Privacy Policy

IT | EN

Last updated: October 9, 2026

Data Controller

The Data Controller is Mattia Ruo. You can contact us at any time at: crypto.matth719@gmail.com.

Data Collected

Planibble collects the bare minimum required to function:

Username chosen during registration (mandatory)
Password (saved in encrypted form using bcrypt – irreversible)
User-created content: meals, ingredients, shopping list, fridge, planner, photos
Preferences: language, categories, default values, notifications

We do not collect emails, phone numbers, location data, contacts, nor do we use profiling cookies or advertising tools.

Why We Collect It

To allow you to log in and keep your account secure
To sync and save your content across devices
To send you expiration alerts (only if enabled by you)

Where It Is Stored

Data is stored on MongoDB cloud servers managed by the Emergent platform. The geographic base of the servers is located within the EU. All communications between the app and the servers are transmitted over encrypted HTTPS.

Retention Period

Your data remains active until you delete your account. You can delete your account at any time via Settings -> Account. Login sessions automatically expire after 30 days of inactivity.

Your Rights (GDPR Articles 15-22)

As a data subject, you have the right to:

Access: know what data we hold about you
Rectification: correct inaccurate data
Erasure ("Right to be Forgotten"): delete all your data
Portability: download your data in JSON format
Objection: object to processing at any time

You can exercise access and portability directly in-app via Settings -> Backup -> Export. You can delete your account via Settings -> Account -> Delete account. For any other requests, please write to our contact email below.

Security

Passwords are stored as bcrypt hashes: no one, not even us, can read them in plain text. Sessions use Bearer tokens with a 30-day expiration. In the event of a data breach that could pose a high risk to your rights, we will inform you within 72 hours.

Third Parties

We do not share your data with anyone, except where required by law. The only external service involved is the hosting provider (Emergent/MongoDB) and, in the future, if you activate the Pro/Pro+ plan, the payment processor (which will only receive data necessary for the transaction).

Minors

Planibble is intended for a general audience. We do not knowingly collect data from minors under 14 years of age. If you are a parent and believe a minor has created an account, please contact us and we will proceed with the deletion.

Changes to This Policy

If we substantially update this policy, we will show you the new version upon your next login. The date at the top always indicates the latest update.

Contacts

For any questions regarding privacy or to exercise your rights, write to: crypto.matth719@gmail.com

Page updated

Google Sites

Report abuse