← Plenty

Privacy Notice

Last updated 2026-10-10

This notice explains how Plenty ("we", "us", the "Service") collects and uses your personal data. Plenty is the data controller for information you provide through the Service.

What we collect

  • Account: email, hashed password, optional display name.
  • Kitchen data: pantry items you add, freshness outcomes, recipe interactions, preferences (diet, household size, region, dislikes).
  • Voice input: short audio clips you record are transcribed by our AI provider and then discarded — we do not store audio.
  • Usage & telemetry: counters for AI and voice calls (for plan limits), basic error logs, IP address at request time.
  • Support & feedback: anything you submit via the in-app "Report an issue" button.
  • Optional analytics: with your consent, referral and campaign sources, approximate location, device and browser, pages visited, visit duration, and masked session replays. Visits are associated with an anonymous browser ID and, when signed in, your internal account ID. We do not send your email, kitchen contents or input text to PostHog. Replay text and sensitive attributes are masked; images, audio, video, canvas and payment frames are blocked. Network bodies, headers and console logs are not recorded.

Why we use it

  • Provide the core Service (contract).
  • Personalize recipes and freshness advice (contract, legitimate interest).
  • Prevent abuse and enforce plan limits (legitimate interest).
  • Understand visitor journeys and improve the Service (consent, for optional analytics).
  • Fulfil legal obligations related to payments and tax (legal obligation, via Paddle).

Who we share it with

  • Supabase & Cloudflare — hosting and database.
  • Lovable AI Gateway — LLM, speech-to-text, and text-to-speech providers under a subprocessor arrangement.
  • Paddle.com — Merchant of Record for all payments, subscription management, invoicing, and tax compliance.
  • PostHog — optional product analytics and masked session replay, only after you accept analytics. The default analytics region is the EU.
  • Professional advisers & authorities — only where legally required.

International transfers

Data may be processed in the US or EU depending on where our processors run their infrastructure. Where required, we rely on Standard Contractual Clauses or adequacy decisions.

Retention

We keep your data for as long as your account exists. You can delete your account any time from Profile → Danger zone. Deletion is immediate and irreversible; some aggregated, non-identifying metrics may be retained.

Your rights

Depending on your jurisdiction you have rights to access, rectify, delete, restrict, object, or port your data, and to withdraw consent. Use the "Export my data" and "Delete my account" controls in Profile, or contact us via the report button. EEA/UK users may also complain to their supervisory authority.

Security

We use encryption in transit (HTTPS) and at rest, row-level authorisation so each account can only read its own data, and hardened service credentials. No system is perfectly secure; if a breach affects you we will notify you as required.

Cookies & analytics

Choosing “OK” in the cookie banner gives permission for optional PostHog analytics and masked session replay. Choosing “Reject” keeps both off. Plenty works with either choice. Opening this explanation does not give consent.

  • Essential storage: keeps you signed in, remembers your app preferences, and saves your cookie choice in this browser.
  • Optional analytics: measures referral and campaign sources, pages viewed, device and browser, and visit duration. PostHog uses a browser identifier; signed-in visits are linked to your internal account ID. We use the EU PostHog region.
  • Masked replay: records how you move around the app to help us understand problems. Text, inputs and sensitive attributes are hidden; images, audio, video, canvas and payment frames are blocked. We do not record console logs or network bodies and headers.

If aggregate traffic counting is enabled, we count requests to public pages by UTC day, page, referral domain and short campaign label to understand demand and service reliability. These counts contain no visitor identifiers, account IDs or IP addresses. They cannot reconstruct individual visits. Counts are kept for up to 90 days of active collection. This collection is separate from optional PostHog analytics.

We use essential cookies and localStorage entries to sign you in and remember preferences. If you accept analytics, PostHog also stores a browser identifier in cookies and localStorage. Analytics and session replay remain off until you accept. You can withdraw consent below; this stops future analytics and recording and clears PostHog's stored identifiers in this browser. Withdrawing consent does not delete previously collected events. We do not run advertising trackers.

Contact

Use the in-app report button or reply to any Plenty email.