Privacy Policy

1. Who we are

Meal Optimizer ("we", "us", or "our") operates the meal planning service available at meal-optimizer.com. This Privacy Policy explains how we collect, use, and share information about you when you use our service.

For privacy questions or data requests, contact us at privacy@meal-optimizer.com.

2. Information we collect

We collect the following categories of personal information:

• Account information — your email address and password (hashed by Supabase Auth; we never see it in plaintext).
• Household profile — number of adults and children, member names (optional), ages, and appetite levels.
• Dietary information — allergies, dietary restrictions (e.g. vegetarian, gluten-free), food preferences, texture avoids, spice tolerance, and "never foods".
• Planning preferences — weekly budget, preferred grocery stores, cooking time caps, and meal mix (home / eat-out / delivery split).
• Usage data — meal ratings (love / ok / refuse), plan history, swap and skip actions, and AI adapt instructions.
• Communication preferences — whether you have opted in to weekly reminder emails and your preferred reminder day.

We do not collect payment information directly. Payment processing is handled by Stripe, subject to their own privacy policy.

3. How we use your information

We use the information we collect to:

• Generate personalized weekly meal plans tailored to your household's preferences and constraints.
• Improve plan recommendations over time using your meal feedback and history.
• Send weekly meal plan reminder emails (only if you have opted in).
• Provide customer support and respond to your requests.
• Maintain the security and functionality of the service.
• Comply with legal obligations.

We do not use your information to serve advertisements, and we do not sell your personal information to third parties.

4. How we share your information

We share your information only with the following service providers who help us operate the platform:

• Supabase — authentication and database hosting (United States).
• Render — API server hosting (United States).
• Vercel — frontend hosting and delivery (United States).
• Resend — transactional email delivery (United States).
• Anthropic — AI model powering meal personalization and adapt features. Meal plan context and preferences are sent to Anthropic's API to generate recommendations. Anthropic does not use this data to train its models.
• Stripe — payment processing (United States). We share only the information necessary to process your subscription.

We may also disclose information if required by law, court order, or to protect the rights and safety of Meal Optimizer or its users.

5. Data retention

We retain your account and household data for as long as your account is active. If you delete your account, we delete your personal information within 30 days, except where retention is required by law (for example, billing records).

6. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed authentication credentials, and row-level security on our database. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Children's privacy

Meal Optimizer is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us at privacy@meal-optimizer.com and we will delete it promptly.

Note: the app allows you to add household members including children as part of your family meal plan. This information is provided by the account holder (a parent or guardian) and is used solely to personalize meal suggestions.

8. California residents — CCPA rights

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

• Right to know — you may request a copy of the personal information we have collected about you in the past 12 months, the categories of sources, the purposes for collection, and the categories of third parties with whom we share it.
• Right to delete — you may request that we delete the personal information we hold about you, subject to certain exceptions.
• Right to opt out of sale — we do not sell your personal information, so this right does not apply.
• Right to non-discrimination — we will not discriminate against you for exercising any of your CCPA rights.

To submit a request, email privacy@meal-optimizer.com with the subject line "CCPA Request". We will respond within 45 days.

You may also delete your account directly from the Settings page, which will permanently remove your data within 30 days.

9. Cookies

We use cookies solely to maintain your authenticated session (managed by Supabase Auth). We do not use advertising cookies or third-party tracking cookies. No cookie consent banner is required because we use only strictly necessary cookies.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

11. Contact

For questions, concerns, or data requests, contact us at privacy@meal-optimizer.com.