Privacy (beta)

What is stored

Your email address, your name if you give one, a password hash (never the password), and, if you turn it on, your two-step sign-in secret (encrypted). For your household: its name, addresses, chosen store, schedule, budget, staples, the meals you pick, shopping lists and carts. If you link your store account, the link's tokens are stored encrypted; Plate & Cart never sees your store password.

Who else sees it

Nobody outside your household sees your household's data. The service's admin can see account and household details to run the beta and fix problems; the admin's actions are logged. Data goes to these services only as far as each feature needs: the Kroger API (your store and the products searched for, and your cart when you send it), OpenRouter (ingredient lines and product names to match them, nothing about you) and the email provider (your address and the message).

Cookies

One sign-in cookie and one form-protection cookie. No tracking, no advertising, no analytics.

Where and how long

On a server in the United States, with nightly backups. Your data stays while your account exists. Ask the admin (reply to any Plate & Cart email, or ask the person who invited you) to export or delete your account and household data.