MenuGrocer ("we," "us," or "our") operates the MenuGrocer web application at app.menugrocer.com and marketing website at menugrocer.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.
MenuGrocer is operated by MenuGrocer, Inc. ("Company"), a company registered in the United States. For questions about this policy, contact us at privacy@menugrocer.com.
When you create an account or use the Service, we collect:
When you use the Service, we automatically collect:
| Data category | Examples | Purpose | Stored by |
|---|---|---|---|
| Account data | Name, email, password hash | Authentication, account management | Clerk |
| Dietary profile | Vegan, nut-free, health goals | AI meal plan generation | MenuGrocer (Postgres) |
| Meal plan data | Meals entered, lists generated | App functionality, history | MenuGrocer (Postgres) |
| Pantry data | Pantry items and quantities | Pantry-first planning feature | MenuGrocer (Postgres) |
| Payment data | Card last 4 digits, billing address | Subscription management | Stripe |
| Usage analytics | Pages viewed, feature usage | Product improvement | Google Analytics |
We use the information we collect to:
We do not use your data for automated decision-making that produces legal or similarly significant effects on you.
MenuGrocer uses Anthropic's Claude Haiku model to generate meal plans, grocery lists, and nutrition summaries. When you request a generation, relevant data from your profile — including dietary restrictions, health goals, pantry items, and budget — is sent to Anthropic's API as part of the generation prompt.
We send only the data necessary to generate your meal plan. This includes your dietary restrictions, health goals, cuisine preferences, household size, budget, and pantry items. We do not send your name, email address, or payment information to Anthropic.
Anthropic processes this data solely to provide the API service and does not use API inputs and outputs to train its models by default. Anthropic's handling of data is governed by their API usage policies and privacy commitments. You can review Anthropic's privacy policy at anthropic.com/privacy.
We send the minimum data needed to generate a useful, personalised plan. We do not include your account credentials, payment information, or identifying details in AI prompts.
We do not sell, rent, or trade your personal data. We share your information only in the following circumstances:
We share data with trusted third-party providers who help us operate the Service, under contractual data processing agreements:
If you use the shareable meal plan feature, your weekly meal plan and grocery list will be accessible to anyone with the link. These shared pages do not include your name, email, dietary restrictions, or other personal profile information — only the meal plan and grocery list content you chose to share.
We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of MenuGrocer, our users, or the public.
If MenuGrocer is involved in a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service before your data is transferred and becomes subject to a different privacy policy.
We use cookies and similar tracking technologies to operate the Service and understand how it is used.
These cookies are required for the Service to function. They include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. You cannot opt out of essential cookies while using the Service.
We use Google Analytics to understand how users interact with MenuGrocer — which features are used, where users drop off, and how the Service performs. Analytics data is aggregated and anonymised where possible. You can opt out via the cookie banner or by installing the Google Analytics opt-out browser add-on.
When you first visit the Service, you will see a cookie consent banner. You may accept or decline non-essential cookies. You can change your preferences at any time by clearing your browser cookies and reloading the page.
We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:
When you delete your account, we delete your personal data within 30 days, except where retention is required by law.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, email us at privacy@menugrocer.com. We will respond within 30 days. You may also delete your account directly from your account settings, which will initiate deletion of your personal data.
If you are located in the European Economic Area (EEA) or United Kingdom, you have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data in accordance with applicable law.
The Service is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at privacy@menugrocer.com and we will delete it promptly.
Users between 13 and 18 may use the Service only with the consent and supervision of a parent or legal guardian.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities as required by law.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address associated with your account) and by posting a prominent notice on the Service at least 30 days before the change takes effect. The "last updated" date at the top of this policy reflects the most recent revision.
Your continued use of the Service after a policy update constitutes your acceptance of the revised policy. If you do not agree to the revised policy, you should delete your account before the changes take effect.
If you have questions about this Privacy Policy, how we handle your data, or wish to exercise your rights, please contact us:
We aim to respond to all privacy-related enquiries within 5 business days.