← Back

Privacy Policy

Last updated: April 2026

1. Who we are

GroCal ('we', 'us', 'our') is a meal-planning application. Our website is grocal.app. If you have questions about this policy, contact us at hello@grocal.app.

2. What data we collect

We collect your name and email address when you create an account or join our waitlist. When you use the app, we also store the meal plans, scanned grocery data, and nutritional goals you create. We do not sell your personal data.

3. How we use your data

We use your data to provide and improve the GroCal service -- generating meal plans, tracking progress, and sending product updates you have opted into. We do not use your data for advertising purposes.

4. Data storage and security

Your data is stored securely using Supabase (hosted on AWS). We use industry-standard encryption in transit (TLS) and at rest. We retain your data for as long as your account is active. You can request deletion at any time.

5. Third-party services

We use the following third parties to operate GroCal: Supabase (database and authentication), OpenAI (meal plan and nutritional analysis), and Vercel (hosting). Each has its own privacy policy governing their handling of data.

6. Cookies

We use strictly necessary cookies for authentication (session management). We do not use advertising or tracking cookies.

7. Your rights (GDPR / UK GDPR)

If you are in the EEA or UK, you have the right to access, correct, or delete your personal data, withdraw consent at any time, and lodge a complaint with your local data protection authority. To exercise these rights, email hello@grocal.app.

8. Children

GroCal is not directed at children under 13. We do not knowingly collect data from children.

9. Changes to this policy

We may update this policy from time to time. We will notify registered users of material changes by email.

© 2026 GroCal. All rights reserved.