don't store IP addresses. Because a note can mention an allergy or a health need, we only send it after you tick the box described under "Health-related answers", and we use it only to choose your dinners. Our legal basis is that consent, together with the steps you've asked us to take before buying and, after you pay, our contract with you.

Payments

Your order is sold through Link: Sold through Link, LLC, a Stripe company, is the merchant of record. Link and Stripe collect your card details, name, email address and billing address, work out any sales tax or VAT, and email you receipts; we never see your full card number. Link shares your order details with us, including your name, email address, billing address, what you bought and whether the payment succeeded. We use this to give you your plan, manage your subscription, handle refunds and support, prevent fraud and keep the records the law requires (UK tax and accounting records are kept for six years). Link and Stripe use your data as controllers for their own purposes, such as payments, tax, fraud prevention and your Link account, as described in Stripe's privacy policy for Link. If you ask Link to delete your data, Link also cancels any subscription you bought through it.

To make sure a completed payment is counted once, we keep a one-way hash of the Stripe checkout reference for 35 days. It can't be turned back into the reference.

The ad code from the link you arrived by is kept with your order. If that link came from one of our partners, the code is the partner's (for example "p001"): it travels in the links on our site and in your plan link, with no cookie, and we use it to pay the partner a share of your payments (our legitimate interest in paying partners correctly). We tell the partner only the amounts and dates, never who you are.

If you're a UK customer and confirm on your plan page that you want your plan straight away, we keep a record of that confirmation: a different one-way hash of the checkout reference and the time you confirmed. We keep it for six years, as evidence for any dispute about your right to cancel.

Gifts

If you buy a gift, Link handles the payment as above. Your gift code isn't stored; we keep a one-way hash of it so we can check it when it's used, with the Stripe checkout reference, the gift's length and currency, and whether and when it was used. If you ask us to email the gift, we keep their email address, the names and the note you write only until the gift email is sent (on the day you choose), then delete them; we use them only to send that one email (to perform our contract with you). If you give the code yourself, the names and note for the printable card stay in your browser tab and aren't sent to us.

If you received a gift: when you start it, we keep your answers in the same sealed form as a paid plan, linked to the gift, and the start and end dates. If you ask for a reminder before it ends, we keep your email address until we've sent that one reminder (a week before the end), or until the gift ends, then delete it. Unused gifts are kept until they're used, because the code doesn't expire. 400 days after a gift ends we delete your answers and keep only a short record (a hash of the code, its length and dates) so the code can't be used again. If a gift is refunded, the email addresses, names and note are deleted. Gift checkouts that weren't paid are deleted once the checkout has expired, usually within a day.

Gift offer on your plan page: after you pay or start a trial, your plan page may offer a gift. To know whether you've said no or bought it (so we don't ask again) and to count how many people see and take the offer, we keep a one-way hash of your checkout reference for 35 days; one in five purchases, picked from that hash, doesn't see the offer, so we can tell whether it helps. For a free trial we also keep, for 35 days, a hash of your subscription reference with the group you were in, so we can compare how many trials continue in each group. If you choose to buy, we pass your Stripe customer record to the gift checkout so your email is already filled in, and the hash of your checkout reference is stored in the gift checkout's records at Stripe, which links the gift to your purchase; Link handles the payment as above.

Feedback and reviews

If you answer the email we send a week after you buy, we keep your rating (1 to 5), the sentence you write, if any, whether your plan is in the US or the UK, the date, and a one-way hash of your checkout reference so you can change your answer and each purchase counts once. We don't keep your email address with it. Our legal basis is our legitimate interest in learning what to fix; you don't have to answer.

We show your rating and sentence on our reviews page only if you tick the box that asks for it, with the name you type there (first name and last initial); without the tick your answer stays private and only counts toward the average rating shown there. Our legal basis for showing it is your consent. We show every review we have permission to show, good or bad; we remove one only if it contains personal details or abuse or isn't about Dinner Plan. To withdraw permission, open the link in the email again (it works for 30 days) and untick the box, or write to hello@escapeplan.software, also to have your answer deleted; your name and sentence then leave the page within minutes. We delete answers three years after the last change.

Emails

We only email you about Dinner Plan:

If you subscribe, we may also write to you about a price change, a change to our terms, or if we stop the service, as our terms of sale say.

Our legal basis for these emails is our contract with you (sending what you bought), for the email you ask for on your plan preview, taking the step you asked for before buying, and, for the UK confirmation, a legal obligation. For the plan-link form, the limits on repeated requests and the record of people who turned emails off, it's our legitimate interest in answering your request, preventing abuse and respecting your choice. For the one invitation to come back it's, in the US, our legitimate interest in telling customers about the same service, with the right to say no in every email, and in the UK your consent. You can stop promotional emails at any time; we never send them to people who haven't bought from us, unless they signed up for tips and offers or gave their email for their plan without opting out of reminders (below).

