Privacy Notice

BESS POC D-1 s.r.o. operates Plenty and is the data controller of the personal data described here. You can reach us at support@getplenty.app.

• Account data - email address, authentication identifiers, login timestamps.
• Profile data you provide - weight, height, age band, sex, dietary preferences, treatment stage, and other quiz answers.
• Product data - protein logs, weights over time, streaks, reminder preferences.
• Support communications - messages you send us and their metadata.
• Device & usage data - IP address, browser type, device identifiers, referrer, and interaction events used to keep the Service secure and improve it.
• Cookies & local storage - essential cookies for login and preferences (see Section 8).

Payment card data is entered directly with our payment provider Paddle and is never stored on our servers.

• Provide the Service (account creation, protein tracking, personalized goals) - legal basis: performance of a contract.
• Process payments and subscriptions via Paddle - legal basis: performance of a contract and legal obligation.
• Security, fraud prevention, and abuse detection - legal basis: legitimate interests in protecting the Service.
• Product improvement and analytics (aggregated where possible) - legal basis: legitimate interests.
• Customer support - legal basis: performance of a contract or legitimate interests.
• Marketing emails (only when you opt in) - legal basis: consent, which you can withdraw at any time.
• Legal and regulatory compliance - legal basis: legal obligation.

• Merchant of Record - Paddle.com Market Limited: handles checkout, subscription billing, taxes, refunds, and invoicing. Paddle is a data recipient for payment-related processing. See Paddle's Privacy Notice.
• Cloud infrastructure and database providers that host the Service and store your data on our behalf.
• Email and support tooling used to reply to you.
• AI processors that transform food descriptions you submit into an estimated protein amount. We only send the text or transcript you provide for that log.
• Professional advisers (legal, accounting) where necessary.
• Public authorities where required by law.

We do not sell your personal data.

Your data may be processed in countries outside your own, including the European Economic Area, the United Kingdom, and the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

We keep account and product data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 90 days, except where we are required to retain records (for example billing records held by Paddle for tax and accounting purposes).

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data ("right to erasure").
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time where processing is based on consent.
• Complain to a supervisory authority in your country.

To exercise any right, email support@getplenty.app. We respond within one month.

We use essential cookies and local storage to keep you signed in and remember preferences (theme, reminders, quiz progress). We do not run third-party advertising cookies. Any analytics we use is limited to product improvement.

We use appropriate technical and organizational measures - encryption in transit, access controls, row-level security on our database, and least-privilege service accounts - to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.

Plenty is not directed at children under 16 and we do not knowingly collect their data.

We may update this Notice from time to time. Material changes will be communicated in the app or by email. The "Last updated" date reflects the most recent version.

BESS POC D-1 s.r.o.
Email: support@getplenty.app