Privacy Policy

This Privacy Policy explains what happens to your information when you use the Plenty mobile app and this website (together, the “Service”). We’ve written it to be readable. If anything is unclear, email us at [email protected].

1. Who is responsible

Plenty and this website are provided by NETKREATIVES BV, Volaardestraat 88, 9200 Dendermonde, Belgium, enterprise number 0638.905.445 (“we”, “us”). We are the controller of the personal data described here. Privacy questions and requests: [email protected].

2. Your account and household data

• Account information. If you create an account, we store your name (or chosen nickname) and the email address associated with your Apple or Google sign-in.
• Your lists and content. Shopping lists, items, notes, budgets, receipts you choose to scan, loyalty cards you add, and similar data you create in the app. This is the content that syncs across your devices and the people you share a list with.
• Sharing data. When you share a list, we store the connection between the participants so the list can stay in sync.
• Notification data. If you turn on notifications, we store a push token for your device (and your app language) so we can tell you when someone updates a shared list. Declining notifications never limits the rest of the app.

This data is stored with Google Firebase (Google Ireland Ltd.): sign-in (Firebase Authentication), database and sync (Cloud Firestore, EU region), file storage for receipt photos, server functions, and push-notification delivery (Firebase Cloud Messaging). Apple provides Sign in with Apple and delivers push notifications (APNs). Google and Apple process this data on our behalf, only to the extent needed to run the Service.

We use it to:

• provide the core features: syncing lists, tracking budgets, and suggesting restocks;
• enable sharing between members of your household, including notifications about shared-list activity;
• maintain, secure, and improve the Service.

3. Permissions on your device

The app asks for the camera when you scan a barcode, a receipt or a loyalty card, for the microphone and Apple’s speech recognition when you add items by voice, and for notifications. Each one is optional, and you control it in the iOS Settings app.

4. Purchases

Apple processes App Store purchases; we never see your payment details. RevenueCat (United States) manages Plenty Premium for us: it receives the purchase record from Apple and an app user identifier that is not your name or email address, and tells us your subscription status.

5. Usage statistics — in Europe only with your permission

In the European Union, the EEA, the United Kingdom and Switzerland — or when your App Store country cannot be determined — the app asks first, and nothing is collected for statistics until you allow it. The question comes once, on the same screen as the ad question below and as a separate choice from it: both start on “Don’t allow”, and a screen you leave untouched means no to both. Everywhere else statistics run by default. You can change your mind at any time in the app under Settings → Usage statistics; switching them off stops collection at once, and nothing is started again on the next launch.

When statistics are on, the app sends them to TelemetryDeck (Germany): for example that the app was opened, which step of the introduction was seen, that a purchase screen was shown, or that a feature such as inviting someone or adding a loyalty card was used, together with app version, device model and system version. The identifier is hashed on your device; we cannot identify you from it. What you put in the app — list names, items, prices, budgets, card numbers, names — is never part of these statistics. Test and TestFlight traffic is kept apart from production statistics.

6. Ad measurement in the app — only with your permission

Plenty shows no advertising. We do advertise the app itself, with Meta (Facebook and Instagram), and we want to know which of our ads bring people to the app. That is all this measurement is for.

The app asks once, after the introduction and before the first purchase screen. In the European Union, the EEA, the United Kingdom and Switzerland — or when your App Store country cannot be determined — nothing is sent to Meta unless you tap Allow. “Allow” and “Don’t allow” are offered side by side, and the app works exactly the same if you decline. Elsewhere, a short explanation precedes Apple’s tracking question, and measurement is on unless you switch it off.

If measurement is on, Meta’s software in the app tells Meta:

• that the app was opened;
• that the introduction was finished;
• that the purchase screen was seen;
• that a trial was started or something was bought, with its price and currency;

together with device and network information such as device model, system version, language, time zone and IP address. Your device’s advertising identifier is included only if you also answer yes to Apple’s tracking question.

Never shared: your lists, items, prices, budgets, loyalty cards, household members, names or email addresses.

We and Meta use this to measure which ads work and to show our ads to people likely to want the app; Meta also uses it under its own policy. You can change your choice at any time in the app under Settings → Ad measurement: once you switch it off, the app stops sending events to Meta at once, and Meta’s software is not started again. Apple’s tracking permission is in the iOS Settings app under Privacy & Security → Tracking. Where no ad software runs, the app only tells Apple that it was installed (SKAdNetwork), which identifies no one.

7. This website and cookies

This website is served from our server at our hosting provider (Contabo GmbH, Germany), which processes technical request data such as IP address, browser headers and the page requested to deliver and protect the site. Cloudflare runs the domain’s name service and forwards email sent to our support address. The pages reference Google Fonts; your browser may connect to Google’s font servers, which then see your IP address and browser headers. Links to the App Store carry a campaign label, so that Apple can tell us in aggregate which page led to a download; it identifies no one.

The site itself sets no cookies. If we switch on website statistics, the site asks first: only after you choose “Accept analytics” does it load Google Analytics 4, which sets the cookies _ga and _ga_… (Google, up to two years) and tells Google which pages you viewed and where you came from. Advertising features and ad personalisation stay switched off. Your choice is stored in your browser under plenty.analytics-consent (no expiry, not sent to us). Choose “Only necessary”, or never answer, and nothing from Google Analytics is loaded and no analytics cookie is set. You can change your choice at any time through “Cookie settings” at the bottom of every page; that link only appears while website statistics are switched on.

There is no advertising pixel on this website: nothing here reports your visit to Meta or any other ad network.

8. When you contact us

If you email us we receive your address and what you write, and use it to answer you. Please leave out sensitive information that is not needed.

9. Why we may process this

• Performing our contract with you: providing the app, your account, syncing and sharing, and confirming purchases.
• Our legitimate interest in a working, improving product: the security of the app and the site, answering support requests, and privacy-preserving usage statistics outside the European Union, the EEA, the United Kingdom and Switzerland.
• Your consent: usage statistics in the app where consent is required, ad measurement in the app where it is required, the advertising identifier, and Google Analytics on this website. You can withdraw consent at any time; that does not affect earlier processing.

10. Who receives data, and where

The recipients are the providers named above, acting for us or — in the case of Meta — also for their own purposes: Google Ireland Ltd., Apple, RevenueCat, TelemetryDeck, our hosting provider, Cloudflare and, only after your permission, Meta Platforms Ireland Ltd. Your lists are stored on cloud infrastructure in the European Union where the provider supports it. Meta, Google, RevenueCat, Cloudflare and Apple may process data in the United States; they rely on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses.

We do not sell your personal information, and we do not use the contents of your lists for advertising.

11. How long we keep it

We keep your account and household data for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we’re required to retain it by law. Your ad-measurement choice is kept on your device, and your cookie choice in your browser, until you change it. We keep support emails for up to two years after the last contact. The providers keep data as described in their own policies.

12. Your rights

You may ask us for access to your personal data, correction, deletion, restriction, a copy in a portable format, and you may object to processing based on our legitimate interests. Write to [email protected]; we answer within one month. You can also delete your account from within the app (Settings → Account), which permanently removes your account, your lists, your sharing connections, and your notification tokens from our systems, subject to any legal retention requirements — the account deletion page explains both routes.

You may also complain to the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, dataprotectionauthority.be, or to the authority where you live.

13. Children

Plenty is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect their personal data or measure advertising for them.

14. Changes to this policy

We update this policy when the app or the site changes, and show the date at the top. When we make material changes we notify you in the app where appropriate, and if a change affects a consent you gave, we ask again.