Unless you sign up for tips and offers or for reminders about your plan (below), we don't keep your email address. We read it from Stripe and Link each time we send an email. To make sure each email goes only once, we keep one-way hashes, never the address or reference itself:

A keyed hash can't be turned back into your address. When you ask for a plan link, the address you type is sent to Stripe to look up your purchase; we don't store it, and we keep a keyed hash of it for up to 3 days to limit repeated requests. When you ask us to email your plan from the preview, we use the address only to send that email; we don't store it, and we keep a keyed hash of it for up to 3 days to limit repeated requests (and, if you tick the box for tips and offers, for 8 days, as described below). To stop abuse of these forms, Cloudflare also limits how many requests one IP address can make, and for "Email me this plan" we count requests per IP address for up to 3 days, using a keyed hash of it; we don't store IP addresses.

Tips and offers. If you tick "Send me dinner tips and offers" and then confirm with the button in the email we send you, we keep your email address, your country (US or UK) and when you confirmed, so we can email you dinner tips and Dinner Plan offers now and then. If you don't confirm within 7 days, we keep nothing about you except the 8-day record below. Our legal basis is your consent. If you leave our checkout without paying, one of these emails may be a single reminder, a few hours later (at most about a day), with the first dinners of your plan, its estimated total compared with your budget and a link back to it. Before we send it, we look up your address in Stripe to check that you haven't already bought from us. To send it, when you tick the box (even before you confirm) or if you've already confirmed, we keep a one-way hash of your plan link next to the keyed hash of your address for 8 days, and a keyed hash of your address for 40 days, so we send you at most one such reminder in 40 days. Every such email has a link to unsubscribe; when you unsubscribe, we delete your address and keep only the keyed hash so we can respect your choice. Otherwise we delete it 2 years after you confirmed.

Reminders after you see your plan. Some visitors are asked where to send their week before their plan opens. If you give your email there and don't tick "Don't email me reminders or offers", and you haven't started a subscription or trial, we may send you up to two reminders about the plan you built, about one and three days later, with its dinners, its estimated total and the price and trial terms. If you signed up for tips and offers on your preview (above), the same two reminders may come under that sign-up. Together with the reminder after checkout above, you get at most two such reminders in 10 days, even if you build a new plan. For a fair test, about one in five people who could get them don't get them; we only count that and, the same way for everyone, whether they later start a subscription or trial. To send them and to count the result we keep your email address, your encrypted plan link, your country (US or UK), when you gave the address and which reminders we sent, for 10 days, then delete them (the address sooner if we won't remind you); before each one we check with Stripe that you haven't bought from us. Every reminder, and the email with your plan, has a link to stop them; when you use it we delete your address and keep only the keyed hash so we can respect your choice. In the UK our legal basis is the "soft opt-in" for people who asked about our service (Privacy and Electronic Communications Regulations, regulation 22(3)); in the US, our legitimate interest in following up on a plan you asked for, with the right to say no at any time. We don't send them if your answers include health-related choices.

Cloudflare sends our emails as our processor. It keeps delivery records (recipient, subject and whether the email was delivered) for up to 31 days, and a list of addresses that bounced or reported our emails as spam so they aren't emailed again. Our promotional emails (today, the reminders after you see your plan or leave checkout and the one invitation to come back) are sent instead by Postmark (AC PM LLC, part of ActiveCampaign) as our processor. Postmark keeps each email and its delivery records for up to 45 days, and a list of addresses that bounced, reported its emails as spam or unsubscribed, so they aren't emailed again. Our emails contain no tracking pixels. Links in them carry the type of email and your country (US or UK). Links to your plan carry the same private checkout reference as your plan link; the link in a plan-link email carries it encrypted and stops working after 24 hours; the link to turn off weekly emails and the unsubscribe link in promotional emails carry the keyed hash of your address; the links in the reminders after you see your plan or leave checkout and in the invitation to come back carry your encrypted plan link or answers, like the link to your plan preview. The link in an "Email me this plan" email carries your encrypted plan link, like the preview page, and the button to confirm tips and offers carries your address encrypted and stops working after 7 days.

Cookies, the Meta pixel and the Google Ads tag

In the UK, and when we can't tell which country you're in, this site sets no cookies and loads no third-party scripts until you choose Accept. In the US, if we're running Google search ads, the Google Ads tag described below is on unless you opt out. Your browser remembers your cookie choice so we don't ask again, unless we start asking about something new, such as session recordings.

On our front page and switching page, your browser keeps two small notes on your device so the email window doesn't keep coming back: when you closed it or that you used it ("dp_eposta_pencere"), and that you've started the quiz ("dp_quiz_basladi"). They aren't sent to us, and you can clear them in your browser settings.

