Privacy Policy

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us:

• Account information (email address, name)
• Profile data (age, gender, weight, height, activity level, health goals)
• Dietary preferences and restrictions (allergies, dietary preferences, liked products)
• Activity data (daily steps, workout frequency, intensity)

2.2 Health and Nutrition Data

We collect sensitive health-related information:

• Meal plans and food diary entries
• Nutritional intake data (calories, macronutrients, micronutrients)
• Food photos for AI analysis
• Barcode scan history
• Progress tracking data
• Water log: the drinks you log, your daily water goal settings and favourite containers
• Only if you turn on small-appetite (GLP-1) mode and give consent: your goal weight, treatment-change days (optional), plan preferences, and your appetite and nausea log. See section 7
• Only if you add other people to your household: their diets, allergens and age groups (for children), with their consent or a guardian's. See the household section

2.3 Usage Data

We automatically collect information about your use of the Service:

• API usage quotas and limits
• Feature usage statistics
• Device information and browser type
• IP address and location data

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To generate personalized meal plans, analyze food photos, and provide nutrition tracking
• AI Processing: To send your preferences and data to Google Gemini AI for meal plan generation and food analysis
• Service Improvement: To improve our AI models, algorithms, and user experience
• Communication: To send you service updates, subscription information, and support responses
• Analytics: To analyze usage patterns and optimize our service
• Compliance: To comply with legal obligations and enforce our terms

4. AI Data Processing

Important: Important: Mealyno uses Google Gemini AI to generate meal plans and analyze food photos. When you use these features:

• Your profile data, dietary preferences, and food photos are sent to Google's Gemini AI service
• Google processes this data according to their Privacy Policy and Terms of Service
• We do not control how Google uses your data for AI model training or improvement
• Your data may be used by Google to improve their AI models
• We recommend reviewing Google's Privacy Policy for details on their data handling practices

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

5.1 Third-Party Services

• Google Gemini AI: For meal plan generation and food photo analysis
• Firebase (Google): For data storage and authentication
• monobank: For subscription billing and payment processing
• OpenFoodFacts: For barcode scanning and product information

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

5.3 Business Transfers

In the event of a merger, acquisition, or sale, your information may be transferred to the new entity.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication through Firebase
• Access controls and authentication
• Regular security audits and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Health Data: Small-Appetite (GLP-1) Mode

Small-appetite mode is optional. Telling us you use a GLP-1 medication, and your answers in this mode, are health data, a special category of personal data.

• Legal basis: your explicit consent (GDPR Art. 9(2)(a)). We record when you consented and the version of the consent text you saw. The mode cannot be turned on without it.
• Purpose: only to tailor your protein, water and calorie targets, meal plans, what-to-eat-next ideas and reminders. We do not diagnose, give dosing advice, or use this data for advertising.
• What is stored: goal weight, treatment-change days (up to 4, optional), smaller-portion and soft-food preferences, and your daily appetite and nausea log. We do not store the medication name or start date.
• Retention: while the mode is on, so weekly summaries work. When you turn it off, the settings are deleted and so is the log unless you untick that box. Everything is deleted with your account.
• Withdrawing consent: turn the mode off in Profile (in the app: Settings). Turning it off means deleting. Withdrawal does not affect processing before it.
• Never sold and never used for advertising. Shared only with processors acting on our behalf: Firebase (Google) stores it; Google Gemini receives plan and suggestion requests that may include the targets and preferences this mode sets (for example a protein target, smaller portions), but not your log and not any medication name.
• Age: adults only (18+). If your profile mentions pregnancy or breastfeeding, the mode's targets are not applied and we ask you to talk to your doctor.

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal data
• Correction: Request corrections to inaccurate data
• Deletion: Request deletion of your data
• Restriction: Restrict processing
• Portability: Request a portable copy
• Objection: Object to certain processing

You can download a copy of your data (JSON) in the app: Profile, Download my data (in the mobile app: Settings). Available 3 times a day.

You can delete your account and all your data in the app (Settings, Delete account) or on the page Delete your account.

Household Meal Plans: Other People's Data

If you add other people to your household (other adults or children) you enter data about third parties. This is optional, and we ask you to confirm for every person.

• Consent: before a person is saved you confirm that they know and agree (for an adult), or that you are their parent or legal guardian (for a child). We record the version of the text and the time.
• What is stored: for an adult: nickname (up to 20 characters), age, sex, height, weight, activity level, goal, diet, allergens, words to avoid, which meals they eat and, only with a separate consent, GLP-1 mode settings. For a child: only an age group (2-3, 4-8, 9-13 or 14-17), optionally sex and a nickname, diet, allergens, words to avoid and which meals they eat. For children we do not ask for a name, weight, height or goal, and we apply no calorie restriction.
• Purpose: only to size portions, build menus that avoid the listed allergens, and make shopping lists for your household. Not for advertising and not for profiling.
• Allergies: a plan avoids the ingredients listed but cannot guarantee there is no cross-contact. Always read labels.
• Deletion: removing a person deletes their data straight away. Plans already created keep a minimized snapshot (nickname, age group, portion targets, diet and allergens) until you delete the plan itself. Everything is deleted with your account, and your data download (JSON) includes these people.
• Plans made for a household cannot be shared publicly: household data never reaches the community feed or public links. When a plan is generated, household members' diets and allergens may be sent to Google Gemini (as your own are), but not nicknames.

Mobile app launch list

• What we store: your email, the platform you chose (iPhone, Android or both), your language, a record of your consent (time and wording version) and, if you arrived through a campaign link, the campaign names from its address (utm_source, utm_campaign and similar). We do not store your IP address.
• Why: to send you one confirmation email and one message when the app is available in the App Store and Google Play. Legal basis: your consent (GDPR Art. 6(1)(a)). We send no other marketing without a separate opt-in.
• Double opt-in: until you click the link in the confirmation email the address is unconfirmed and is not used for the launch message.
• Who sees it: only us; the list is stored in Firebase (Google Cloud) and emails are sent by Resend (USA), both acting on our behalf. Addresses are never sold or shared with ad networks.
• How long: until launch day and up to 90 days after, then deleted, or sooner if you unsubscribe.
• Withdraw consent and erasure: every email we send has a "Remove my address" link that deletes it immediately. You can also enter your address on the launch-list removal page or write to support@mealyno.com and we will delete it within 7 days. Only a technical marker without any email remains, so you are not added again by mistake.

Remove my address from the launch list

9. Cookies

We use cookies to operate the service, provide analytics, and personalize your experience. You can control cookies in your browser settings.

10. Changes to this Policy

We may update this Policy from time to time. The new version takes effect upon publication.

11. Contact Information

If you have any questions regarding this Policy, please contact us at support@mealyno.com