Privacy Policy

This Privacy Policy explains what information LuxCorp LLC, doing business as PocketPlanr ("we," "us," or "our"), collects, how we use it, and who we share it with. By using the Service, you agree to the collection and use of information as described here. If you do not agree, do not use the Service.

1. Information We Collect

We collect the following categories of information:

• Account information: your name, email address, and profile image, provided by Google when you sign in with Google, or your email address alone when you sign in via magic link.
• Meal planning inputs: dietary preferences, restrictions, servings, staples you already have at home, and how many meals you ask us to plan.
• Generated content: the meal plans, recipes, and shopping lists produced for you, and any recipes you save as favorites.
• Kroger connection data: if you connect a Kroger account, we store an access token and refresh token that let us search products and add items to your Kroger cart on your behalf, and the ID of the store you've selected. We do not receive or store your Kroger password, order or purchase history, payment method, or loyalty/ rewards data; none of that is ever shared with us by Kroger's login flow. We also don't store your selected store's name or address; we look that up from Kroger by its ID each time it's displayed, rather than keeping our own copy. Our Instacart, Target, Walmart, Whole Foods, and Sprouts integrations don't involve connecting an account at all. We generate a list or links for you to use directly on those retailers' own sites, so there's no credential or account data to store for them. PocketPlanr is not affiliated with, endorsed by, or sponsored by Kroger or any of its family of grocery banners, Instacart, Target, Walmart, Whole Foods, or Sprouts. See our Terms of Service for details.
• Usage data: how many AI meal-plan runs you've used, to enforce plan limits.
• Subscription and billing data: if you buy on our website, the purchase is sold through Link, a service of Stripe, which collects your payment details, name, and billing address directly (your address is used to calculate sales tax). We store only your subscription status, Stripe customer/subscription IDs, and renewal date. If you subscribe from our Android app, Google Play handles payment instead, and we store your subscription status, renewal date, and the purchase reference Google Play gives us. We never receive or store your card number either way.
• Contact form submissions: the name, email, and message you provide if you contact us.

2. AI Data Processing

When you request a meal plan or ask us to revise one, the preferences and content you provide (and the recipes/shopping list being revised) are sent to Anthropic's Claude API to generate the response. This is how the core feature of the Service works; there is no way to generate a meal plan without this step.

Based on Anthropic's standard commercial API terms, data submitted through the API is not used to train Anthropic's models. Anthropic processes this data solely to return a response to our request. We do not control Anthropic's infrastructure or retention practices beyond what their terms specify, and we encourage you to review Anthropic's own privacy policy for details.

Do not include sensitive medical information, government ID numbers, or other highly sensitive personal data in your preferences or chat messages. Describe dietary needs in general terms (e.g., "nut allergy," "low-sodium") rather than including unrelated personal or medical details.

3. Who We Share Information With

We share information with the following third parties, each solely to provide the Service:

• Anthropic: to generate and revise meal plans (see Section 2).
• Kroger: to search products and, only when you choose to, add items to your Kroger cart.
• Stripe (including Link): website purchases are sold through Link, a Stripe service that acts as the seller of record. It processes your payment, calculates and collects sales tax, sends receipts, and handles billing support, so it receives your email, name, billing address, and payment details directly under Stripe's privacy policy. We never see or store your card details.
• Google: if you sign in with Google, to authenticate you, and if you subscribe from our Android app, to process that purchase through Google Play.
• Resend: to deliver sign-in (magic link) emails and respond to contact form submissions.
• Neon and Vercel: our database and hosting providers, who store and process data on our behalf to run the Service.

We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes.

4. When Our Team Looks at Your Information

A small number of people at PocketPlanr can see account records through our internal support tools. Those tools can show the following about an account:

• Account details: your name, email address, when you signed up and last signed in, how you sign in (Google or email link), and when you accepted our terms.
• Subscription details: your plan, subscription status, and renewal date, whether you pay through Stripe or Google Play, and the reference IDs those services give us. Never your card number.
• Usage: how many meal plans, revisions, pantry recipes, and recipe imports you've used this week.
• Meal plans and saved recipes: the recipes in your meal plans (names, ingredients, and steps), the items on your shopping lists that come from those recipes, and how many recipes you've saved.
• Kroger: whether you've connected a Kroger account and whether you've picked a store.
• Email and messages: whether you've opted out of marketing emails, and any messages you've sent us through our Contact or account deletion pages.

We only review this information when you ask us to, for example when you contact us about a problem with your account, a meal plan, or a payment, or ask us to delete your account. The only exception is if we are legally required to. To run the Service, our tools also show a list of accounts (name, email, and subscription status) and overall totals, such as how many people signed up this week, but we don't open an individual account without a request.

Some of what you give us is never shown in our support tools at all: the text you type when you ask for a meal plan, your weekly essentials list (including any essentials added to a shopping list), and which Kroger store you've picked.

5. Data Retention

We retain your account information, saved recipes, and meal plan history for as long as your account is active, so you can revisit past plans and re-shop them. You can delete individual saved recipes and past plans from within the Service. To delete your account and all associated data entirely, use our account deletion page or contact us using the information in Section 9. We process deletion requests within 30 days.

6. Cookies and Similar Technology

We use a session cookie to keep you signed in. We do not use third-party advertising or tracking cookies. Your theme preference (light/dark) is stored in your browser's local storage, not sent to our servers.

7. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to certain processing. You can exercise most of these rights directly in the Service (removing favorites, deleting plans, disconnecting Kroger in Connections) or by contacting us; see Section 9.

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what categories of personal information we collect and how it's used (see Section 1);
• Know whether we sell or share personal information: we do not sell your personal information, and have not in the preceding 12 months;
• Request deletion of your personal information;
• Request correction of inaccurate personal information;
• Not be discriminated against for exercising any of these rights.

To exercise these rights, contact us as described in Section 9. We'll verify your request using your account email before acting on it.

European/UK Residents (GDPR)

If you are in the European Economic Area or the UK, our legal basis for processing your information is: performance of a contract (providing the Service you signed up for), and legitimate interest (securing the Service and preventing abuse). You have the right to:

• Access the personal information we hold about you;
• Rectify inaccurate personal information;
• Erasure ("right to be forgotten");
• Restrict or object to certain processing;
• Data portability (receive your data in a portable format);
• Lodge a complaint with your local data protection supervisory authority.

Some of the third parties described in Section 3 (including Anthropic, Stripe, and Google) process data outside the EEA/UK, including in the United States. Where that happens, we rely on the safeguards those providers make available, such as Standard Contractual Clauses. To exercise any of these rights, contact us as described in Section 9.

8. Children's Privacy

The Service is not directed to, and we do not knowingly collect information from, anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Contact

Questions about this Privacy Policy, or requests to access or delete your data, can be sent through our Contact page.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the effective date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.