Version 2026-09-20
Your children's details never leave your phone.
Names, ages, allergies, dislikes, the boxes you plan and the photos you add are stored on your device and nowhere else. There is no account, no sign-in, and no server holding any of it.
This policy explains what Lunchboxly stores, where it is stored, and the very small number of cases where anything at all leaves your device. It is written to be read, not to be survived. If something here is unclear, please ask us.
Lunchboxly is made in Australia. This policy is written with reference to the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Everything you enter is held in the app's own storage on your device:
None of this is transmitted anywhere. There is no account to create, nothing to sign in to, and no copy on any server we run — because we do not run one. We cannot see your data, recover it for you, or hand it to anyone else, because we never have it in the first place.
Delete the app and all of it goes with it. There is no backup we hold.
If you have iPhone or Android backups turned on, your device's own backup system may include Lunchboxly's data, in the same way it includes data from your other apps. That backup is between you and Apple or Google, governed by their terms, not ours. We have no access to it. If you would rather it were not backed up, that is a setting on your device, not in this app.
Lunchboxly is used by parents and carers, and the details it holds are about children — including allergies and dietary needs, which are health information and are treated as sensitive information under Australian privacy law.
That is precisely why the app is built the way it is. We do not collect this information, because it never reaches us. The protection is structural rather than a promise about how carefully we would handle it: there is no transmission path for it to travel along.
As at this version, Lunchboxly sends no usage data at all. The feature described below is built but not connected to anything — there is no analytics provider, and no data is transmitted, whether the setting is on or off.
We are telling you about it now rather than quietly switching it on later. The app has an anonymous usage reporting setting, found under Privacy in the menu, which arrives switched on and can be turned off at any time. The app works exactly the same either way.
When it is connected, the complete list of what it could ever send is:
The list is closed rather than illustrative. The app has no way to send anything outside it, and in particular no way to send:
If that ever changes, the version of this policy changes with it, and the app will ask you again.
If you paste a web address to import a recipe, the app fetches that page so it can read the recipe from it. This is the only outbound request Lunchboxly makes.
It goes directly from your phone to the site you typed. There is no proxy and no intermediary, which means no service of ours sees which recipes you look up — because none is involved. That website will see the request in the ordinary way any website sees a visitor, including your device's IP address. What it does with that is covered by its own privacy policy, not this one.
The page is read on your device, and the recipe is saved on your device.
You can put your own photo on a recipe. The app asks for permission to use your photo library or camera at the moment you first do it, and not before.
The photo you pick is copied into Lunchboxly's own storage on your device. It is never uploaded. Removing the photo deletes that copy.
There are none. Lunchboxly contains no advertising, no trackers, no social media integrations, and no third-party analytics. Nothing about you is sold, shared, or disclosed to anyone, because nothing about you reaches us to sell, share or disclose.
Australian privacy law gives you the right to access the personal information an organisation holds about you, and to ask for it to be corrected.
In our case the answer is unusual: we hold none. Everything Lunchboxly knows about you and your children is on your device, where you can see it, change it, and delete it at any time, without asking us. If you would like to make a privacy enquiry or complaint, write to [email protected] and we will respond as soon as we can. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
If this policy changes in a way that matters, its version changes, and the app asks you to read and agree to it again the next time you open it. Minor wording fixes that do not change what happens to your data may be made without a new version.