Privacy · mli

Your Home Food Deli account

You connect it yourself, through Home Food Deli’s own sign-in. mli never sees your password.
mli stores the access token Home Food Deli issues, encrypted with AES-GCM, and uses it to read the menu and your orders, and to order, change or cancel lunch when you ask or when autopilot is on.
Disconnect, in the ⋯ menu on mli’s Home, deletes only that token. Orders already placed, your ratings and your preferences stay.

Your Slack user ID, handle and workspace.
Your preferences, and the stars, tags and notes you give dishes.
Which messages it sent you, and what autopilot ordered.
A log of what you do in mli, kept for a year: opening Home, each order placed through mli (the dish, the day, and whether it came from Home, the 8:15 DM, autopilot or Order my week), ratings and preference changes. Never what you type. Only the mli team reads it, to see what gets used.
Feedback you send.
Not your full order history: mli reads it from Home Food Deli when it needs it. Orders placed on Home Food Deli’s own site aren’t logged.

Slack permissions: chat:write, chat:write.public, commands, im:write. None of them can read messages or channels.
Colleagues see a dish’s average only once three other people have rated it, never who gave what.
Feedback is emailed to the mli team with your Slack handle.
Only dish names and categories go to OpenAI, to label diets and allergens.

One SQLite database on Railway. A daily copy is kept for seven days on the same volume.
To have everything about you deleted, ask through Send feedback in the ⋯ menu.