Privacy Policy
Last updated: September 2026
Grocerplan (“we”, “us”) is a meal-planning web app at grocerplan.com; mobile apps may follow. This policy explains what we collect, why, who processes it for us, and the controls you have. It covers the website, the app, and the emails we send. Grocerplan is operated from the United States. Our
Terms of Service govern your use of the service.
1. Information you give us
•
Account. Your email address and a password. Authentication is handled by Supabase Auth. Sign-in with Google or Apple is not offered.
•
Profile and preferences (from onboarding and your Profile): a display name, diet types, allergens, dislikes, household size, and a calorie target. Optionally, your ZIP/postal code, SNAP/EBT budget details, and body metrics (height, weight, birth date, sex, activity level), which we use only to set your nutrition targets.
•
Things you create: meal plans and their slots, shopping lists and items, pantry items, recipe favorites, ratings, comments, cook logs, and optional cook photos (stored in Supabase Storage).
•
Recipes you import: the recipe text or link you paste.
•
Settings: scheduled-order settings and email preferences, and — only if you connect a Kroger account — your Kroger store selection.
2. Information collected automatically
•
Usage events. Which pages and features you use. When you are signed in, these events are tied to your user id.
•
Instacart handoff records. When you use “Shop on Instacart” we record the shopping-list link we created, the time you left, the retailer you selected, and the time you returned.
•
Server logs. Our host (Vercel) keeps standard request logs: IP address, browser type, requested URL, and timestamp.
•
Analytics. We use Plausible, which is cookieless and does not store personal identifiers. Google Analytics 4 also loads on grocerplan.com and may set cookies or identifiers. We do not currently show a cookie-consent banner. You can opt out of Google Analytics with
Google’s browser add-on.
3. How we use your information
•
To generate your meal plans and shopping lists and tailor them to your diets, allergens, dislikes, household, budget, and calorie target.
•
To build an Instacart shopping-list page, or add items to your Kroger cart, when you ask us to.
•
To send account emails (for example sign-in and password messages) and, if you leave it on, the weekly digest.
•
To understand how the service is used and improve it, keep it secure, prevent abuse, and meet legal obligations.
We do not sell your personal information, and we do not profile you based on your interactions with Instacart.
4. Service providers who process data for us
Each provider receives only what it needs to do its job for us:
•
Supabase — database, authentication, file storage, and edge functions (US region).
•
Vercel — hosting and CDN; keeps request logs.
•
Resend — delivers our account emails and the weekly digest, sent from hello@grocerplan.com.
•
Plausible — cookieless analytics.
•
Google Analytics 4 — analytics; may set cookies or identifiers (see section 2).
•
OpenRouter / Anthropic-hosted models — parse the ingredients of recipes you import. They receive recipe text only, never your personal data.
•
Instacart Developer Platform — when you use “Shop on Instacart” we send ingredient names and quantities plus your selected retailer to create a shopping-list page. Checkout happens on Instacart and is governed by Instacart’s own privacy policy. Instacart® is a registered trademark of Maplebear Inc.
•
Kroger API — only if you connect a Kroger account: we store your Kroger OAuth token to add items to your cart and remember your store selection. Kroger handles pricing, payment, and fulfillment; we never see your payment details.
•
Stripe — we do not offer paid plans today. If we introduce them, payments would be processed by Stripe and we would never store card numbers.
•
Expo push notifications — mobile apps only; not used on the web.
5. Affiliate disclosure
When you check out on Instacart after using our “Shop on Instacart” link, Grocerplan may earn a commission from Instacart’s affiliate program (operated via Impact.com). This does not change your prices.
6. Share links
If you share a recipe, meal plan, or shopping list using a share link, anyone who has that link can view the shared content. Only share links to things you are comfortable making visible.
7. How long we keep your data
•
Account data is kept while your account exists.
•
After you delete your account we delete your data within 30 days, except for backups (which age out within a further 30 days) and records we are legally required to keep.
•
Usage and analytics events are kept for up to 24 months.
8. Your choices and rights
•
Delete your account at any time in the app: Profile → Delete Account. This removes your profile, meal plans, shopping lists, uploads, and your login. Some aggregate or anonymized usage rows may remain.
•
Weekly digest. Turn it off with the “Weekly digest email” switch in Profile, or use the unsubscribe link in any digest email.
•
Copy of your data. There is no self-serve export yet. Email us at hello@grocerplan.com and we will send you a copy.
•
Access, correction, deletion, and objection. Wherever you live, we honor CCPA- and GDPR-style requests to access, correct, delete, or restrict the use of your personal information. We may need to verify your identity first. We will not treat you differently for exercising these rights. We do not sell personal information.
9. Security
Data travels over HTTPS and is stored in a database protected by row-level security, so accounts can only read their own rows. Passwords are handled by Supabase Auth and are never visible to us. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as the law requires.
10. Children
Grocerplan is not directed to anyone under 18, and we do not knowingly collect personal information from them. If you believe a person under 18 has created an account, contact us and we will delete it.
11. Where your data is processed
We are based in the United States and our providers store and process data there. If you use Grocerplan from outside the United States, your information will be transferred to and processed in the United States.
12. Changes to this policy
When we change this policy we will post the new version here and update the “Last updated” date. For material changes we will make reasonable efforts to notify you, for example by email or a notice in the app.
13. Contact
Contact: hello@grocerplan.com