Privacy Policy

Data we collect

• Account and support: your email address, authentication and session records, and anything you send us when you ask for support.
• Household & taste profile: household name and members, dietary flags and allergies/intolerances, disliked ingredients, preferred cuisines, appetite/portion and protein settings, weekly budget, and preferred store. This can include health-related data (allergies), which we process only to keep your meal plans safe and relevant, on the basis of your explicit consent.
• Content and service activity: recipes and notes you add, meal plans and attendance, pantry and shopping-list items, favourites, ratings, swaps, store check-offs, and AI usage counts.
• Subscriptions: Apple processes purchases made through the iOS App Store and Stripe processes direct web purchases. We receive the product, provider, subscription status, renewal/expiry state, and provider transaction identifiers needed to grant access, restore purchases, prevent duplicate claims, and answer support requests. We do not receive your complete card or Apple payment credentials.
• Technical and analytics data: IP address, browser/device information, security and error logs, and, only if you accept analytics, an opaque account identifier and events about the screens and product actions you use.

How we use it

To provide the service (plan, shop, cook), personalise AI meal and recipe suggestions to your household’s tastes and constraints, process subscriptions, provide support, secure and troubleshoot the service, and, with your consent, measure product performance and retention.

Legal bases (GDPR)

• Contract: creating and securing your account, running the household planning service, processing subscriptions, and providing support you request.
• Explicit consent: allergy/health information you choose to add and optional product analytics. You can withdraw consent at any time by removing the health information or turning off analytics under You → Usage analytics.
• Legitimate interests: preventing fraud and abuse, diagnosing failures, and improving the reliability of the service.
• Legal obligations: records we must keep for tax, accounting, payment, or other legal requirements.

Cookies and analytics

Product analytics (PostHog, EU-hosted) only starts if you accept it in the banner shown on your first visit — decline, or ignore it, and no analytics is loaded or stored. Analytics is off by default.

If you accept, we record which screens are used and which actions succeed, tied to an opaque account identifier. We do not record your screen, and we never send your recipes, allergies, dietary preferences, household names or email address to our analytics processor. PostHog may store an analytics identifier in local storage and a cookie after you accept. We use no advertising cookies.

To change your mind, open You → Usage analytics. Turning it off stops collection immediately and clears what was stored on that device. We store your analytics choice, signed-in session, and language preference in your browser’s local storage so the service can honour them. To ask us to erase analytics data already sent, contact support@planmymeals.ai.

Processors we share data with

We use processors to run the service: Supabase (database, authentication, storage, and server functions), Vercel (web hosting and delivery), OpenAI (generating meal and recipe suggestions from the relevant household preferences and recipe/plan context), Apple (App Store purchases, subscription status, refunds, and server notifications), Stripe (direct web subscription payments), and, only after you consent, PostHog (EU-hosted product analytics). Our email provider also processes messages you send to support. We share only what each processor needs for that purpose, and we do not sell your personal data.

International transfers

Some processors may handle personal data outside the EEA, including in the United States. Where required, those transfers rely on a European Commission adequacy decision or safeguards such as the EU Standard Contractual Clauses.

Retention

We keep your account and household data while your account is active. If you delete your account as the household’s only member, we delete that household and its plans, recipes, and shopping data. If other members remain, shared household content may remain available to them, but we remove your account and membership and transfer ownership of shared plans and recipes to a remaining member.

Some records may remain for only as long as required by tax, accounting, fraud-prevention, security, backup, subscription reconciliation, or dispute-resolution obligations. Apple and Stripe keep payment records under their own policies and legal obligations. Turning off analytics clears the analytics identifiers on that device; contact us if you also want previously sent analytics data erased.

Your rights

Subject to the GDPR’s conditions and exceptions, you can access, correct, receive a portable copy of, erase, or restrict your data; object to certain processing; and withdraw consent. You can correct profile details and delete your account in the app under You → Account. For a copy of your data or any other request, email support@planmymeals.ai. You may also lodge a complaint with the Portuguese supervisory authority, the CNPD.

Children

PlanMyMeals is intended for adults — our Terms require account holders to be at least 18. It is not directed at children, and we do not knowingly collect their data.

Changes

We may update this policy; we’ll change the “last updated” date and, for material changes, notify you in the app.