Privacy Policy

Effective date: October 8, 2026

This policy covers the PlanEat AI website, mobile app and related services, operated by Sole proprietor Diana Torianyk, Ukraine, at Kovpaka 91, Sumy, 40031, Ukraine. Privacy requests: info@valtorian.com.

Information you provide

We process account and contact information, dietary preferences, allergies or intolerances, disliked ingredients, nutrition goals and onboarding answers used to personalize weekly meal plans and grocery lists. We also process generated plans, support communications and service settings.

Website onboarding processes the answers you provide to save your profile for use with your PlanEat AI account. Website account creation and sign-in also process information returned by your selected authentication provider.

Usage, diagnostics and analytics

We process device and usage information, including app version, language, time zone, diagnostics and feature interactions, to operate and improve the service. The public website uses Google Analytics for traffic and interaction measurement. Website code also loads Vercel Analytics and Speed Insights for usage and performance measurement. The mobile app uses Amplitude for product analytics.

Payments and subscriptions

Mobile purchases are processed through Apple App Store or Google Play. We use subscription status and transaction identifiers to manage access, including through RevenueCat. We do not receive full payment card details from mobile stores.

Paddle processes website purchases as Merchant of Record. RevenueCat receives subscription status and transaction information so we can manage access across your account. PlanEat AI does not directly store full payment card details for Paddle transactions; Paddle and its payment providers process payment information.

Purposes and legal bases

We use information to operate accounts, personalize weekly plans and grocery lists, provide support, manage subscription access, diagnose issues, improve the service, provide service communications and meet legal obligations. Where applicable, processing relies on performing our contract with you, legitimate operational interests, legal obligations or consent.

Preferences such as allergies may reveal health-related information. We use these inputs to personalize the service and must meet applicable additional requirements for sensitive information, including consent where required.

Sharing and providers

Providers involved in delivering the service include Supabase for authentication, database and storage; OpenAI for AI functionality where used; Amplitude for mobile analytics; Google Analytics and Vercel for website measurement and hosting; RevenueCat for subscription access management; and Apple, Google or Paddle for payment-related processing.

We may share information where legally required or necessary for security, disputes or business transfers. We do not sell personal information. Authentication and payment providers may process information independently under their own policies. See Paddle's Privacy Policy.

Cookies and local storage

Google Analytics uses cookies and similar technologies for measurement. Supabase authentication uses persistent browser storage to maintain sessions where authentication is available. The admin Search Console interface caches reporting data locally. Browser settings let you manage cookies and site storage.

Retention and deletion

We retain information for as long as reasonably necessary to provide the service, meet legal obligations, maintain security, handle disputes and support legitimate operational requirements. We do not specify a universal analytics or log-retention period.

You can request account deletion through the mobile app's account-deletion flow or contact us. Payment providers may retain transaction records under their own legal obligations. Account deletion does not itself cancel an Apple, Google Play or Paddle subscription; cancel through the relevant provider.

International processing and security

Providers may process information outside your country. Arrangements depend on the provider and processing involved; contact us for details. We use technical and organizational security measures, but no system can guarantee absolute security.

Your rights

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of your data, restrict or object to processing, withdraw consent, or complain to a supervisory authority. Contact info@valtorian.com to make a request. We may need to verify your identity.

Age requirements and notifications

The service is not directed to children. Users must be at least 16 in the EEA or UK and 13 elsewhere. Contact us if information was provided by someone below the applicable minimum age.

You can control notifications through device and app settings. Contact us about communications preferences; service-related messages may still be necessary.

Changes and contact

We may update this policy as the service changes. The effective date appears above. Questions and privacy requests: info@valtorian.com.