Privacy Policy

What we collect

When you use Trellis, we collect only what's needed to make the app work for you:

• Account info - your email address and name when you sign up.
• Financial data - transaction history from bank accounts you connect via Plaid and receipts you scan. This data is processed to provide spending analysis and savings recommendations.
• Family details - number of children and their ages, household size, and ZIP code to personalise meal plans, budgets, and local deal recommendations.
• Preferences - your selected stores, budget categories, dietary restrictions, and meal planning preferences.
• Photos - receipt images and recipe photos you capture or upload for scanning.
• Usage data - basic analytics about how you use the app (screens visited, features used) to help us improve.

How we use it

Your data is used to:

• Analyse your spending and generate personalised savings plans.
• Suggest meals, recipes, and shopping lists tailored to your family and budget.
• Find product swaps and deals relevant to your shopping habits.
• Locate nearby grocery stores based on your ZIP code.
• Improve the app and fix bugs.
• Send you important account updates (not marketing spam).

We never sell your personal data. Full stop.

How we store it

Your data is stored securely using Supabase with encryption at rest and in transit. Bank statements are processed and the raw files are not retained longer than necessary for analysis. Receipt and recipe images are stored in private, access-controlled storage buckets. We use industry-standard security practices including row-level security policies to ensure you can only access your own data.

Third parties

We use a small number of trusted services:

• Plaid - to securely connect your bank accounts and retrieve transaction data. Plaid's use of your data is governed by their End User Privacy Policy.
• Supabase - database, authentication, and file storage.
• RevenueCat - subscription management.
• OpenAI - to power meal suggestions, recipe parsing, nutrition estimates, and spending analysis. See the "AI-powered features" section below for details.
• Kroger / retailer APIs - to fetch deals and product pricing. No personal data is shared with retailers.
• Google Places API - to find nearby grocery stores based on your ZIP code. Your ZIP code is sent to Google for location search. No other personal data is shared with Google through this feature.

We do not share your personal data with any other third parties.

Plaid and bank account data

Trellis uses Plaid to securely connect to your bank accounts. When you connect an account, Plaid retrieves your transaction history (merchant names, amounts, dates, and categories) on our behalf. We use this data solely to categorise your spending and provide personalised savings recommendations.

We do not store your bank login credentials - Plaid handles authentication directly with your financial institution. Plaid's use of your data is governed by their End User Privacy Policy.

You can disconnect your bank account at any time through the app or by contacting us at [email protected].

AI-powered features

Trellis uses OpenAI to provide meal suggestions, recipe parsing, nutrition estimates, and spending analysis. When you use these features, relevant data (such as dietary preferences, family size, budget information, or ingredient lists) is sent to OpenAI's API for processing. This data is not linked to your identity when transmitted - no email, name, or account details are included in AI requests.

OpenAI processes this data in real time and does not retain it for model training, in accordance with their API data usage policy.

AI-generated content (including meal suggestions, recipes, and nutrition estimates) is provided for informational purposes only and may not be fully accurate. See our Terms of Service for important disclaimers about AI-generated content.

Children's data

Trellis is designed for adults (18 and older) and is not directed at children. We do not knowingly collect personal information from children under 13. The family details you provide (such as children's ages and household size) are collected from you as the parent and are used solely to personalise your meal plans, budgets, and recommendations.

If you believe we have inadvertently collected information from a child under 13, please contact us at [email protected] and we will promptly delete it.

Your rights

You can:

• Request a copy of all data we hold about you.
• Request deletion of your account and all associated data.
• Opt out of non-essential analytics.
• Update or correct your personal information at any time within the app.

Contact us at [email protected] for any privacy requests. We will respond within 30 days.

California residents

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) may provide you with additional rights regarding your personal information, including the right to know what data we collect, the right to delete your data, and the right to opt out of the sale or sharing of your personal information.

We do not sell or share your personal information as defined by the CCPA/CPRA. To exercise any of your rights, contact us at [email protected].

Changes to this policy

We'll notify you of any significant changes via email or in-app notification. Continued use of Trellis after changes constitutes acceptance.