Security

We take the security of your data seriously. Here's a plain-English summary of how Grovio is built and what we do to keep your information safe.

Encryption in transit

All traffic to and from Grovio is served over HTTPS (TLS), so data is encrypted between your device and our servers.

Trusted infrastructure

Authentication and your data are handled by Supabase (managed PostgreSQL). Row-level security policies mean each account can only access its own data.

Payments

Payments are processed by Stripe. Grovio never sees or stores your full card number — card details go directly to Stripe, a PCI-DSS Level 1 certified provider. We only keep a reference to your subscription status.

Least data

We collect only what we need to plan your meals and run your account. See our Privacy Policy for exactly what we store and why.

Report a vulnerability

Found a security issue? Email support@grovio.orgwith the details and we'll respond promptly. We appreciate responsible disclosure.