NourishPlan — Privacy Policy

Effective Date: [TO BE SET AT LAUNCH] Last Updated: April 4, 2026 Entity: Greenbelt Labs LLC ("we," "us," "our")

1. Introduction

NourishPlan is a mobile application that delivers dietitian-designed meal plans and generates grocery lists for household use. This Privacy Policy describes how we collect, use, share, and protect your information when you use our mobile application, website (nourishplan.com), and related services (collectively, the "Service").

By using the Service, you agree to the terms of this Privacy Policy. If you do not agree, do not use the Service.

2. Information We Collect

2.1 Information You Provide

Account information: email address, name (optional)
Household information: number of people in your household
Dietary preferences: dietary goals (e.g., weight management, heart health), dietary restrictions (allergies, intolerances), diet type preferences (Keto, Mediterranean, etc.)
Grocery preferences: items you check off, preferred grocery store
Subscription information: payment processor identifiers (we do not store credit card numbers; payments are handled by Apple App Store, Google Play, or RevenueCat)

2.2 Information Collected Automatically

Device information: device type, operating system, unique device identifiers, mobile network information
Usage data: screens viewed, plans selected, features used, session duration
Crash and performance data: stack traces, app version, device state at time of crash

2.3 Information from Third Parties

If you connect your account to a grocery partner (Kroger, Walmart, Instacart), we may receive:

Your grocery cart identifiers
Product-matching results
Purchase confirmation events (for affiliate reporting)

We do not receive your payment card details, personal purchase history beyond the cart we pushed, or your full grocery account information.

3. How We Use Your Information

We use your information to:

Provide meal plans matched to your dietary preferences and household size
Scale grocery lists automatically based on household size
Push grocery lists to your chosen grocery store when you authorize it
Manage your subscription and payments
Send notifications (weekly plan drops, subscription reminders) — only if you opt in
Improve the Service (aggregated, de-identified analytics)
Comply with legal obligations
Detect and prevent fraud or abuse

We do not sell your personal information. We do not share your dietary information, email, or household details with advertisers or data brokers.

4. How We Share Your Information

We share information only with:

Service providers: hosting (Hetzner/Coolify), analytics (PostHog), subscription management (RevenueCat), crash reporting, push notification services. These providers process data on our behalf under contractual confidentiality obligations.
Grocery partners: when you authorize a cart push, we share the grocery list contents with the chosen partner (Kroger, Walmart, or Instacart). We do not share your email, address, or other profile data.
Legal authorities: when required by law, court order, or to protect our rights, safety, or property.
Business transfers: if NourishPlan is acquired or merged, your information may be transferred; you will be notified of any change in ownership or data use.

5. Health and Dietary Data

NourishPlan collects dietary preferences that may reveal information about your health (e.g., diabetic diet, heart-healthy diet). We treat this information as sensitive:

It is never sold or shared with advertisers
It is used only to recommend appropriate meal plans
It is encrypted at rest and in transit
You can delete it at any time (see Section 8)

NourishPlan does not provide medical advice. The Service is for informational and meal-planning purposes only. Consult a licensed healthcare provider before starting any diet, especially if you have a medical condition.

6. Data Security

We implement administrative, technical, and physical safeguards:

TLS 1.2+ encryption in transit
Encrypted database storage (AES-256 at rest)
Access controls and audit logging
Regular security reviews

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active. If you delete your account, we delete or de-identify your personal information within 30 days, except where we are required by law to retain it (e.g., tax records, fraud prevention).

Aggregated, de-identified data (which cannot identify you) may be retained indefinitely.

8. Your Rights

Depending on your location, you may have the following rights:

Access: request a copy of the personal information we hold about you
Correction: correct inaccurate information
Deletion: request deletion of your information
Portability: receive your information in a machine-readable format
Opt-out: opt out of marketing communications at any time
Withdraw consent: withdraw consent where processing is based on consent

To exercise these rights, email privacy@nourishplan.com. We will respond within 30 days.

California Residents (CCPA/CPRA)

You have the right to know what personal information we collect, request deletion, and opt out of "sales" of personal information. We do not sell personal information.

EU/UK Residents (GDPR)

Our lawful bases for processing: (a) performance of a contract (providing the Service you subscribed to), (b) legitimate interests (improving the Service, fraud prevention), (c) consent (marketing communications, sensitive dietary data), (d) legal obligations.

9. Children's Privacy

NourishPlan is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us information, contact privacy@nourishplan.com and we will delete it.

For users aged 13-17, parental consent is required in accordance with applicable law.

10. International Data Transfers

If you use NourishPlan from outside the United States, your information will be transferred to and processed in the United States. We use standard contractual clauses and other safeguards for international transfers.

11. Changes to This Policy

We may update this Privacy Policy. We will notify you of material changes via email or in-app notice at least 30 days before the change takes effect. Continued use after the effective date means you accept the updated policy.

12. Contact Us

Greenbelt Labs LLC Email: privacy@nourishplan.com Address: [BUSINESS ADDRESS — PENDING]

For urgent data security concerns: security@nourishplan.com