Security and your data

Last updated: 11 October 2026Where your data lives, how it is protected, how it is backed up, who can see it, and how you take it with you. Written for you to send to whoever asks.

Where your data lives

Peas & Pans runs on Cloudflare's platform: the application on Cloudflare Workers, the database on Cloudflare D1, uploaded files and backups on Cloudflare R2. The database runs on Cloudflare's network with its primary in the Asia-Pacific region, and reads are served from a copy near you.Every connection to the site, the app and the API uses TLS. Cloudflare states that all data stored in D1 and R2 is encrypted at rest with AES-256. We hold no server of our own.

Backups

The database keeps 30 days of point-in-time history, so a mistake can be undone to the minute. Separately, every table is exported every night to encrypted object storage, and those nightly copies are kept for 30 days.The USDA food database is not backed up, because it is rebuilt from the public source.

Who can see what

Your clients' pages open from a private link. The link carries a 256-bit random token that we store only as a hash. You can rotate a link in the app and the old one stops working. Client pages and plan pages are excluded from search engines.Passwords are stored as a scrypt hash. You can sign in with Google instead, and we never see your Google password. Sessions live in the database and end when you sign out.If you connect an AI agent, it gets only the permissions you approve, never your clients' intake answers, health details, weight, allergies or notes, and you can disconnect it in Settings at any time.Nobody at Peas & Pans reads your plans or your clients' records in the course of running the service. The exception is a support request from you that needs it, and then only what the request needs.

Cards and payments

We never see or store card numbers. Paddle, the merchant of record, handles checkout, invoices, tax and refunds.

Bots and spam

The sign-up, contact, newsletter and request forms carry a Cloudflare Turnstile check, so a form on this site is sent by a person. Sign-in attempts, link lookups and imports are rate limited.

Cookies and analytics

The public pages set no cookie of their own. Two exceptions, both first-party and both described in the privacy policy: a referral code from a link that ends in ?ref=, kept for 60 days, and a recipe you chose to save from the calculator, kept for 7 days so it can be put in the account you create.The app sets one session cookie, to keep you signed in.Analytics is Cloudflare Web Analytics: page views and performance per path, with no cookie, no fingerprinting and no cross-site tracking, which is why there is no consent banner. No advertising pixel is on any page.

AI

Recipe files you import are read by AI models running on Cloudflare Workers AI to pull out the ingredients, which are then matched to USDA data. Your content is not used to train any model.

What we are not

Peas & Pans is not HIPAA certified, has no SOC 2 report, and does not sign Business Associate Agreements. It is a tool for meal plans, not for medical records. Keep diagnoses, medications and clinical notes in the system you use for them, and put in Peas & Pans only what a meal plan needs: a first name and targets are enough.For the client data you enter, you are the controller and we are the processor under GDPR. We process it only to run the product for you.

Who else handles data

  • Cloudflare: hosting, database, file storage, email sending, AI models, the bot check and analytics.
  • Paddle: payments, invoices and tax.
  • Google: sign-in, only if you choose it.
Nobody else. There is no advertising network, no third-party analytics and no sales tool on the site.

Your data is yours

Export everything as a zip at any time from Settings. Close your account from Settings. The details are on Take your data with you.

Report a problem

Write to hello@peasandpans.com. If you have found a security problem, put "security" in the subject and we reply within two business days.