First 500 households get 90 days free — dinner decided before you walk in the door.Try It Free

Privacy

Plenishly Privacy Policy

What information Plenishly collects, how your household data is protected, and how to export or delete your account.

Plenishly is run by Plenishly, Inc., a Wyoming corporation ("Plenishly," "we," "us"). This policy says what we collect, why, who else sees it, how long we keep it, and what you can do about it. It covers plenishly.com and the Plenishly app.

The short version: we collect what we need to plan your meals and run your account. We do not sell your personal information. We do not share it for advertising. You can export it and delete it.

Health-related details get extra rules. See the separate Consumer Health Data Privacy Policy at plenishly.com/legal/health-data-privacy.

1. What we collect

What you give us

  • Account: your email and a password (stored as a one-way hash by our authentication provider), your language, and your time zone
  • Household: the people in your household and what you enter about them, such as a name or nickname, an age group, dietary needs, allergies and food preferences
  • Plans and food: meal plans, recipes you save, pantry items, shopping lists, meal logs and the meal reminder times you choose
  • Money: grocery budgets and spending goals. If you use SNAP or EBT features, any balance you type in or that we read from a receipt photo you submit
  • Photos: receipt photos and food photos you submit. Progress photos you choose to send to a coach
  • Payments: handled by Stripe. We see your plan, billing period, payment status and the last four digits of a card. We never see or store your full card number
  • Messages and posts: what you write in community areas, to a coach, to a pair or cohort, and to our support team
  • Creators: your application, professional credentials, social profile links, follower counts, storefront content, and tax and payout details, which Stripe collects and verifies
  • Access plans: what you tell us to show you qualify for a reduced price, such as student, military, educator, first responder, medical or SNAP status

What we collect automatically

  • Device and security data: browser, operating system, IP address, and a hash of device details that we use to spot sign-ins from new devices. We keep the hash, not the raw details
  • Purchase data: the IP address at the time of a marketplace purchase, used to answer card disputes
  • Push notification token, if you turn on notifications
  • Approximate location, only when you use features that need it, such as finding stores or farmers markets. We do not track your location in the background
  • Usage data: which features you use and how often, limited to a fixed list of non-identifying fields. We do not send names, emails, health details or dollar amounts to analytics

From other sources

  • Stripe: payment, subscription and payout status
  • Someone who referred you: the referral code or link you came in through
  • Food, nutrition and grocery data providers: product and price data. We send them the food or product you search for, not your identity

2. How we use it

We do not use your information to show you third-party ads, to build profiles to sell, or to decide anything about you that has legal or similar significant effects.

  • To run Plenishly: build meal plans, lists and budgets, keep your pantry, send the reminders you ask for, and give you your account
  • To take payments, pay creators, and deal with refunds and disputes
  • To keep Plenishly safe: stop fraud, abuse, account takeovers and policy violations
  • To answer you and support you
  • To improve Plenishly, using the limited usage data above
  • To send email about your account and service. Marketing email only where you have not opted out
  • To follow the law and enforce our terms

3. Who we share it with

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We share it only as described here.

Service providers

These companies process information for us under their own terms and only to provide their service to us:

  • Supabase (hosted through Lovable Cloud): database, sign-in and file storage
  • Stripe: payments, subscriptions, creator payouts and identity checks for payouts
  • Resend: email
  • Google Firebase Cloud Messaging: push notifications
  • Google Maps and Places: store and market lookups
  • Lovable AI gateway, which routes requests to Google Gemini models: meal ideas, nutrition estimates and photo reading. See section 4
  • USDA FoodData Central, Spoonacular, Edamam, Open Food Facts and Kroger: food, nutrition and grocery price data
  • Mux: creator video hosting and playback
  • Cloudflare Turnstile: bot checks on sign-up, sign-in and public forms
  • Inngest: background jobs such as reminders and exports
  • PostHog: product analytics, where it is switched on, limited to the fixed list above
  • Slack: internal alerts to our team. They contain no health details

Creators

If you buy from a creator, they see the product you bought, a private identifier, and progress or check-in information that product uses. They do not see your email, your full account, your SNAP or budget data, or anything outside that product. If you message a creator or post in a creator's space, they see what you write.

Your household

People you add to your household can see shared plans, lists and pantry. Each person's own settings, such as reminders, stay theirs.

Legal and safety

We disclose information when the law requires it, to answer a valid legal request, to answer a payment dispute, to protect someone's safety, or to enforce our terms. If Plenishly is sold or merged, information may move to the new owner, who must honor this policy for it.

4. How the helper and AI features work

Parts of Plenishly use artificial intelligence models to suggest meals, estimate nutrition, read receipts and photos, and answer questions. When you use one, we send the model what it needs to answer: for example your question, pantry items, budget, dietary needs and allergies, or the photo you submitted. We do not send your name or email.

