Privacy Notice

Phill early-access trial · last updated 28 August 2026

Phill is a pre-launch app being trialled with a small group. This note explains, in plain English, what we collect and how we handle it during the trial. Questions, or a request to see or delete your data: support@phillmybasket.com.

Who we are

The data controller is PHILL LTD, registered in England & Wales, company number 17365809, registered office 6 Westbourne Drive, Wilmslow, SK9 2GY.

If you join the waitlist

If you give us your email on our home page, we store only that email address and use it solely to let you know when Phill opens up. We don't profile you, share it, or send marketing about anything else. Ask us any time and we'll remove you.

What we collect

• Your account, the email and password you sign up with.
• Your preferences & plan: diet, budget, household, kitchen items, meal plan, recipe ratings and any feedback you send.
• Calendar events, only if you connect a calendar link. Read-only; we never write to your calendar.
• Fridge/pantry photos, only when you scan. Sent to AI for analysis, then discarded, we do not store your photos.
• A notification address for your device, only if you turn reminders on. See below.

If you turn on reminders

Turning reminders on stores a push subscription for that device: a web address your browser gives us, plus two keys used to encrypt the message so only your device can read it. It contains no name, email or location, but it does identify a device, so we treat it as your personal data.

• It's stored against your account only, and is never shared or sold.
• We use it for one thing: sending you the reminders described in the app.
• Reminders are sent on a schedule: one in the late afternoon about that day, and one on a Sunday evening about the week ahead. At most one notification per run, and none at all when there's nothing worth telling you.
• Turning reminders off in the app deletes it straight away. Uninstalling the app or clearing your browser data also ends it, and we delete the record the next time a send fails.

How we use it

• To plan your meals and run the app's features for you.
• Some features (chat, photo scan) send your text or image to Amazon Bedrock (Claude) to generate a response.
• When you connect a calendar, the titles of your entries are sent to Amazon Bedrock (Claude) once, so Phill can tell a meal out from a meeting and a bin-day reminder from a holiday. Only the titles go: never the dates, times, locations, attendees, notes or which calendar they came from. The answer is used to plan your week and then discarded, so we do not store it. If this is unavailable Phill falls back to using only the times, and your calendar still works.
• Aggregate, non-identifying usage (e.g. how many people signed up, average ratings) helps us judge whether to keep building.
• We do not sell your data or share it for advertising.

How we measure whether Phill works

We use PostHog to count how the app is used, so we can see where people get stuck. It is set up to collect as little as possible while still answering that:

• We record named actions and counts only: that a week was planned and how many meals were in it, that a shop was built and roughly what it totalled. We never send your recipes, your meal plan, what is in your kitchen, your chat messages or your photos.
• You are identified by the random account id Amazon Cognito gave you, never your email or your name. We have deliberately turned off automatic click tracking, session recording and IP collection.
• Nothing is stored on your device. No analytics cookies, so there is nothing to consent to and no banner to dismiss. If your browser sends a Do Not Track or Global Privacy Control signal, we don't start it at all.
• Data goes to PostHog's EU region. PostHog acts as our processor. You can switch this off for your account in Account → Privacy, on every device, at any time.

Where it's stored

On Amazon Web Services in the UK (London / eu-west-2): accounts in Amazon Cognito, your data in Amazon DynamoDB. AWS acts as our processor.

Usage measurement is held by PostHog in the EU, as described above. Those are the only two processors we use.

Your choices & rights

• You can disconnect a calendar, turn reminders off, or delete items any time in the app.
• Under UK GDPR you can ask to access, correct or delete your data, email us and we'll action it.
• As this is a trial, data may be deleted when the trial ends.

Good to know

Phill is a demo: there are no real purchases or payments, prices are estimates, and suppliers/prices are illustrative until retailer integrations are in place.

This notice will be expanded into a full policy before any public launch.