Privacy Policy
Last updated: June 21, 2026
This Privacy Policy describes how Plenu ("we", "us", "the app") collects, uses, and protects your information when you use the Plenu mobile application ("the Service"). By using Plenu, you agree to the practices described here.
1. Information we collect
1.1 Account information (from Google Sign-In)
When you sign in with Google, we receive the following from your Google account, mediated by Amazon Cognito:
- Your email address
- Your display name (if provided by Google)
- A stable, non-personal user identifier (Cognito subject ID)
We do not receive or store your Google password. Sign-in is handled entirely by Google and Amazon Cognito.
1.2 Preferences you set in the app
- Dietary preferences (Vegetarian, Non-vegetarian, Eggetarian)
- Cuisine preferences (regional Indian cuisines you enjoy)
- Selected ingredients when using the pantry feature
1.3 Content you create in the app
- Meal plans you build (breakfast, lunch, dinner for specific dates)
- Favourites — dishes you save
- Prep reminders — scheduled times you set for advance meal preparation
1.4 Technical data (for push notifications)
- Firebase Cloud Messaging (FCM) device tokens — used only to deliver prep reminder push notifications to your device. Not shared for any other purpose.
1.5 What we do not collect
We do not collect or track:
- Your location
- Your contacts
- Photos, media, or files on your device
- Your browsing history
- Payment or financial information
- Precise identifiers for advertising
2. How we use your information
We use your information solely to provide the Service:
- Personalize meal recommendations based on your preferences
- Store your meal plans, favourites, and reminders so they're available across sessions and devices
- Deliver push notifications for prep reminders you've set
- Authenticate your identity when you sign in
We do not use your information for advertising, we do not sell your data, and we do not share it with third parties for marketing.
3. Third-party services
Plenu relies on the following third-party services to operate. Each has its own privacy policy.
- Google Sign-In — for authentication. Google Privacy Policy
- Amazon Web Services (AWS) — for data storage (DynamoDB), authentication (Cognito), backend hosting (Lambda), and image delivery (S3). Data is stored in AWS's Mumbai (ap-south-1) region. AWS Privacy Notice
- Firebase Cloud Messaging — for delivering push notifications. Firebase Privacy
4. Data storage and security
- Your data is stored in AWS DynamoDB in the Mumbai region.
- All data in transit is encrypted via HTTPS/TLS.
- All data at rest is encrypted by AWS default disk encryption.
- Access to backend systems is protected by AWS IAM and least-privilege permissions.
5. Data retention
We retain your data for as long as your account is active. If you delete your account (see Delete Account), we remove:
- Your profile (email, name, preferences)
- All meal plans (today, tomorrow, history)
- All favourites and reminders
- All device push tokens
Deletion happens immediately upon your request. Backups may retain data for up to 30 days before being fully purged.
6. Children's privacy
Plenu is not directed at children under the age of 13, and we do not knowingly collect information from children under 13. If we discover we have collected personal information from a child under 13, we will delete it promptly.
7. Your rights
You have the right to:
- Access the information we hold about you (contact us — see below)
- Correct inaccurate information (update it in the app, or contact us)
- Delete your account and all associated data (in-app or by request — see Delete Account)
- Withdraw consent for data processing at any time by deleting your account
8. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Continued use of Plenu after an update means you accept the revised policy.
9. Contact us
For any questions about this policy or your data: