Privacy Policy — GrocMind

GrocMind is operated by Thakkar Enterprises, Inc., a California S-Corporation headquartered in San Jose, CA. This policy explains how we collect, use, and protect your personal information when you use the GrocMind app and website at grocmind.com.

1. Information We Collect

Information you provide directly

Account details: name, email address, and password upon registration
Dietary preferences, food restrictions, allergies, and household size entered during onboarding
Grocery store account credentials you choose to connect (Walmart, Amazon Fresh, Instacart, Kroger)
Payment information — processed securely by Stripe; we never store full card details
Pantry inventory, meal ratings, and personal preferences you add over time
Messages and prompts you submit to the AI assistant

Information collected automatically

Device type, operating system, and browser version
IP address and approximate geographic location
App usage data: features used, screens viewed, session duration
Order history and grocery cart activity within the app
Crash reports and performance diagnostics

2. How We Use Your Information

To generate personalized AI meal plans based on your dietary preferences
To build and manage your grocery cart across connected store accounts
To process subscription payments through Stripe
To remember your pantry inventory and improve future meal suggestions
To send weekly planning reminders and order notifications (only if you opt in)
To improve app performance, fix bugs, and develop new features
To comply with legal obligations and enforce our Terms of Service

3. Payment Processing — Stripe

GrocMind uses Stripe, Inc. to process all subscription payments. When you subscribe, your payment information is transmitted directly to Stripe and is governed by Stripe's Privacy Policy. Thakkar Enterprises does not store your full credit card number, CVV, or bank account details on our servers.

Stripe may collect and process personal data including device data and transaction information to provide fraud prevention and payment services.

4. Information Sharing

We do not sell your personal information. We share data only in these limited circumstances:

Connected grocery services: When you place an order, we share your cart and delivery address with your selected grocery service solely to fulfill your order.
AI services: Meal generation requests are processed by AI providers. We transmit only necessary information (dietary preferences, pantry items) — never your name or payment data.
Stripe: Payment processing and subscription management as described above.
Legal requirements: If required by law, court order, or to protect user safety.
Business transfers: In the event of a merger, acquisition, or asset sale, your data may transfer as part of that transaction.

5. California Privacy Rights (CCPA)

As a California-based company, we comply fully with the California Consumer Privacy Act (CCPA). You have the right to:

Know what personal information we collect and how we use it
Delete your personal information (subject to certain legal exceptions)
Correct inaccurate personal information we hold about you
Opt out of sale of personal information — we do not sell personal information
Non-discrimination for exercising your privacy rights

To exercise these rights, email privacy@grocmind.com. We will respond within 45 days.

6. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, personal data is deleted or anonymized within 30 days except where retention is required by law. Transaction records may be retained up to 7 years for tax and accounting compliance.

7. Data Security

We use industry-standard security including TLS encryption in transit, encrypted storage for sensitive data, and strict internal access controls. No method of internet transmission is 100% secure, but we are committed to protecting your information.

8. Children's Privacy

GrocMind is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe a child has submitted personal information, contact us at privacy@grocmind.com and we will delete it promptly.

9. Cookies and Tracking

GrocMind uses essential cookies to maintain login sessions and app preferences, and analytics cookies to understand feature usage and improve the product. You can disable cookies in your browser settings, though some features may not function correctly without them.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or in-app notice at least 7 days before the change takes effect. Continued use after the effective date constitutes acceptance.

11. Contact Us

Email: privacy@grocmind.com
Company: Thakkar Enterprises, Inc.
Location: San Jose, California, United States