Privacy Policy

1. Introduction

This policy explains what MealFlow (the "App," "we," "us") collects, why, who it's shared with, how long it's kept, and the choices you have. Several of the things we hold (your weight, height, food log and goals) are health information, and we treat them with that care.

2. Who the App is for

The App is for adults only: you must be 18 or older to create an account or use it.

3. Information we collect

3.1 Information you give us

• Account: email address, username and password (stored only as a bcrypt hash). If you sign in with Google: your name, email address and profile picture from Google.
• Body and goals: sex, age, height, weight, activity level, goal (lose, maintain or gain), target weight and date, and the weigh-ins you log.
• Food preferences: diet, allergies, cuisines, cooking time, meals per day, foods you like or dislike, and anything you type into a plan request (for example foods to include or avoid).
• Food log and plans: the meal plans we make for you, meals you swap, meals you mark eaten or skipped, foods and meals you add yourself, portions, favourites, grocery-list ticks, and the days you take as rest days to keep a logging streak.
• Settings: units, theme, and whether you want notifications.

We don't ask about medical conditions, pregnancy, medication or eating-disorder history. Answers to health questions the App asked before October 2026 have been erased.

3.2 Information collected automatically

• Sign-in cookies: to keep you signed in (see section 10).
• Server logs: our host records requests, including IP address, time, the address requested and any errors. We use them to keep the App running and secure.
• Notifications: if you allow notifications, your browser gives us a push address and we store a short description of the browser (for example "Safari on iPhone").
• Account events: when you accepted these terms and when you last signed in.

We do not use analytics or advertising tools, tracking cookies, or device fingerprinting.

4. How we use it, and our legal bases

• To provide the App (performing our agreement with you): calculating your targets, building and adjusting plans, your food log, grocery lists, and plan-ready notifications.
• Health information (your explicit consent, given when you enter it): used only to provide the App. You can withdraw consent at any time by deleting it or your account (section 9).
• Security and reliability (our legitimate interests): keeping accounts secure, preventing abuse, and fixing errors.
• Emails about your account and plans (our agreement with you): for example when your plan is ready, or a weekly reminder. You can turn these off in Profile under Notifications.
• Legal obligations: when the law requires it.

We do not sell your information, use it for advertising, or make decisions about you that have legal or similarly significant effects.

5. Who we share it with

We share information only with the service providers below, who process it for us to run the App, and only what each needs:

Under Anthropic's and OpenAI's standard API terms, what we send them is not used to train their models by default. These providers have their own privacy policies.

We may also disclose information when required by law, to protect the safety or rights of our users or others, or as part of a merger, acquisition or sale of the App (in which case this policy continues to apply to your information).

6. International transfers

Our servers and most of our providers are in the United States. If you use the App from outside the US, including the EEA, UK or Switzerland, your information is transferred to and processed in the US. Where the law requires it, we rely on the safeguards our providers offer for such transfers, such as the European Commission's Standard Contractual Clauses.

7. How we protect it

• Encryption in transit (HTTPS/TLS) for everything between your device and the App.
• Passwords stored only as bcrypt hashes.
• Sign-in through secure, HTTP-only cookies, with short-lived access tokens and sign-in tokens we can revoke.
• Access to accounts and admin tools limited to the people who run the App.
• Email addresses are masked in our logs, and passwords and tokens are never logged.

No method of storage or transmission is completely secure, so we can't guarantee absolute security.

8. How long we keep it

• Your account and everything in it: until you delete your account. Deletion removes it from our database straight away.
• Photos of meals you add yourself: deleted from storage when you delete your account.
• Database backups: our database provider keeps short-term backups for recovery, so a deleted account can remain in a backup for up to 30 days before it's overwritten.
• Custom plan requests: the request text and the plan it produced are cached, without your name or account, for 24 hours so a similar request can be answered faster, then deleted.
• Sign-in tokens: expire after 30 days and are then deleted.
• Server logs: kept by our host for a limited period under its own retention policy.
• Emails: copies of emails we send may remain in our email provider's sent mail.

9. Your rights and choices

You can do these yourself, in the App:

• Access and portability: Profile → Privacy & data → Download my data gives you a file of everything we store about you.
• Correction: change your sex, age, height and preferences in Profile, and your goal with Edit goal. Contact us to change your email address or username.
• Deletion: Profile → Privacy & data → Delete account permanently deletes your account and all its data.
• Emails: turn them off in Profile under Notifications.
• Push notifications: turn them off in your browser or device settings.

Depending on where you live, you may also have the right to restrict or object to how we use your information, to withdraw consent, and to complain to a data protection authority. Contact us (section 13) for anything you can't do in the App, and we'll respond within the time the law requires.

California (CCPA/CPRA): you have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for using these rights. We do not sell or share personal information for cross-context behavioural advertising.

Consumer health data (including Washington, Nevada and Connecticut): the body, goal and food-log information described above is consumer health data. We collect it only to provide the App, with your consent, never sell it, and share it only with the providers listed in section 5. You can access or delete it in the App at any time.

10. Cookies and storage on your device

We use only cookies the App needs to work: secure, HTTP-only sign-in cookies. The App also stores a few settings in your browser, such as your theme, whether you dismissed the install banner, and a draft of goal setup in progress. We use no advertising or analytics cookies, so there is nothing to opt out of.

11. Children and teens

The App is not for anyone under 18, and we do not knowingly collect information from them. If we learn that someone under 18 has created an account, we will delete it. If you believe this has happened, contact us.

12. Changes to this policy

When we change this policy we will post the new version here and update the date above. For material changes we will also make reasonable efforts to tell you, for example by email or in the App, before they take effect.

13. Contact us

For questions about this policy or your information, or to use any of your rights, contact us at:

Email: privacy@example.com