AI output can be wrong. It is not medical or dietary advice and it is not a promise that a food is safe. Always check labels, especially for allergies. See the Terms of Service.

We do not use your content to train our own models. Our model providers process it under their own terms to return a result to us.

You are told when you are using an AI feature. A person at Plenishly does not review your requests unless you contact support, or we are investigating abuse or a safety problem.

5. SNAP and EBT information

We do not connect to government benefit systems. A SNAP balance is information you type in or that comes from a receipt photo you submit. We use it only to plan meals within your benefit period. We do not share it with any government agency, advertiser or employer, and we do not sell it. You can delete it any time. Plenishly is not affiliated with or endorsed by USDA or any state agency.

6. Children

Plenishly is for adults. You must be 18 or older to have an account. We do not knowingly collect personal information directly from children, and we do not offer accounts to anyone under 18.

Parents and guardians can enter limited details about the children in their household, such as a nickname, an age group, allergies and food preferences, so that meals fit everyone. We use that information only to plan meals for that household. We do not use it for advertising or profiling, and we do not share it except with the service providers above. A parent can see, change or delete it at any time.

If a child has made an account, or you think we hold a child's information that a parent did not give us, write to privacy@plenishly.com and we will delete it.

7. How long we keep it

We keep personal information only as long as we need it for the reasons above.

  • Account and household data: while your account is open
  • When you delete your account: we cancel your subscription and delete your photos and personal records. Copies in backups are overwritten on our provider's regular backup cycle
  • Progress photos sent to a coach: deleted automatically after 90 days
  • Receipt photos: while your account is open. If you use the tax-flagging feature, up to 7 years, or until you delete them
  • Payment, tax, payout, dispute and fraud records: as long as the law or a legitimate need to defend a claim requires, even after you delete your account
  • Marketplace purchase records you made: kept so creators can be paid and disputes answered. They are separated from your profile where we can

8. Your choices and rights

Wherever you live, you can:

  • See and correct what you entered, in your account
  • Export your data: Profile, then Privacy. We email you a secure link
  • Delete your account: Profile, then Privacy
  • Turn off reminders and notifications: Profile, then Notifications
  • Opt out of marketing email with the unsubscribe link

If you live in California, Colorado, Connecticut, Virginia, Texas, Oregon or another state with a privacy law

You have the right to know and access what we hold, correct it, delete it, get a portable copy, and opt out of sale, sharing for targeted advertising and profiling. We do none of those three, so there is nothing to opt out of. We use sensitive information only to give you the service you asked for.

We treat a Global Privacy Control signal from your browser as a request to opt out, and we will not turn on analytics for it.

You will not be treated worse for using these rights.

To make a request, email privacy@plenishly.com from your account email, or use Profile, then Privacy. We may ask you to confirm it is you. We answer within 45 days. If we need more time we tell you why. You can ask someone to act for you if they have your written permission.

If we say no, you can appeal by replying to our answer with the word Appeal. We answer within 45 days. If you are still not satisfied, you can contact your state attorney general.

If you live in Washington, Nevada or Connecticut

Health-related information has its own policy and rights. See plenishly.com/legal/health-data-privacy.

California: Shine the Light

We do not share personal information with third parties for their own direct marketing.

9. Cookies and similar tools

  • Essential: keep you signed in and protect your account. These cannot be turned off and do not track you
  • Preferences: your language and similar settings, stored on your device
  • Analytics: PostHog, where switched on, with a fixed list of non-identifying fields. It is not used for advertising
  • We do not use advertising cookies or cross-site tracking

10. Security and breaches

We protect your information with encryption in transit, encryption at rest with our database provider, row-level security so each household sees only its own data, rate limits and bot checks on sign-in, new-device alerts, a 48-hour hold on changes to creator payout details, and limits on who at Plenishly can see data. No system is perfectly secure.

If there is a breach that affects your information, we will tell you and the authorities as the law requires, and in any case without unreasonable delay. Report a vulnerability to security@plenishly.com.

11. Where your information is processed

Plenishly is built for people in the United States. Your information is stored and processed in the United States. It is not designed for people in the European Economic Area or the United Kingdom. If you use Plenishly from elsewhere, you understand your information will be processed in the United States. If you are in the EEA or UK and want to exercise rights under local law, write to privacy@plenishly.com.

12. Changes

If we make a material change, we will email you and post a notice in the app at least 30 days before it takes effect. The date at the bottom of this page changes with every update.

13. Contact

Plenishly, Inc., Wyoming, USA

privacy@plenishly.com

Security reports: security@plenishly.com

Support: plenishly.com/support

Last updated: October 4, 2026