Consent Agreement

Last updated: August, 2026

This page is about the Pepesto mobile app. It covers the personal data we process for people who use the app to plan meals and shop for groceries.
If you are a developer using the Pepesto API, this page does not apply to you. The API stores no data about your end users — see our API Terms for what governs your use, and our Privacy Policy for how we handle data generally.

At Pepesto Solutions GmbH, your privacy is paramount. To provide you with the best experience in our menu planning and grocery shopping app, we need to process certain personal data. This agreement outlines what we collect, why we collect it, and how we use it.

Data We Collect:

These are collected when you use the app, and only when you provide them:

Personal Information: First and last name.
Contact Information: Email address, phone number, household address.
Dietary Preferences: Details about foods you prefer, foods you avoid, and any dietary restrictions or allergies.
Meal History: A record of meals you’ve planned and groceries you’ve shopped for, retained for 14 days.

Purpose of Collection:

Account Management: To manage your user account and provide personalised services.
Personalised Experience: To offer tailored menu suggestions based on your dietary preferences.
Communication: To notify you of any updates, changes, or promotions related to our app.

Data Processing and Storage:

Safety: Your data is encrypted and stored on secure servers provided by Google Cloud’s Platform, ensuring that only authorised service accounts can access it.
Duration: All data, except meal history, is stored indefinitely until you decide to leave our service. Meal history is retained for 14 days. This covers app account data only — the API stores nothing about your end users.

We do not sell your personal data, and we do not share it for advertising or marketing purposes.

To operate the Service we rely on a small number of providers who process data on our behalf, under contract and only on our instructions:

Hosting and storage — Google Cloud Platform, on servers located in the EU/EEA.
Payments — Stripe, for purchases made through Pepesto. Card details go to Stripe directly; we never store them.
AI processing — OpenAI. These requests do not carry information that identifies you. Data we send to the OpenAI API is not used to train OpenAI’s models; that is the standard position under their API terms. OpenAI holds API data briefly to check for misuse, then deletes it.

Supermarkets:

We do not pass your details on to supermarkets. When you shop in the app, Pepesto puts the items into a basket on the supermarket’s own website. Signing in, entering your delivery address, and paying all happen there, directly between you and the supermarket — those details never reach us.

To move a checkout along, our system briefly looks at what is on screen on the supermarket’s page so it can work out the next step. Nothing from that is kept: it is processed and discarded immediately. Our Privacy Policy explains this in more detail.

Apart from the providers above, we share your data only when the law requires it.

Further information:

For a detailed understanding of how we handle your personal data, including our data retention practices, third-party interactions, and your rights as a user, please refer to our Privacy Policy.

Your Choices and Rights

Granular Consent: You can choose which data to provide. However, certain functionalities of the app might require specific data points.

Withdrawal: You have the right to withdraw your consent at any time. If you wish to do so, please visit the household settings section in the app, and delete your household.

Data Access and Corrections: You can access, modify, or delete your personal data from within the app.

By ticking the check-box shown in the mobile application, you confirm that:

You have read and understood this consent agreement.
You are granting Pepesto Solutions GmbH the right to process your data for the purposes outlined above.
You are above the age of 16 or have obtained parental or guardian consent to use this service (if below 16).