Privacy

The short version

Mealmate stores the names of the people you cook for, which meals each of them will eat, what you planned, and what you recorded as eaten. It is held in London. Nothing is sold, shared or used for advertising, and deleting your account deletes all of it.

What is stored

• Your email address, because it is how you sign in. There is no password to store.
• The names of the people in your household, including children, and whether you marked each one as an adult or a child. These are whatever you type — first names, nicknames or initials all work equally well, and Mealmate has no use for anything more.
• Who eats what.This is the heart of the app and it is worth being plain about: it amounts to a record of your family’s food preferences, and for some households it will imply an allergy, an intolerance or a religious or ethical diet. Mealmate never asks you to say which, and stores only the tick.
• Your meals and their ingredients, your plans, and your history of what was eaten on which day.

What is not stored

No photographs, no dates of birth, no addresses, no payment details, and no health information beyond whatever you choose to imply by ticking who eats what. There is no advertising and no third-party analytics.

The people in your household

They do not have accounts and cannot sign in. To Mealmate they are names on your plan, entered by you. You are the one deciding what to record about them, which is worth remembering if a child is old enough to have a view about it.

Why we are allowed to hold it

The lawful basis is performance of a contract under Article 6(1)(b) of the UK GDPR: you asked for a meal planner, and a meal planner cannot work without knowing who eats what. Nothing here relies on consent for marketing, because there is no marketing.

Where it is held

In a Supabase Postgres database in London (eu-west-2), chosen so the data stays in the UK. The app is served by Vercel. Both act as processors, and both see the data only in order to run the service. Sign-in emails are sent by an email provider, which necessarily sees your email address.

How long

Until you delete it. There is no automatic expiry, because a rotation that avoids repeats is only as good as the history behind it. Deleting a plan removes the plan and keeps the record of what was eaten; deleting your account removes everything.

Your rights

You can see everything Mealmate holds by using it — there is no hidden profile behind the screens. You can correct anything from the app, and you can erase all of it at once from Settings. That deletion is immediate and cannot be undone. If you want a copy of your data or have a complaint, get in touch; you can also complain to the Information Commissioner’s Office.

Cookies

One cookie, holding your sign-in session. There is no tracking cookie and therefore no cookie banner to dismiss.