Privacy Policy
Last updated: February 13, 2026
1. Information We Collect
We collect the following types of information:
- Account Information: Email address, name, and profile picture (from Google or Apple sign-in).
- Profile Data: Age, sex, weight, height, dietary preferences, allergies, health goals, cooking preferences, and household size you provide during onboarding or in your settings.
- Usage Data: Recipes saved, recipe ratings, meal logs, pantry items, shopping lists, meal plans, saved preferences/notes, and chat messages.
- Device and Technical Data: Browser type, device type, and general usage patterns (pages visited, features used). We do not collect precise location data.
- Payment Information: Processed securely by Stripe. We do not store your credit card details.
2. How We Use Your Information
- To provide personalized meal recommendations, recipes, and nutrition tracking.
- To calculate your nutritional needs based on your profile.
- To remember your preferences, pantry items, and meal history.
- To process payments and manage your subscription.
- To send important service updates, support communications, and (with your consent) marketing emails.
- To improve the service based on how features are used.
3. AI and Your Data
MealThinker uses third-party AI service providers to generate meal plans, recipes, and nutritional guidance. When you use the chat or meal planning features, the following data may be sent to our AI providers:
- Your dietary preferences, allergies, and restrictions
- Items in your pantry
- Your meal history and recipe ratings
- Your nutritional goals and profile data (age, weight, activity level)
- Text you type in the chat interface
What we do NOT send to AI providers:
- Your email address or account credentials
- Your payment information
- Your name or identity
Our AI providers process this data solely to generate responses to your requests. We do not permit our AI providers to use your data to train their models. We may change AI providers at any time to improve the service.
4. Data Sharing
We share your data only with the following categories of service providers, solely to operate the service:
- Stripe: For secure payment processing.
- AI service providers: For generating meal plans and recipe recommendations (see Section 3).
- Authentication providers: For secure sign-in (Google, Apple).
- Email service providers: For sending authentication emails, service notifications, and marketing communications.
- Analytics providers: For understanding how the service is used and measuring advertising effectiveness. These providers may receive your usage patterns, device information, and, if you are logged in, your account identifier.
- Cloud infrastructure providers: For hosting the application and storing your data.
We do not sell your personal information to third parties.
5. Data Security
- All data is transmitted over HTTPS encryption.
- Passwords are not stored. We use OAuth (Google, Apple) and magic link authentication.
- Database access is restricted and secured.
- API endpoints are protected with authentication checks and rate limiting.
- We regularly review our security practices.
6. Your Rights
Depending on your location, you may have certain rights regarding your personal information.
All users may:
- Access: Request a copy of your data.
- Correction: Update or correct your information through your account settings or by contacting us.
- Deletion: Request deletion of your account and associated data.
- Export: Request your data in a portable format.
- Opt out of marketing: Unsubscribe from marketing emails at any time using the link in any email.
California residents (CCPA/CPRA): You have the right to know what personal information we collect and how we use it, request deletion, and opt out of the sale of personal information. We do not sell your personal information. You will not be discriminated against for exercising your privacy rights.
European Economic Area residents (GDPR): You have the right to access, rectify, erase, restrict processing, object to processing, and data portability. Our lawful basis for processing is contract performance (to provide the service) and legitimate interest (to improve and secure the service). For marketing communications, we rely on your consent, which you may withdraw at any time. You may lodge a complaint with your local supervisory authority.
To exercise any of these rights, contact us at support@mealthinker.com. We will respond within 30 days.
7. Cookies and Tracking
We use the following types of cookies and tracking technologies:
- Essential cookies: For authentication and session management. Required for the service to function.
- Analytics cookies: To understand how visitors use our site, which pages are visited, and how features are used. This helps us improve the service.
- Advertising cookies: To measure the effectiveness of our advertising campaigns and track conversions.
Most browsers allow you to control cookies through their settings. Blocking essential cookies may prevent you from using the service.
8. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where required by law (such as billing records).
9. International Data Transfers
Your data is processed and stored in the United States. By using MealThinker, you consent to the transfer of your data to the United States. We take reasonable steps to ensure your data is treated securely regardless of where it is processed.
10. Children's Privacy
MealThinker is not intended for users under 18 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes via email or through the service. The "Last updated" date at the top of this page indicates when the policy was last revised.
12. Contact Us
For privacy-related questions, contact us at support@mealthinker.com.