Privacy Policy

PlumTally is a cooking, recipe browsing, grocery planning, and shopping-support app. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

We try to collect only what we need to operate, secure, debug, and improve the service.

Account information: When you sign in or sign up, authentication is handled through Amazon Cognito and supported identity providers such as Google. Cognito may process your email address, authentication identifiers, and related login information. PlumTally's backend account record is designed to identify you by your Cognito subject ID rather than storing your email address as the primary user record.

App data: We may store information connected to your account or session, such as saved recipes, collections, menus, cart contents, grocery lists, selected stores, dietary preferences, language or market preferences, and other settings you choose in the app.

Shopping integrations: If you connect a grocery or retail account such as Kroger, we may process the OAuth authorization response, linked account identifier, granted scopes, selected store, cart or grocery-list items, checkout links, and related sync status needed to provide that integration.

Usage and device information: We may collect basic technical information such as pages viewed, route templates, app version, locale, market, approximate browser environment, referrer domain, timestamps, and diagnostic events.

Cookies and browser storage: We use cookies, local storage, and session storage for authentication state, backend sessions, anonymous public sessions, language and market preferences, theme or UI preferences, cart recovery, recent searches or viewed recipes, Kroger link state, and analytics opt-out state.

We use information to provide and secure login, maintain sessions, personalize the app, save your recipes and carts, build grocery lists, support grocery integrations, remember preferences, operate checkout-support flows, debug issues, detect abuse, and improve the product.

We may use aggregated or de-identified information to understand usage patterns and improve recipes, search, navigation, performance, and reliability.

PlumTally may use Google Analytics and first-party analytics to understand how people use the app. Analytics may include page views, route templates, broad interaction events, device/browser context, approximate location derived from network information, and similar usage signals.

Our first-party analytics controls are designed to avoid sending raw emails, passwords, authentication tokens, full URLs with query strings, street addresses, raw search text, recipe text, product names, and other free-form user-entered content.

You can limit some analytics by using browser or device settings, blocking cookies, using privacy tools, or contacting us about available opt-out options.

If you enter dietary preferences, allergy-related filters, saved recipes, grocery lists, or similar information, we use it to operate app features. This information is user-provided preference data, not medical advice, diagnosis, or verified health information.

Do not use PlumTally as your only source for allergy, nutrition, food-safety, or medical decisions.

Service providers: We may share information with vendors that help us operate the service, such as hosting, databases, authentication, analytics, logging, monitoring, email, and infrastructure providers.

Identity providers: When you use Cognito or Google sign-in, those providers process login information under their own terms and privacy policies.

Grocery and retail partners: If you connect or use a grocery integration, we share the information needed to link your account, create grocery links, sync carts or lists, and complete the requested workflow.

Legal, safety, and security: We may disclose information if needed to comply with law, enforce our terms, protect rights and safety, prevent fraud or abuse, or respond to lawful requests.

Business transfers: If PlumTally is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.

We do not sell personal information, and we do not knowingly share personal information for cross-context behavioral advertising. If that changes, we will update this policy and provide any legally required choices.

We use reasonable technical and organizational safeguards designed to protect information, including HTTPS, managed authentication, and HttpOnly session cookies for backend session identifiers where appropriate.

No internet service is perfectly secure. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed.

We keep information for as long as reasonably needed to provide the service, maintain records, comply with legal obligations, resolve disputes, prevent abuse, support backups, and improve or secure the app.

You can update some account, preference, cart, collection, and store information through the app.

You can unlink supported grocery integrations, clear browser cookies or local storage, use browser privacy controls, or stop using the service.

You can contact us at socials@plumtally.com to request access, correction, deletion, or other help with your information. We may need to verify your identity before fulfilling certain requests, and some information may be retained where legally or operationally necessary.

PlumTally is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us at socials@plumtally.com.

Depending on where you live and whether applicable privacy laws apply to PlumTally, you may have rights to know, access, correct, delete, or receive a copy of certain personal information, and to opt out of certain sales, sharing, or targeted advertising.

We do not sell personal information. To make a privacy request, contact socials@plumtally.com. We will not discriminate against you for exercising privacy rights that apply to you.

The app may link to or integrate with third-party websites and services, including authentication providers, grocery retailers, checkout services, and delivery services. Their privacy practices are governed by their own policies, not this Privacy Policy.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new last updated date.

If you have questions or requests about this Privacy Policy, contact us at socials@plumtally.com.