Privacy Policy

Last updated: [EFFECTIVE DATE]

This Privacy Policy explains how (“Meal+,” “we,” “us,” or “our”) collects, uses, and shares information when you use the Meal+ mobile application and related services (the “Service”). By using the Service, you agree to this Policy.

Meal+ is not a medical device and does not provide medical advice. Meal+ offers educational food and nutrition guidance based on the information you provide. It does not diagnose, treat, or prevent any condition and is not a substitute for advice from a qualified healthcare professional. Always consult your doctor or registered dietitian, and never disregard professional advice because of something in the app. In an emergency, call your local emergency number.

1. Information we collect

We collect the information you choose to provide and a limited amount of technical data needed to run the Service.

Account & identity

Email address and display name, and—if you use Sign in with Apple or Google—the identifier those providers return. Authentication is handled by our provider Clerk.

Health & dietary profile (the data that powers the app)

Health conditions and condition sub-status you select (for example flare/remission, dialysis status, CKD stage, heart-failure status, insulin use).
Allergies and intolerances.
Medications you choose to add (names, notes, and reminder times).
Dietary patterns, goals, and cultural/heritage preferences.
Biometrics you optionally enter—height, weight, age, and sex at birth—used to estimate nutrition targets.
Custom nutrient targets you or your clinician enter.

Food, meals & images

Foods and meals you log, saved meals, meal plans, daily scores, fridge items, generated recipes, and shopping lists.
Photos you capture or upload to scan a meal, a nutrition label, or a restaurant menu, and the text/nutrition extracted from them.
Health documents you optionally upload for analysis (for example a lab report).
Messages you send to the in-app AI Coach.

Location

If you use restaurant discovery and grant permission, we access your device’s precise location only while you are using that feature (“when in use”). We do not track your location in the background.

Diagnostics

Crash and error diagnostics via Sentry. We configure Sentry to scrub personal and health content (we disable default personal-data collection and strip request bodies, user identifiers, and console logs from reports).

2. How we use your information

To provide and personalize the Service—generating condition-aware nutrition targets, meal guidance, scores, recipes, and Coach responses.
To analyze the photos, labels, menus, and documents you submit.
To process subscriptions and manage your account.
To maintain security, prevent abuse, and apply rate limits.
To diagnose crashes and improve reliability.

We process your health-related data to provide the features you request. Depending on your region, our legal basis is your consent and the performance of our contract with you.

3. AI processing and service providers (subprocessors)

We do not sell your personal information. To operate the Service we share the minimum necessary data with the providers below, who process it on our behalf:

Provider	Purpose	Data shared
Convex	Backend, database & file storage	All app data and uploaded images
Clerk	Authentication	Email, name, sign-in identifiers
Anthropic (Claude)	AI Coach; meal/menu image analysis	Coach messages with a minimal health context; submitted images and text
OpenAI	AI text & image analysis	Food-matching and analysis prompts; submitted images and text
Google Cloud Vision	Nutrition-label text recognition (OCR)	Label images you submit
Google Places & Geoapify	Restaurant discovery	Approximate location and search terms
RevenueCat	Subscription management	App user identifier and purchase status
Sentry	Crash & error diagnostics	Diagnostic data (scrubbed of personal/health content)
USDA FoodData Central; Open Food Facts	Food & barcode lookup	Search terms and barcodes (no personal health data)
Apple	App distribution & in-app purchases	Purchase and subscription data

Privacy-by-design choices. Your medication names are never sent to the AI models—the Coach is given only a count so it can defer medication questions to your care team. The Coach receives only a minimal, necessary health context. Submitted images and prompts are sent to the AI providers above to generate your results; per those providers’ current API terms they are [not used to train their models — VERIFY each provider].

4. Sharing and disclosure

We share information only: (a) with the subprocessors above to run the Service; (b) if required by law or to respond to valid legal process; (c) to protect the rights, safety, and security of users and the public; or (d) in connection with a merger, acquisition, or asset sale, subject to this Policy. We do not sell your personal information, and we do not use it for cross-context behavioral advertising.

5. Data retention and deletion

We keep your information for as long as your account is active or as needed to provide the Service. You can export your data and delete your account from within the app at any time; deleting your account removes your associated data from our systems, subject to limited copies retained as required by law or for legitimate business purposes (for example, financial records). Backups and provider logs expire on a rolling basis.

6. Security

We use industry-standard safeguards including encryption in transit, access controls, per-user authorization on all data, and server-side rate limiting. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Children’s privacy

The Service is not directed to children under [MINIMUM AGE — e.g., 13/16/18], and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

8. Your rights

Depending on where you live (for example under GDPR or the CCPA/CPRA), you may have the right to access, correct, delete, port, or restrict processing of your personal information, to withdraw consent, and to not be discriminated against for exercising these rights. To make a request, use the in-app tools or contact us below. We will verify and respond as required by applicable law. California residents: we do not “sell” or “share” personal information as those terms are defined under the CCPA/CPRA.

9. International transfers

We and our providers may process your information in countries other than yours, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for international transfers.

10. Changes to this Policy

We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide notice in the app. Your continued use of the Service after an update means you accept the revised Policy.

11. Contact us

Meal Plus, LLC
General support: support@mealplus.app