On your plan page, your browser also keeps a few things on your device so the page works the way you use it: which list items you've marked as bought or as already at home, the encrypted settings from changes in your own words, a copy of your plan and of the site's files so your plan and recipes open without a connection, whether you closed the home screen tip, how many times you've seen the first-week steps or that you closed them ("dp_etkin_" with a short code made from your plan link), and, if you add the plan to your home screen, the link to your plan so the home screen app can open it, and that the home screen app has been opened once (so it's counted once). These stay on your device and aren't shared with anyone; the saved plan link is used only to load your plan from our server, as your link always is. Clearing this site's data in your browser removes them.

On our recipe pages, your browser remembers whether you chose US or UK prices ("dp-tarif-ulke"). When you buy a gift to hand over yourself, the name and message for the printable card stay in that browser tab until the thank-you page shows the card ("dp_hediye_kart"), and when you redeem a gift code, the code stays in that tab until your plan starts or you remove it ("dp_hediye"). None of these are sent to us beyond what you submit, and closing the tab clears the two gift notes.

If we're running ads, we may use the Meta pixel. In the UK, and when we can't tell which country you're in, we ask first with a short cookie choice at the top of the page. In the US there's no cookie choice for ads (only for session recordings, below): a short notice and a "Do Not Sell or Share My Personal Information" link at the bottom of each page let you opt out. Only if you choose Accept, your browser loads Meta's script, which sets Meta cookies and tells Meta that you visited, viewed your plan preview, started checkout and, if you buy, the amount and currency. When you accept and then buy, our server may also tell Meta about the purchase directly (Meta's Conversions API), including a one-way hash of your email address so Meta can match it to an ad. Meta uses this to measure and improve our ads; we and Meta are joint controllers for collecting and sending it, and Meta's own use is covered by Meta's privacy policy. Our legal basis is your consent. You can change your choice any time with "Cookie settings" (UK) or "Do Not Sell or Share My Personal Information" (US) at the bottom of each page. If your browser sends a Global Privacy Control signal, we treat it as a Reject and an opt-out.

If we're running Google search ads, we use the Google Ads tag to count which ads lead to a plan preview and a purchase. In the UK, and when we can't tell which country you're in, it loads only if you choose Accept. In the US it loads unless you opt out with "Do Not Sell or Share My Personal Information" or your browser sends a Global Privacy Control signal. When it loads, your browser loads Google's script, which sets Google cookies (such as _gcl_au, and _gcl_aw if you arrived from a Google ad) and tells Google that you visited, that you opened your plan preview after the questions and, if you buy, the amount and currency and a one-way hash of your checkout reference so the purchase is counted once. Google sees the page address without its private parts: never your plan link's code or your checkout reference. We don't send your email address, your answers or your plan to Google, and ad personalisation is off. Google uses this to measure our ads, as an independent controller under its Google Ads Controller-Controller Data Protection Terms; see how Google uses information from sites that use its services. Our legal basis is your consent in the UK. If you reject or opt out later, the tag stops measuring and we delete the Google cookies set on our site; cookies Google sets on its own domains are covered by Google's own settings.

We use PromoteKit (PromoteKit, Inc.) to credit a partner and pay their commission when you arrive through one of our partners' links; its script can load on our pages even when you didn't, but it only records a partner when you came through their link. In the UK, and when we can't tell which country you're in, its script loads only if you choose Accept; in the US it loads unless you opt out with "Do Not Sell or Share My Personal Information" or your browser sends a Global Privacy Control signal. It sets a promotekit_referral cookie on our site that remembers which partner sent you, for up to the partner's referral period, and tells PromoteKit the partner's code from the link. If you then buy, we add that referral ID to your Stripe checkout so PromoteKit, which reads our Stripe payments for this as our processor, can work out the commission; it sees the purchase amount and date and the email address on the payment, not your answers or your plan. Our legal basis is your consent in the UK and our legitimate interest in paying our partners in the US. If you reject or opt out later, we delete the cookie. Partner codes you type yourself work without any cookie.

Session recordings. If we're running them, we use PostHog (PostHog Inc.) as our processor to record how our pages are used: where you tap or click, how you scroll, which pages you open and what the page looked like, with your browser and device type, screen size, language and time zone, so we can see where people get stuck and fix it. It only starts if you choose Accept: in the UK, and when we can't tell which country you're in, in the cookie choice at the top of the page; in the US, in a short choice that asks only about recordings. A Global Privacy Control signal from your browser, Reject, or "Do Not Sell or Share My Personal Information" turns it off. Anything you type (including your email address and your note) is hidden before it leaves your browser. Recording stops when the questions reach diet, for everyone, so it never includes your diet and health choices, the things you leave out, your note or the week we build for you in the questions; it also never includes the "Built for" summary of your answers, the diet tiles on our front page (recording stops on that page when you tap one), the payment form, your plan page, gift codes or your checkout reference, and if you chose a diet, left something out or wrote a note, the words and pictures on your plan preview are hidden too. We send PostHog only the recordings, no separate analytics events. Page addresses are recorded without their private parts: only the page and the ad it came from. The recording goes through our own site, so PostHog doesn't see your IP address, and it's stored in the EU (Frankfurt). PostHog's script runs from our site and keeps a random session ID in this browser tab only (cleared when you close it); it doesn't keep any cookies. We keep recordings for 30 days, then PostHog deletes them. Our legal basis is your consent. You can change your choice any time with "Cookie settings" at the bottom of each page; we then stop recording and delete what PostHog's script kept in your browser. PostHog Inc. is a US company; any access to the recordings from the United States is covered by the EU Standard Contractual Clauses with the UK Addendum in our data processing agreement with PostHog.

Your supermarket

If we offer it, the quiz asks where you shop. Your answer (for example "Kroger" or "somewhere else") is encrypted into your plan link with your other answers and helps us price your week.

For some supermarkets we can use their own prices. To find your store, you type a ZIP code or, if you tap "Use my location", let your browser share your location, which we round to about 1 km (0.6 miles) before it leaves your device. Your browser asks you first, and only when you tap the button. Our server sends the ZIP code or rounded location to that supermarket's store finder only to find stores near you (if that fails, it tries once more), and doesn't keep it, log it or count it. The store you pick is kept only in this browser tab (it's gone when you close the tab) and is sent with each price request: our server asks that supermarket for the current prices of the ingredients on your list at that store, and doesn't keep the store or the answers longer than the supermarket allows (at most 24 hours, in memory). These requests carry ingredient names and the store, nothing about you.

If you choose to add your list to your supermarket cart, you sign in on the supermarket's own site, and it gives our server a one-time permission to add the items you asked for. We use it once to add those items and don't store it or anything from your supermarket account. Links to a supermarket take you to its site, where its own privacy policy applies. Some links are affiliate links: the supermarket or its affiliate network may use a cookie to record that you came from us, and we may earn a commission on what you buy. Your price stays the same.

The anonymous daily totals above also count which supermarket people choose, how often the cart button is used and whether adding to the cart worked, how many paid plans chose each supermarket, and how often we couldn't get a supermarket's prices.

Hosting

The site runs on Cloudflare, which processes standard technical data such as IP address and browser type to deliver pages and protect the site from abuse, as our processor. We have switched off request logs. Cloudflare tells our server which country a request comes from; we use it to check that we can sell to you, to choose which cookie and privacy choices to show you and, reduced to US, UK or other, in the anonymous daily totals above; we don't store the country itself. Cloudflare also tells our server which network a request comes from (for example, Google's or a cloud provider's); we use it only to keep automated visits, such as search engine and ad-review crawlers, apart in those totals, and don't store it.

Who we share data with

We don't sell personal data. Stripe, Cloudflare, Postmark, Meta and Google are based in or transfer data to the United States; we rely on the UK Extension to the EU-U.S. Data Privacy Framework or the UK's International Data Transfer Addendum for these transfers. Our contract with Anthropic is with Anthropic Ireland, Limited; Anthropic may process your note in the United States under the EU Standard Contractual Clauses and the UK Addendum in its Data Processing Addendum.

Your rights

Under UK data protection law you can ask to access, correct or delete your personal data, to restrict or object to how we use it, or to get a copy. You can withdraw consent to the pixel, the Google Ads tag and session recordings at any time, turn off the weekly emails with the link in any of them, and unsubscribe from tips and offers at any time. You can also object to marketing emails at any time, with the unsubscribe link in the email or by writing to us, and we'll stop. US residents have similar rights under their state's law, including the right to opt out of "sharing" for advertising; the "Do Not Sell or Share My Personal Information" link, Reject in the cookie choice or a Global Privacy Control signal does this. Email hello@escapeplan.software; we reply within one month. You can complain to the UK Information Commission (ico.org.uk).

You can withdraw your consent to health-related answers at any time (see "Health-related answers"). If you live in a US state with a privacy law that applies to us, such as Connecticut, you can also ask to correct your data or get it in a portable format, and if we refuse a request you can appeal by replying to our answer; we'll respond to an appeal within 45 days and tell you how to contact your state Attorney General if you disagree.

Children

Dinner Plan is for adults; you must be 18 or over to buy.

Changes

When we change this notice we update the date at the top. If a change affects how we use your data, we'll say so here before it applies.