Privacy Policy

Last updated: September 5, 2026

This Privacy Policy explains how Plantrify ("Plantrify", "we", "us", or "our") collects, uses, and shares information when you use the Plantrify software, server, connector, and related services (the "Services"). Plantrify is designed for one household on one server. If you do not agree with this policy, do not use the Services.

Summary

• We collect the information you and your AI assistant put into your meal-plan folder, the credentials needed to connect an assistant, the grocery-retailer access you grant, and basic server logs.
• We use it to operate the Services for you: run commands against your folder, keep version history, derive shopping lists, and send a list to a grocery cart you chose.
• We do not sell your information or use it for advertising. We share information with a grocery retailer only when you use a feature that talks to that retailer.
• Your folder is plain Markdown under version control. You can export or delete it at any time.
• We do not intentionally collect special categories of data such as health information. Please do not store it in the folder.

1. Information We Collect

Account and connection information. When you connect an AI assistant, we process an identifier for the household owner (provided by the hosting environment during sign-in), OAuth client registrations, authorization codes, and access tokens issued to your assistant.

Your meal-plan content. The Services store the files you and your assistant create in your folder: recipes, planned meals and dates, household preferences and notes, pantry entries, generated shopping lists, and configuration files. This folder is a git repository, so we also retain a history of changes and the command line that produced each change.

Grocery-retailer credentials. If you connect Kroger or Walmart, we store the access and refresh tokens that retailer issues, the store or location you select, and a record of what Plantrify sent to a cart. We do not receive or store your grocery-retailer password.

Technical and log information. The server records ordinary operational data such as request timestamps, IP address, and error logs, used to run and secure the Services.

We do not use tracking cookies. The only cookie the Services set is a signed session cookie used during the sign-in and grocery-connection screens.

2. How We Use Information

• to authenticate your assistant and authorize its access;
• to execute the commands your assistant runs inside the sandbox and to commit the resulting file changes;
• to derive shopping lists from your folder;
• to search a grocery retailer's catalog and add items to a cart when you use that feature;
• to maintain, secure, debug, and improve the Services;
• to comply with law and enforce our Terms of Service.

We process this information to provide the Services you requested, to pursue our legitimate interest in operating and securing them, and to meet legal obligations.

3. When and With Whom We Share Information

We do not sell your personal information and we do not share it for advertising. We share information only as follows:

• Grocery retailers. When you use a feature that connects to Kroger or Walmart, we send that retailer the product searches and cart additions needed to carry out your request, using the access you granted. That retailer's use of the data is governed by its own privacy policy.
• Hosting and infrastructure. The server runs on hosting infrastructure that necessarily processes data in transit and at rest on our behalf.
• Your AI assistant. The assistant you connect (for example, ChatGPT or Claude) sends and receives data through the connector. Its handling of that data is governed by the provider you chose.
• Legal and safety. We may disclose information if required by law or to protect the rights, safety, or property of Plantrify or others.
• Business transfers. If the Services are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

4. Where Information Is Processed

The Services are operated from the United States, and information is stored and processed there. If you use the Services from another country, you consent to that processing.

5. How Long We Keep Information

We keep your meal-plan folder and its history for as long as your connection is active or as needed to provide the Services. Access tokens are retained until they expire or you revoke the connection. Logs are kept for a limited period for security and troubleshooting. When information is no longer needed and we have no legal obligation to keep it, we delete it or render it unrecoverable.

6. How We Protect Information

The AI assistant operates only inside a restricted sandbox with no network access and no visibility into the host system or the server's environment. Grocery-retailer credentials and server secrets are held outside the sandbox and are never exposed to it. Secret files are stored with restrictive permissions, and traffic to the server is encrypted in transit. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

7. Children

The Services are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.

8. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, export, delete, or restrict processing of your personal information, and to object to certain processing. Because your content is stored as plain Markdown in a git repository, you can export the entire folder at any time in a standard, machine-readable form, and you can ask us to delete it. To make a request, contact us using the details below. We will not discriminate against you for exercising these rights.

California residents: we do not sell or share personal information as those terms are defined under California law, and we do not disclose personal information to third parties for their own direct-marketing use.

Do Not Track: the Services do not respond to browser Do-Not-Track signals, but they also do not perform cross-site tracking.

9. Automated Processing

The Services are driven by an AI assistant that you choose and control. It generates shopping lists, proposes products, and decides which commands to run based on your instructions. This output can be wrong and is informational only. We do not use your content to make legal or similarly significant decisions about you, and we do not use your meal-plan content to train models.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, provide additional notice where practical. Your continued use of the Services after an update means you accept the revised policy.

11. Contact

For questions or privacy requests, use the contact form.