Privacy

What we collect

When you Start or message us, we may collect: allergies, diet preference, home and work zips, usual stores, cook vs pick up preference, focus length, work hours and weekly schedule, meals you block and vacation dates, anything you tell us is already in your fridge or pantry, email and/or WhatsApp if you choose them, a household member’s email if you add one, and the content of messages you send (by email or with “Send us a message” on your private page). When you subscribe, Stripe handles payment — Two Ways does not store your full card number.

How we use it

To build your weekly cook-or-pick-up card, send it to you, show it on your private page (and on your household member’s week page, if you add one), run billing, and answer your messages. That’s it for day-to-day use.

Allergies, diet, schedule, blocked meals, vacation dates and pantry notes are used only to build your card. We don’t sell or share them. If you add a household member, they see your week: meals, times, restaurants, walk breaks and stop-work time. They never see your allergy list, diet name, profile or messages.

News and offers (optional)

The Start form has two optional boxes, both unticked: “Email me Two Ways news and offers” and “Text me Two Ways news and offers.” You don’t need either one to sign up. We only send news or offers if you tick a box. Unsubscribe anytime, or reply STOP to a text.

Your private My Two Ways page

Your week card, plan, profile and referral code are on a private page. You sign in with your email (an email link or Google sign-in). No password. Only you and the operator can open it. If you are on Plus or Ultra, you may add one household member. They sign in with their own email to a separate page that shows only your week and calendar, not your profile, allergy list, diet name or messages. Only you choose who. Only add someone who agrees to it. If you were added as a household member and want to be removed, ask the person who added you to remove you (they can use Send us a message on their private page), or use the privacy contact in the California privacy note below. Messages you send there are stored for us to read and are not visible to anyone else. Shopping-list ticks are saved only on your device.

Lost your link? On the Sign in page, enter your email and we’ll email the link to your private page. We use that email only to check whether it belongs to a Two Ways page and, if it does, to send the link to that same address. The page shows the same message either way, so it never tells anyone who is a customer. If the email doesn’t match, we don’t reply and we don’t add it to any list. We keep sign-in requests for up to 90 days to prevent misuse, then delete them.

Shopping-list ticks are saved only on your device and never sent to us.

If you leave the Start form before sending it, your answers are kept only in this browser on your device so you don't lose them while paying. They're deleted when you send your profile, or after 7 days if you don't, and they aren't sent to us until you send them.

You can download your week as a calendar file and add it to your own calendar. It holds your week’s meals, walk breaks, times and reminders, with cooking steps, restaurant details and links back to your private page (those links still ask you to sign in). Once it is in your calendar, your calendar app’s settings and privacy terms apply. If you share that calendar, the people you share it with can see those details. It does not include your allergy list, diet name, ZIP code or email.

Who sees your profile

Oscar (operator) and Compliance — Compliance reviews real client cards before send. We do not sell your data. We do not share your profile for ads.

Processors

• here.now: website host and sign-in for your private page and any household week page (your week card and calendar file are kept there); stores your Start profile, sign-in link requests and the messages you send us.
• Google sign-in / email link: confirms it’s you when you open your private page, or your household member when they open their week page (identity only).
• Stripe: payments. Your plan and renewal date on your page come from Stripe. Two Ways does not store your full card number.
• Gmail / Google Workspace: email.
• AI drafting tools: help us draft your card from your profile. Real client cards still go through Compliance before send.

If you choose text or WhatsApp for plan messages, a messaging provider delivers them.

How long we keep it

Past vacation date ranges are deleted from your profile within 30 days after they end.

We keep your profile while you are subscribed, and for a reasonable time after you cancel for support and legal needs. If you ask us to delete or anonymize what we hold, we will when it is feasible (billing records Stripe keeps may remain under Stripe’s rules).

We do not sell your data

No sale of personal information. No selling lists. No trading your profile for ads.

How to cancel

Use the Stripe customer portal or tap Send us a message under Help on your private page (Support). Cancel anytime — plans are billed monthly. Your plan stays active until the end of the month you’ve already paid for, and you won’t be charged again (no part-month refunds; see Terms).

Wherever you live, you can ask to see, correct or delete your data using the contact below.

California privacy note

If you live in California, you can ask to access, correct, or delete personal information we hold about you. Email oscar@losgonza.com. We’ll confirm within 10 business days and respond within 45 days.

SAMPLE / not medical

Public pages show SAMPLE planning. We are not a clinic and do not give medical advice. Allergy answers help us avoid foods you flag — they are not a medical allergy protocol.

Contact

Customers: Support — Send us a message on your private page. Privacy requests: see the California privacy note above.