Privacy Policy

1. Introduction

MealGenie ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our meal planning service.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly:

• Name and email address (for account creation)
• Payment information (processed by third-party providers)
• Profile information and preferences

2.2 Dietary and Health Information

To provide personalized meal plans, we collect:

• Dietary restrictions and preferences
• Food allergies and intolerances
• Nutritional goals and targets
• Cooking skill level and available time
• Kitchen equipment and pantry information
• Household size and meal preferences

2.3 Usage Data

We automatically collect certain information:

• Device information (browser type, operating system)
• IP address and general location data
• Usage patterns (pages viewed, features used, time spent)
• Meal plan interactions (saved recipes, ratings, feedback)
• Log data and error reports

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance your experience, analyze usage, and deliver personalized content.

3. How We Use Your Information

We use collected information to:

• Generate personalized meal plans and recipe recommendations
• Accommodate your dietary restrictions and preferences
• Process payments and manage subscriptions
• Improve our AI algorithms and service quality
• Send service-related communications (confirmations, updates, security alerts)
• Send marketing communications (with your consent, opt-out available)
• Analyze usage patterns and user behavior
• Detect and prevent fraud and abuse
• Comply with legal obligations
• Provide customer support

4. AI and Machine Learning

5. How We Share Your Information

We do not sell your personal information. We may share your information with:

5.1 Service Providers

• Payment processors (Stripe, PayPal, etc.)
• Cloud hosting providers (Supabase, Vercel, AWS, Google Cloud)
• Email service providers
• Analytics providers
• Customer support tools

5.2 AI Service Providers

We use third-party AI services (OpenAI, Anthropic, Google, etc.) to generate meal plans. Your dietary information may be processed by these providers in accordance with their privacy policies.

5.3 Legal Requirements

We may disclose information when required by law, to protect our rights, or in response to legal processes.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

6. Data Security

We implement industry-standard security measures:

• Encryption in transit (TLS/SSL) and at rest
• Secure database storage with access controls
• Regular security audits and vulnerability assessments
• Employee training on data protection
• Limited access to personal data on a need-to-know basis

However, no system is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. We will retain and use your information as necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Improve our services

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

8. Your Privacy Rights

Depending on your location, you may have the following rights:

8.1 Access and Portability

You can request a copy of your personal data in a structured, machine-readable format.

8.2 Correction

You can update or correct your personal information through your account settings.

8.3 Deletion

You can request deletion of your account and personal data, subject to legal retention requirements.

8.4 Opt-Out

You can opt out of marketing communications at any time by clicking "unsubscribe" in emails or adjusting your account settings.

8.5 Object to Processing

You can object to certain types of data processing, such as processing for marketing purposes.

To exercise these rights, contact us at privacy@mealgenie.ai

9. Children's Privacy

Our Service is not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses
• Data processing agreements with service providers
• Compliance with applicable data protection frameworks

11. State-Specific Privacy Rights

11.1 California Residents (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access personal information
• Right to deletion
• Right to non-discrimination

11.2 European Union Residents (GDPR)

EU residents have rights under GDPR:

• Right to access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object
• Rights related to automated decision-making

12. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: