Privacy Policy

PlumTally is a cooking, recipe browsing, grocery planning, and shopping-support app. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

We try to collect only what we need to operate, secure, debug, and improve the service.

Account information: When you sign in or sign up, authentication is handled through Amazon Cognito and supported identity providers such as Google. Cognito may process your email address, authentication identifiers, and related login information. PlumTally's backend account record is designed to identify you by your Cognito subject ID rather than storing your email address as the primary user record.

App data: We may store information connected to your account or session, such as saved recipes, collections, menus, cart contents, grocery lists, selected stores, dietary preferences, language or market preferences, and other settings you choose in the app.

Support communications: Feedback and bug reports submitted through the in-app form are associated with your authenticated account and include the message, report type, approved app context, and tracking information. Authorized support operators may read these reports. Do not include passwords, payment details, or other unnecessary sensitive information.

Shopping integrations: If you connect a grocery or retail account such as Kroger, we may process the OAuth authorization response, linked account identifier, granted scopes, selected store, cart or grocery-list items, checkout links, and related sync status needed to provide that integration.

ChatGPT and Claude: If you use PlumTally from ChatGPT or Claude, we receive what the assistant sends to PlumTally, which can include your own words, such as search text or a meal bundle request. We also keep a connection record: which assistant you connected, when, and what was sent to Kroger from it.

Assistant tool-call record: For each action an assistant takes on your behalf through PlumTally, we keep a record of when it happened, which tool was used, which assistant it was (ChatGPT or Claude) and the app name and version the assistant reports about itself, the outcome, how long it took, counts that describe the result, structured details of the request such as party size and number of days, counts such as how many foods were excluded or avoided (never the foods themselves), an internal code that PlumTally assigns to link the steps of one task, and which version of PlumTally's assistant instructions was in use. The record is tied to your connection, not to your name or email. It never holds the words you or the assistant typed, including foods to avoid and ingredient names, store addresses, or the handles and other identifiers the assistant sends, apart from that internal code. Diet types such as halal, kosher, or vegetarian, main proteins left out, meal types, and sort order are only counted as anonymous totals, with no connection, session, or guest session recorded alongside them.

Assistant tool-call record without signing in: If you use PlumTally from an assistant without signing in, the same kind of record is kept, tied to that guest session. Browsing with no guest session is only counted in totals, with nothing tied to you.

Assistant feedback: Separately from in-app feedback and bug reports, an assistant may send PlumTally a rating of its own experience: 1 to 5 stars, a category, which tool and assistant, the version of PlumTally's assistant instructions, the day, and two short comments of up to 280 characters each that the assistant writes and is asked to keep free of personal details. The assistant may send it without asking you first, and is prompted to after a send to Kroger or when it is blocked. It is a rating of the assistant's experience, not of you. A rating from a signed-in connection is tied to that connection, and a rating from a guest is tied to no one.

Rate-limit codes: To limit repeat ratings, we keep a one-way code derived from the assistant's conversation identifier or your connection for about 48 hours. It is used for nothing else.

Usage and device information: We may collect basic technical information such as pages viewed, route templates, app version, locale, market, approximate browser environment, referrer domain, timestamps, and diagnostic events.

Cookies and browser storage: We use cookies, local storage, and session storage for authentication state, backend sessions, anonymous public sessions, language and market preferences, theme or UI preferences, cart recovery, recent searches or viewed recipes, Kroger link state, and analytics opt-out state.

We use information to provide and secure login, maintain sessions, personalize the app, save your recipes and carts, build grocery lists, support grocery integrations, remember preferences, operate checkout-support flows, debug issues, detect abuse, and improve the product.

We use support communications to review product feedback, investigate application bugs, protect the service from abuse, and improve reliability.

We may use aggregated or de-identified information to understand usage patterns and improve recipes, search, navigation, performance, and reliability.

We use assistant tool-call records and assistant feedback to measure whether PlumTally's assistant tools and instructions work, find failures, compare versions, and see which dietary and filter preferences are in demand so the catalog can grow there. The demand report reads those anonymous counts, and no connection or session is recorded with a preference. A connection's records are linked to each other for as long as they are kept, and the steps of one task, such as plan, store, review, and send, are linked by that internal code to see where it got stuck. No report shows the tie between a feedback rating and a connection. Authorized operators read internal reports, in which feedback comments appear as quoted text.

PlumTally may use Google Analytics and first-party analytics to understand how people use the app. Analytics may include page views, route templates, broad interaction events, device/browser context, approximate location derived from network information, and similar usage signals.

