If you do not agree, please do not use the Service. You can contact us at any time at hello@grubplanit.com.
Who We Are
GrubPlanit is a US limited liability company. Our registered office address and full company details are available on request and at grubplanit.com. We are the data controller for personal information collected through the Service.
Age Requirement
The Service is intended for users aged 16 and older. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@grubplanit.com and we will delete the information promptly.
If you are between 16 and 18 (or the age of majority in your jurisdiction), you may use the Service only with the involvement and consent of a parent or guardian where required by law.
Information We Collect
3.1 Information you provide directly
- Account information: name, email address, and password (if you sign up with email), or the basic profile data shared by Apple or Google when you sign in using their services.
- Profile preferences: dietary requirements, cuisine preferences, household size, cooking skill level, and similar preferences you choose to share to personalize the Service.
- Saved content: recipes you save, ratings, and any notes or shared content you create.
- Communications: messages you send to us, including support requests and feedback.
3.2 Information we collect automatically
- Device information: device type, operating system version, unique device identifiers, mobile network information, and crash logs.
- Usage data: how you interact with the Service, including pages viewed, recipes tapped, search queries, time spent, and feature usage.
- Approximate location: with your permission, we use your approximate location to surface relevant restaurants nearby through our "Order it" feature. We do not track precise location continuously.
- Cookies and similar technologies: we and our service providers use mobile analytics SDKs to understand product performance. See Section 6.
3.3 Information from third-party sign-in providers
If you sign in using Apple or Google, those providers share basic profile information with us, such as your name and verified email address. We do not receive your password. You can review and revoke these permissions in your Apple ID or Google account settings.
3.4 Cookies
A "cookie" is a piece of information stored on your computer or cell phone. Although cookies are used for a variety of purposes, our website and mobile application only uses temporary "session" cookies that do not contain any personal information about you and they are automatically removed from your computer or cell phone once you leave our website and mobile application, close your browser, or perform no activity on the website and mobile application for a period of 20 minutes.
If you do not want cookies to be used while you are using the website and mobile application, you can deny or accept the cookie feature on your computer by using a simple procedure available in most browsers. However, if you block cookies, you may lose some website and mobile application functionality.
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service, including personalizing recipe recommendations and search results.
- Authenticate you and secure your account.
- Find nearby restaurants when you use the "Order it" feature (using approximate location and Google Places).
- Communicate with you about the Service, including service updates, security alerts, and support responses.
- Send promotional communications, where you have opted in. You can unsubscribe at any time.
- Detect, prevent, and address technical issues, fraud, or abuse.
- Comply with legal obligations and enforce our Terms of Service.
Legal Bases for Processing
Where applicable law requires it, we process your information on the following legal bases:
- Performance of a contract — to provide the Service you requested when you created an account.
- Legitimate interests — to improve the Service, prevent fraud, and protect our users, balanced against your privacy rights.
- Consent — for marketing communications, optional location use, and any processing where consent is required. You can withdraw consent at any time.
- Legal obligation — to comply with applicable laws and respond to lawful requests.
Third-Party Services and Sharing
We do not sell your personal information. We share information only as described below:
6.1 Service providers
We use trusted third-party providers to operate the Service. These currently include:
- Google Firebase / Google Analytics for Firebase — app analytics, crash reporting, and authentication infrastructure.
- Apple Sign in with Apple — authentication.
- Google Sign-In — authentication.
- Google Places API — restaurant discovery for the "Order it" feature.
- Hosting and cloud infrastructure providers.
These providers process information on our behalf under contractual obligations to protect your data. Their privacy practices are governed by their own privacy policies.
Our website or mobile application may contain links to other websites or mobile applications that are not under our control. We do not endorse any such websites or mobile applications, and this Privacy Policy applies only to your use of the Service. We have not reviewed the privacy policies of any third-party website or mobile application, and you should read the privacy policies of each website or mobile application you visit to determine what information about you that website or mobile application may collect and use.
6.2 Legal and safety disclosures
We may disclose information when required by law, valid legal process, or to protect the rights, property, or safety of GrubPlanit, our users, or the public.
6.3 Business transfers
If GrubPlanit is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality obligations.
Your Privacy Rights
Depending on where you live, you may have the following rights regarding your personal information:
- Access — request a copy of the information we hold about you.
- Correction — ask us to correct inaccurate information.
- Deletion — request deletion of your account and associated data.
- Portability — receive a copy of your data in a structured, machine-readable format.
- Objection or restriction — object to or restrict certain processing.
- Withdrawal of consent — withdraw consent for marketing or other consent-based processing at any time.
- Non-discrimination — we will not discriminate against you for exercising your rights.
To exercise any of these rights, email hello@grubplanit.com from the email associated with your account. We will respond within the time required by applicable law (typically 30 to 45 days).
If you are in California, you may also have specific rights under the California Consumer Privacy Act (CCPA), including the right to opt out of any "sale" or "sharing" of personal information; we do not currently sell or share personal information as defined under the CCPA.
Data Retention
We retain personal information for as long as your account is active and as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where we are required by law to retain it (for example, for tax, accounting, or legal compliance) or where we need to retain limited information to prevent fraud or abuse.
Security
We use industry-standard administrative, technical, and physical safeguards designed to protect your information. However, no system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
International Data Transfers
GrubPlanit is based in the United States. If you access the Service from outside the US, your information will be transferred to and processed in the United States and other countries where our service providers operate. By using the Service, you consent to these transfers. Where required by law, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers from the EU or UK.
Children's Privacy
As stated in Section 2, the Service is not intended for users under 16. We comply with the US Children's Online Privacy Protection Act (COPPA). If we discover that we have inadvertently collected personal information from a child under 16, we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email before the changes take effect. The "Last updated" date at the top of this Policy indicates when it was last revised.
Contact Us
If you have questions, complaints, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:
