PL3NISH

Privacy Policy

Effective Date: 4/27/2026  ·  Last Updated: 4/27/2026

Welcome to Pl3nish! We believe that knowing what is in your food is the foundation of eating well. To give you the best experience, we collect certain personal information from you as you use our app. This Privacy Policy explains what we collect, why we collect it, and how you can control it.

 

This Privacy Policy ("Policy") describes how the Pl3nish app, a product of WCC Systems LLC ("Pl3nish," "we," "our," or "us"), a Colorado company, collects, uses, discloses, and otherwise processes your personal information when you use our Services (including our mobile application, website, and any related features or interactions). This Policy forms part of our Terms of Service.

 

You must be at least 18 years old to use Pl3nish. Our Services are not designed for or intended for use by individuals under the age of 18. If we become aware that someone under 18 has provided us with personal information, we will take steps to remove that information and delete their account.

 

Quick Links

We know this is a long document. These quick links help you find what matters most:

 

• What information does Pl3nish collect?

• How does Pl3nish use your information?

• Does Pl3nish sell my information?

• How does Pl3nish share my information?

• Your privacy rights and choices

• How to contact us

 

 

1. Personal Information We Collect

 

We collect personal information directly from you when you create an account and use the app, automatically through your use of the Services, and in some cases from third parties.

 

1.1  Information You Provide Directly

 

Account and Profile Information

When you create a Pl3nish account, we collect:

• Name and email address

• Username and password

• Date of birth (to verify you are 18 or older)

• Profile image or photo (optional)

• General location (country or region, for content personalisation)

 

Health and Dietary Information

Pl3nish is a nutrition-focused application. To provide our core Services, we collect health and dietary information you voluntarily provide, which may include:

• Dietary preferences and restrictions (e.g. vegan, gluten-free, nut allergy)

• Foods, recipes, and ingredients you search for, save, or interact with

• Ingredient substitutions and customisations you make to recipes

• Nutritional goals or targets you set within the app

• Body measurements such as height and weight (if you choose to provide them)

• Any other health or dietary information you voluntarily enter

 

Important: Health and dietary information, including information about allergies, dietary restrictions, and body measurements, is considered sensitive personal information under certain applicable privacy laws. We handle this information with heightened care as described in this Policy.

 

Communications with Pl3nish

When you contact us for support or other inquiries, we collect your name, email address, and the content of your communications with us.

 

Preferences and Other Requests

We collect information about your in-app preferences, communication preferences, and any other preferences or requests you provide when interacting with the Services.

 

1.2  Information We Collect Automatically

 

When you use the Services, we automatically collect certain information about your device and how you interact with the app, including:

• Device information: device type, operating system, unique device identifiers, and mobile advertising identifiers

• Usage data: features you use, recipes you view or save, searches you perform, and frequency and duration of your use

• Log data: IP address, internet service provider, mobile carrier, and general inferred location based on IP address

• App performance data: crashes, errors, and diagnostic information to help us improve the Services

 

We collect this information using cookies, SDKs, log files, and similar technologies ("Tracking Technologies"). We use Firebase (Google) as our backend platform, which may collect usage and analytics data as described in the Firebase Privacy Policy.

 

1.3  Information We Receive from Third Parties

 

We may receive information about you from third parties in limited circumstances, including:

• Single sign-on providers (e.g. Sign in with Apple, Google) if you choose to create or log in to your account using those services. We receive your name, email address, and profile information from those providers.

• Analytics providers who help us understand how users interact with the Services

• Payment processors who handle subscription payments on our behalf

 

Note: We do not purchase data about you from data brokers or marketing data companies.

 

1.4  Aggregated and De-identified Data

We may aggregate or de-identify personal information so that it no longer identifies you. We may use and share de-identified or aggregated data for research, analytics, and product improvement purposes without restriction under this Policy.

 

 

2. How We Use Your Personal Information

 

We use your information to provide and improve the Services, communicate with you, ensure security, and comply with legal obligations. We do not use your information for targeted advertising.

 

2.1  Providing and Improving the Services

We use your personal information to:

• Create and manage your account

• Provide recipe content, nutrition data, and ingredient information personalised to your dietary preferences and goals

• Enable ingredient substitution features and recalculate nutritional values based on your changes

• Save your recipe preferences, customisations, and favourites

• Analyse how users interact with the app to improve features, fix bugs, and develop new functionality

• Test new features and updates

 

2.2  Communicating with You

We use your information to:

• Respond to your support requests and questions

• Send you transactional communications such as account confirmations, password resets, and policy updates

• Send you promotional or marketing communications about Pl3nish features and offerings, where you have opted in or where we are otherwise permitted to do so by applicable law

• Request feedback on the Services

 

2.3  Security and Fraud Prevention

We use your information to monitor and maintain the security of the Services, detect and prevent fraud and unauthorised access, and protect the safety of users and our systems.

 

2.4  Legal Compliance and Business Operations

We use your information to:

• Comply with applicable laws and regulations, including responding to lawful requests from law enforcement

• Enforce our Terms of Service and other policies

• Conduct financial, tax, and compliance audits

• Manage pre-litigation or litigation matters and defend our legal rights

• Evaluate or complete a business transaction such as a merger, acquisition, or sale of assets

 

2.5  Use of Sensitive Health Information

Health and dietary information (including dietary restrictions, body measurements, and any information that may indicate a health condition) is only used: (a) to provide you with the Services you have requested; (b) to improve nutrition features within the app; and (c) as otherwise required by law. We do not use sensitive health information for advertising, profiling for advertising purposes, or any purpose unrelated to providing the Services.

 

 

3. Does Pl3nish Sell My Information?

 

No. Pl3nish does not sell your personal information to third parties. Pl3nish does not engage in targeted advertising based on your personal information.

 

Pl3nish is an ad-free service. We do not sell, rent, or trade your personal information to third-party advertisers, data brokers, or marketing companies. We do not use your data to serve you personalised advertisements, either within our app or on third-party platforms.

 

Certain privacy laws (including the California Consumer Privacy Act and similar state laws) define "selling" broadly to include certain data sharing arrangements. Under those definitions, we do not sell personal information.

 

We use third-party service providers (such as Firebase/Google for backend infrastructure and analytics) who process data on our behalf as data processors. These providers are contractually prohibited from using your data for their own advertising or marketing purposes.

 

 

4. How We Share Your Personal Information

 

We share your personal information only in the limited circumstances described below. We do not share your information with marketing or advertising partners.

 

4.1  Service Providers

We share your information with third-party companies that provide business, technical, or professional services on our behalf, including:

• Cloud infrastructure and hosting providers (including Google Firebase)

• Analytics providers who help us understand app usage

• Payment processors who handle subscription billing

• Customer support platforms

• Email service providers for transactional communications

 

All service providers are contractually required to use your information only to perform services on our behalf and in accordance with our instructions. They are prohibited from using your data for their own purposes.

 

4.2  Legal Requirements and Protection of Rights

We may disclose your information when we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, or legal process

• Respond to lawful requests from government or law enforcement authorities

• Protect the rights, property, or safety of Pl3nish, our users, or the public

• Detect, prevent, or address fraud, security, or technical issues

• Enforce our Terms of Service

 

4.3  Business Transactions

If Pl3nish is involved in a merger, acquisition, reorganisation, sale of assets, or bankruptcy proceeding, your personal information may be transferred to a successor entity as part of that transaction. We will notify you via email or prominent notice on the Services if such a transfer results in a material change to how your information is used.

 

4.4  With Your Consent

We may share your information with other parties when you have given us your explicit consent to do so.

 

4.5  Aggregated or De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, analytics, or industry reporting purposes.

 

 

5. Your Privacy Rights and Choices

 

You have meaningful control over your personal information. The rights available to you depend on where you live. US residents in states including California, Colorado, Virginia, and others have specific statutory rights described below.

 

5.1  Rights Available to All Users

Regardless of where you live, you can:

• Access and update your account information at any time through the app Settings

• Delete your account by contacting us at privacy@pl3nish.com. We will delete your personal information within 30 days, subject to legal retention requirements

• Opt out of marketing emails by clicking "unsubscribe" in any marketing email or by updating your notification preferences in the app

• Request a copy of the personal information we hold about you

 

5.2  Rights for US State Residents

If you are a resident of California, Colorado, Virginia, Connecticut, Texas, or other US states with applicable privacy laws, you may have the following rights:

 

Right to Know / Access. You have the right to request information about the categories and specific pieces of personal information we have collected about you, how we use it, and who we share it with.

Right to Deletion. You have the right to request that we delete the personal information we have collected about you, subject to certain exceptions (e.g. where retention is required by law or necessary to provide the Services).

Right to Correction. You have the right to request that we correct inaccurate personal information we maintain about you.

Right to Data Portability. You have the right to receive your personal information in a portable, machine-readable format.

Right to Opt Out of Sale or Sharing. We do not sell or share your personal information for targeted advertising purposes. You therefore have no need to opt out. If this changes, we will update this Policy and provide opt-out mechanisms.

Right to Limit Use of Sensitive Information. You have the right to limit our use of sensitive personal information (including health and dietary data) to purposes strictly necessary to provide the Services. We already limit our use in this way as described in Section 2.5.

Right Against Discrimination. We will not discriminate against you for exercising any of your privacy rights.

Right to Appeal. If we deny your privacy rights request, you may appeal that decision by emailing privacy@pl3nish.com with "APPEAL" in the subject line.

 

5.3  Rights for Canadian Residents (PIPEDA)

If you are a resident of Canada, you have the right to access your personal information, request correction of inaccurate information, withdraw consent to processing (subject to legal and contractual limitations), and lodge a complaint with the Office of the Privacy Commissioner of Canada.

 

5.4  How to Exercise Your Rights

To exercise any of the rights described above, you may:

• Email us at privacy@pl3nish.com

• Submit a request through the in-app Privacy Settings (coming soon)

 

We will respond to verified requests within 45 days. We may extend this period by an additional 45 days where necessary, with notice to you. We may need to verify your identity before processing your request. We will not charge a fee for reasonable requests but may charge a reasonable fee for excessive or repetitive requests.

 

5.5  Authorised Agents

Where permitted by applicable law, you may designate an authorised agent to make privacy rights requests on your behalf. We will require verification that the agent is authorised to act for you before processing such requests.

 

 

6. How We Protect Your Information

 

We implement reasonable technical, administrative, and organisational safeguards designed to protect your personal information from unauthorised access, disclosure, alteration, loss, and destruction. These measures include:

• Encryption of personal information in transit (TLS/HTTPS) and at rest

• Access controls limiting who within Pl3nish can access personal information

• Regular security reviews and vulnerability assessments

• Use of reputable cloud infrastructure providers with industry-standard security certifications

 

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee absolute security. If you become aware of any security vulnerability or breach, please contact us immediately at security@pl3nish.com.

 

 

7. How Long We Retain Your Information

 

We retain your personal information for as long as your account is active and for a reasonable period thereafter, or as long as is necessary to fulfil the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

 

When determining retention periods, we consider:

• The type and sensitivity of the information

• The potential risk of harm from unauthorised use or disclosure

• The purposes for which we process the information

• Applicable legal or regulatory requirements

 

When you delete your account, we will delete or de-identify your personal information within 30 days, except where we are required to retain it by law (for example, for financial or tax compliance), where it is necessary to resolve disputes, or where deletion would affect the rights of other users (for example, shared content).

 

Aggregated and de-identified data may be retained indefinitely as it no longer constitutes personal information.

 

 

8. International Data Transfers

 

Pl3nish is based in Denver, Colorado, United States. If you access our Services from outside the United States, your personal information will be transferred to and processed in the United States and possibly other countries, which may have different data protection laws than your country of residence.

 

For users in Canada, we transfer and process your information in the United States in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. We take appropriate steps to ensure that your information receives an adequate level of protection.

 

By using the Services, you acknowledge that your personal information may be transferred to and processed in the United States.

 

 

9. Children's Privacy

 

Pl3nish is not directed to individuals under the age of 18 and we do not knowingly collect personal information from anyone under 18. We implement technical measures to prevent individuals under 18 from creating accounts.

 

If you believe that a child under 18 has provided us with personal information, please contact us immediately at privacy@pl3nish.com and we will take steps to delete that information and close the account.

 

 

10. Third-Party Links and Services

 

Our app may contain links to third-party websites, services, or content (such as links to original recipe sources). This Privacy Policy does not apply to third-party services. We are not responsible for the privacy practices of third parties, and we encourage you to review the privacy policies of any third-party services you access.

 

 

11. Changes to This Privacy Policy

 

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or applicable law. When we make material changes, we will notify you by:

• Sending an email to the address associated with your account

• Displaying a prominent notice in the app before or at the time the changes take effect

 

The effective date at the top of this Policy indicates when the current version was last updated. Your continued use of the Services after the effective date of an updated Policy constitutes your acceptance of the changes.

 

 

12. Contact Us

 

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

 

WCC Systems LLC

Attn: Privacy / Legal

Denver, Colorado, United States

Email: casey@pl3nish.com

 

We aim to respond to all privacy inquiries within 30 days.

 

Addendum: Additional Information for Residents of Specific Jurisdictions

 

California Residents (CCPA / CPRA)

In addition to the rights described in Section 5, California residents have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• The right to know the specific pieces of personal information collected about you

• The right to know whether your personal information is sold or disclosed and to whom

• The right to opt out of the sale of personal information (we do not sell personal information)

• The right to non-discrimination for exercising CCPA rights

• The right to correct inaccurate personal information

• The right to limit use of sensitive personal information

 

For the 12 months preceding the effective date of this Policy, we have not sold personal information to any third party.

 

California residents may also designate an authorised agent to exercise rights on their behalf. To submit a request, contact privacy@pl3nish.com or use the in-app Privacy Settings.

 

Colorado Residents (CPA)

Colorado residents have rights under the Colorado Privacy Act (CPA) including the rights to access, correct, delete, obtain a portable copy of, and opt out of the processing of personal data for targeted advertising, sale, or certain profiling. We do not process personal data for targeted advertising or profiling for advertising purposes. To exercise your rights, contact privacy@pl3nish.com.

 

Virginia Residents (VCDPA)

Virginia residents have rights under the Virginia Consumer Data Protection Act (VCDPA) including the rights to access, correct, delete, obtain a portable copy of, and opt out of the processing of personal data for targeted advertising or sale. To exercise your rights, contact privacy@pl3nish.com.

 

Canadian Residents (PIPEDA)

Canadian residents have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access your personal information, request correction of inaccurate information, withdraw consent to our collection and use of your information (subject to legal and contractual limitations), and lodge a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).

 

Our Privacy Officer can be contacted at casey@pl3nish.com.

 

WCC Systems LLC  ·  Denver, Colorado  ·  casey@pl3nish.com  ·  Version 1.0