Our first-party analytics controls are designed to avoid sending raw emails, passwords, authentication tokens, full URLs with query strings, street addresses, raw search text, recipe text, product names, and other free-form user-entered content.

You can limit some analytics by using browser or device settings, blocking cookies, using privacy tools, or contacting us about available opt-out options.

If you enter dietary preferences, allergy-related filters, saved recipes, grocery lists, or similar information, we use it to operate app features. This information is user-provided preference data, not medical advice, diagnosis, or verified health information.

Dietary and filter choices made through ChatGPT or Claude, such as diet types, main proteins left out, and meal types, are also counted only as anonymous totals to improve the catalog, for example to see which diets are in demand and where to add recipes. Only choices from fixed lists are recorded, never words you or the assistant typed.

Do not use PlumTally as your only source for allergy, nutrition, food-safety, or medical decisions.

Service providers: We may share information with vendors that help us operate the service, such as hosting, databases, authentication, analytics, logging, monitoring, email, and infrastructure providers.

Identity providers: When you use Cognito or Google sign-in, those providers process login information under their own terms and privacy policies.

Grocery and retail partners: If you connect or use a grocery integration, we share the information needed to link your account, create grocery links, sync carts or lists, and complete the requested workflow.

ChatGPT and Claude: When you use PlumTally from an assistant, PlumTally's results go back to that assistant. OpenAI (ChatGPT) and Anthropic (Claude) handle them under their own terms and privacy policies.

Legal, safety, and security: We may disclose information if needed to comply with law, enforce our terms, protect rights and safety, prevent fraud or abuse, or respond to lawful requests.

Business transfers: If PlumTally is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.

We do not sell personal information, and we do not knowingly share personal information for cross-context behavioral advertising. If that changes, we will update this policy and provide any legally required choices.

We use reasonable technical and organizational safeguards designed to protect information, including HTTPS, managed authentication, and HttpOnly session cookies for backend session identifiers where appropriate.

No internet service is perfectly secure. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed.

We keep information for as long as reasonably needed to provide the service, maintain records, comply with legal obligations, resolve disputes, prevent abuse, support backups, and improve or secure the app.

In-app feedback and bug reports have a 180-day retention period. They are eligible for deletion after that period under the support-report retention process.

Meal bundles you build and the store you choose from ChatGPT or Claude are account data and are kept like the rest of your account. The connection record is kept until your account is deleted. The tool-call record does not hold the raw tool arguments an assistant sends to PlumTally, only the details listed in Section 2.

Unlike in-app feedback and bug reports, assistant tool-call records and assistant feedback, including the comments, have no age limit. Deleting your account deletes the tool-call records tied to your connection and removes the tie to your feedback ratings. The ratings and comments themselves stay, no longer tied to you. Records from guest sessions have no account to delete and are kept without an age limit, and guest ratings are tied to no one. Rate-limit codes are kept for about 48 hours.

When you disconnect an assistant, its access stops immediately, its access-token records are deleted, and its refresh-token records are marked revoked until they expire. Disconnecting does not delete its tool-call records or the tie to its feedback ratings. Deleting your account deletes those records and removes that tie.

You can update some account, preference, cart, collection, and store information through the app.

You can unlink supported grocery integrations, clear browser cookies or local storage, use browser privacy controls, or stop using the service.

You can contact us at socials@plumtally.com to request access, correction, deletion, or other help with your information. We may need to verify your identity before fulfilling certain requests, and some information may be retained where legally or operationally necessary.

Assistant records: Deleting your account deletes the tool-call records tied to your connection and removes the tie to your feedback ratings. Tool-call records from guest sessions and feedback ratings that are no longer tied to anyone cannot be found, so they cannot be provided, corrected, or deleted on request, and the anonymous totals cannot be provided or deleted because nothing ties them to anyone.

PlumTally is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us at socials@plumtally.com.

Depending on where you live and whether applicable privacy laws apply to PlumTally, you may have rights to know, access, correct, delete, or receive a copy of certain personal information, and to opt out of certain sales, sharing, or targeted advertising.

We do not sell personal information. To make a privacy request, contact socials@plumtally.com. We will not discriminate against you for exercising privacy rights that apply to you.

We cannot find assistant records that are not tied to anyone, as described in Section 8, so we cannot act on a request about them, and the anonymous totals cannot be provided or deleted because nothing ties them to anyone. There is no opt-out for the assistant tool-call record or assistant feedback.

The app may link to or integrate with third-party websites and services, including authentication providers, grocery retailers, checkout services, and delivery services. Their privacy practices are governed by their own policies, not this Privacy Policy.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new last updated date.

If you have questions or requests about this Privacy Policy, contact us at socials@plumtally.com.