Pico

Privacy Policy

Effective date: 3 August 2026 · Last updated: 3 August 2026

This Privacy Policy explains how PLAN WITH PICO PTY LTD (ABN 19 700 591 984, “Pico”, “we”, “us”) collects, uses, discloses and protects your personal information when you use the Pico iPhone application and this website (together, the “Service”).

We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth) and, where it applies to you, the EU/UK General Data Protection Regulation (GDPR).

1. Information we collect

Account information

  • Your email address and password credentials (passwords are stored hashed, never in plain text).
  • Your name or display name, if you provide one.
  • Your country or region, used to select supermarkets, currency and measurement units.

Meal-planning preferences

  • Nutrition and lifestyle goals.
  • Dietary tags (for example vegetarian, vegan, gluten-free, pescatarian).
  • Allergies and intolerances.
  • Spice tolerance, food dislikes and cuisine preferences.
  • Kitchen appliances available to you and your pantry staples.

Some of this information — in particular allergies, intolerances and health-related goals — may be treated as sensitive information or a special category of personal data. We collect it only with your consent, use it solely to generate safe and suitable meal plans, and you may remove it at any time in the app.

Household details

  • The household members you cook for, including any name or label you give them, and their age band, diets, allergies and preferences where you choose to add them. Please only add details about other people where you are authorised to do so.

Activity within the app

  • Recipe ratings, favourites and meals you mark as cooked or skipped.
  • Generated meal plans, swaps, locks and regenerations.
  • Shopping lists, ticked items, pantry state and budget settings.

Subscription and technical information

  • Subscription and free-trial status and an anonymous purchase identifier supplied by Apple. We use this to manage your entitlement and trial. We never receive or store your full payment card details.
  • Basic technical data needed to operate and secure the Service, such as device type, operating system version, app version, and error/diagnostic logs.

2. How we use your information

  • To create your account and authenticate you.
  • To generate personalised meal plans, recipes, shopping lists and price estimates that match your household's diets, allergies, budget and preferences.
  • To sync your plans, lists and preferences across your devices.
  • To improve suggestions over time based on the meals you rate, favourite or skip.
  • To validate your App Store subscription and free-trial status and manage your entitlements.
  • To provide customer support and respond to your requests.
  • To detect, prevent and address abuse, fraud or technical faults.
  • To comply with our legal obligations.

Where GDPR applies, our legal bases are: performance of a contract (providing the Service), consent (for allergy, health-related and other sensitive preferences), legitimate interests (security, service improvement) and legal obligation.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Third-party service providers

We use a small number of trusted processors to run the Service:

  • Supabase — authentication, database and file storage. Your account details, preferences, plans and lists are stored here.
  • Apple App Store — processing of all subscription and free-trial payments and billing. Apple's own privacy policy applies to those transactions.
  • Meal plan generation providers — de-identified preference data (such as diets, allergies, budget and cuisine preferences) is sent to our meal plan generation provider to build your plans. We do not send your email address or account identifiers, and this data is not used to train third-party models.

These providers may store or process data outside Australia, including in the United States and the European Union. Where personal information is transferred overseas, we take reasonable steps to ensure it is handled consistently with this policy and applicable law, including standard contractual clauses where required.

4. Cookies and analytics

This website is a static informational site. It does not set advertising cookies and does not use third-party analytics or tracking. If we add analytics in future, we will update this policy and, where required, ask for your consent first.

5. Storage and security

Data is stored on managed cloud infrastructure with encryption in transit (TLS) and at rest. Access to production data is restricted to authorised personnel who need it to operate the Service, and database access is protected by row-level security so you can only read and write your own records. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information from misuse, loss and unauthorised access.

6. Data retention

We keep your account data for as long as your account is active. If you delete your account, your personal information — including preferences, household details, plans and lists — is deleted from our production systems within 30 days, and from encrypted backups within 90 days. We may retain limited transaction records where required for tax, accounting or legal purposes.

7. Your rights

  • Access the personal information we hold about you.
  • Correct information that is inaccurate or out of date (most of it is editable in the app).
  • Request deletion of your account and associated data.
  • Withdraw consent for sensitive information at any time by removing it in the app.
  • Request a portable copy of your data.
  • Object to or restrict certain processing, where GDPR applies.
  • Complain to a regulator — in Australia, the Office of the Australian Information Commissioner.

To exercise any of these rights, email support@planwithpico.app from the email address on your account with the subject “Data request”. We respond within 30 days.

8. Children's privacy

Pico is not directed at children and is intended for users aged 13 and over (16 and over where local law requires). We do not knowingly collect personal information directly from children. Where you add a child as a household member, please provide only the minimum detail needed for meal planning. If you believe a child has created an account, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. Material changes will be notified in the app or by email before they take effect, and the “last updated” date above will change.

10. Contact us

PLAN WITH PICO PTY LTD
470 St Kilda Road, Melbourne, VIC 3004, Australia
Email: support@planwithpico.app