Privacy Policy

Last updated: August 29, 2026

1. What We Collect

We collect information you provide when using Plentish, including your email address, name, household data, meal plans, shopping history, and store location searches.

2. How Your Data Is Stored and Shared

Your data is stored in identifiable form so the service can work, and operators can access it as described in section 5. Anonymization applies to sharing and analysis: no individual user data is shared, sold, or made available to third parties in identifiable form.

3. How We Use Your Data

We use your data to provide and improve the Plentish service. That is all. We do not use your data for advertising, profiling, or any purpose beyond operating the platform.

4. Third Parties

We use third-party services to operate the platform (hosting, email delivery, database). No data is sold to third parties. Service providers are bound by their own privacy policies and data processing agreements.

5. Operator Access

Operators can view household data, including household names and member email addresses, for support and for running the service.

Two kinds of access are treated differently. Routine review of household information (the household list, a household's detail page, looking a household up by a member email address, and usage statistics) is ordinary operator access and is not recorded view by view. Opening a household's contents is different: every content inspection needs a typed reason and is recorded individually before anything is shown. That record names the areas the inspection session authorized, which are inventory, meals, meal plan, and shopping. It does not record which of those the operator then opened.

Receipt images, receipt text, and receipt line items are never shown through operator inspection.

6. Operator Action Records

Operator actions are written to a permanent record. Each entry holds its own record identifier and sequence number, the operator account that acted, what the action was, the household identifier and the household name as it read at the time, a small per-action detail (the previous and new resource tier, which feature changed and its previous and new setting, the areas an inspection session authorized, signup cap values and, when a malformed prior cap is repaired, the fact that the prior value was unreadable, and, for a staff permission change, the target account and whether access was granted or revoked), the typed reason, and the time.

These entries never contain email addresses, member names, or household contents. They are kept for accountability and are not removed when an account is deleted, which is the exception named in section 7.

7. Data Retention

Your data is retained while your account is active. If you delete your account or request data deletion, we will remove your data within 30 days, with one exception: the operator action records described in section 6 are retained for accountability.

8. Contact

Questions about your privacy? Contact us at privacy@plentish.co.