Privacy Policy

We collect the following categories of information:

• Account information — your email address and a securely hashed password, or, if you sign in with Google, your name, email, and profile image.
• Meal-planning data — the prompts you enter, the plans we generate for you, meals you add or edit, your calorie and nutrition targets, favourites, and meals you mark as eaten or skipped.
• Assistant conversations — messages you send to Tilly, our in-app assistant, and a short note Tilly keeps of each conversation so she can remember it.
• Health needs you tell Tilly — if you mention an allergy, an intolerance or a condition (for example “low nickel” or “I'm diabetic”), Tilly keeps it with that conversation or plan so the recipes she suggests respect it. This is health information: we use it only for that, and you can remove it at any time by crossing it off.
• Photos you send Tilly — if you send a photo of a plate, fridge or ingredients, we keep a small copy (640 pixels, with no location or camera details) and a thumbnail with your conversation, together with the foods Tilly saw in it. We never keep the original.
• Payment information — if you subscribe to a paid plan, payments are processed by Stripe. We do not see or store your card details; we store only your Stripe customer and subscription identifiers and your plan tier.
• Technical and usage data — a hashed (non-reversible) form of your IP address used to prevent abuse of our free tier, essential cookies, an anonymous identifier for rate-limiting, and basic analytics about how the app is used.

• To provide and operate Plantilly — generating plans, saving them, tracking adherence, and powering the assistant.
• To process paid subscriptions and manage billing through Stripe.
• To protect the service and prevent abuse of free-tier limits.
• To improve our product and fix problems.
• To communicate with you about your account, security, or material changes to the service.

To generate meal plans and assistant responses, the prompts, messages and photos you submit — including any health need you tell Tilly — are sent to Google (Gemini) for processing, which may take place outside Australia. By telling Tilly about a health need, you agree to it being used this way, only to find food that suits you. Please keep other people out of photos. AI-generated content may be inaccurate and is not a substitute for professional advice (see our Terms and the in-app disclaimer).

We share limited data with trusted providers solely to operate Plantilly:

• Google (Gemini) — AI processing of prompts, assistant messages and photos.
• Supabase — database, authentication and photo storage (data stored in Australia).
• Stripe — payment processing for paid subscriptions.
• Vercel — application hosting and delivery.
• Serper and the USDA FoodData Central — recipe search and nutrition reference data.

We do not sell your personal information, and we do not use third-party advertising trackers.

Your account and plan data are stored in Australia (our database is hosted in the Sydney region). Some providers listed above may process limited data outside Australia; where they do, we rely on their contractual and security commitments.

• Inactive meal plans may be soft-deleted after around 90 days of inactivity.
• Assistant conversations, and the note Tilly keeps of them, stay with your account until you delete them or your account.
• Photos: the small copy is kept for up to a year (sooner if our storage runs short); the thumbnail and the list of foods stay with the conversation. Photos sent without an account are deleted after 7 days unless you sign in.
• Accounts inactive for around 365 days may be deleted, along with associated data.
• You can delete your account and everything in it at any time from your Account page, or ask us to (see “Your rights”).

Under the Australian Privacy Principles you may request to access, correct, export, or delete your personal information, and you may complain if you believe we have mishandled it. You can delete your account yourself from your Account page: your plans, pins, conversations, photos and settings are removed straight away, and a paid plan ends at once. To exercise any other right, use our contact form. If you are in the EU/UK or California, you may have additional rights under the GDPR or CCPA respectively; we honour those requests on the same contact.

We use only essential cookies: a secure session cookie to keep you signed in, and an anonymous identifier used to enforce free-tier rate limits. We do not use advertising or cross-site tracking cookies.

Passwords are hashed by our authentication provider, data is transmitted over encrypted connections (HTTPS), and access is restricted by row-level security so you can only reach your own records. No system is perfectly secure, but we take reasonable steps to protect your information.

Plantilly is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated to you.