PRIVACY AT GROCER-EAZE

Privacy policy

Effective August 4, 2026

Grocer-Eaze uses the information you provide to run your account, personalize meal planning, and deliver the plans you ask us to send. We do not sell personal information or use it for third-party advertising.

Information we collect

• Account information: name, email address, optional phone number, account role, and membership status.
• Household and planning information: household name, approximate shopping location, store preferences, family-member names or roles, food preferences, allergies or avoided ingredients, recipes, ratings, meal plans, and grocery lists.
• Billing references: Stripe customer, subscription, and status identifiers. Grocer-Eaze does not store full payment-card or bank-account numbers.
• Security and operations information: session identifiers, one-time-code records, rate-limit counters, request metadata, and error or performance events needed to protect and operate the service.

Food preferences and allergy entries can be sensitive. Only add information needed to plan meals, and do not enter medical records or emergency instructions.

How we use information

We use information to authenticate accounts, restore saved plans, apply family preferences, find recipes and nearby stores, create grocery lists and clean recipe links, send requested emails or calendar files, manage subscriptions, respond to reports, prevent abuse, and improve reliability.

Services that process information

Grocer-Eaze uses service providers only for the functions needed to run the product:

• Cloudflare hosts the application, database, security controls, and operational logs.
• Stripe processes subscriptions and billing.
• Resend delivers sign-in codes, plans, and support or privacy messages.
• Spoonacular and TheMealDB provide recipe search results. Search terms can include selected food preferences or avoided ingredients.
• Pexels provides fallback recipe imagery.
• OpenStreetMap services resolve typed or device-provided locations and find nearby grocery stores.
• Google Search receives the search terms only when you choose the optional “Search the web” link.

These providers handle information under their own terms and privacy policies. We do not give them Grocer-Eaze account passwords because Grocer-Eaze uses passwordless email verification.

Sharing and public links

Meal plans and grocery lists are shared only when you choose a recipient or open a text draft. Clean recipe-reader links contain random, unguessable tokens, are excluded from search indexing, expire after 90 days, and can be revoked from Account & security. Anyone who receives a live link can read that recipe, so share it only with people you trust.

Retention and deletion

• One-time sign-in codes expire after 10 minutes; signed-in sessions expire after 30 days.
• Rate-limit records are short-lived and expire after their protection window.
• Clean recipe-reader links expire after 90 days unless revoked sooner.
• Account and meal-planning data is kept while your account remains open, then removed when you use Delete account, subject to limited records that a processor or applicable law may require for billing, fraud prevention, or dispute resolution.

Deleting an account first attempts to cancel an active Stripe subscription so future subscription charges stop. Stripe and email providers may retain transaction or delivery records under their own legal and security obligations.

Security

Grocer-Eaze uses encrypted network connections, secure HTTP-only session cookies, hashed session and verification secrets, server-side access checks, owner-scoped database queries, request-size and rate limits, security headers, and private server-side service credentials. No online service can guarantee absolute security, so we also minimize what we collect and give you deletion and revocation controls.

Children and family profiles

Grocer-Eaze accounts are intended for adults. A parent or guardian may add limited food preferences for household members, including children, but children under 13 should not create their own account or submit personal information directly.

Your choices

You can edit account and family information, revoke clean recipe links, sign out, or permanently delete the account from Account & security. Use this form if you need a copy or correction of information, help with deletion, or have a privacy question.