Privacy Policy

• Account data: your email address and display name (a trial account has no email address — see below).
• Content you create: meal plans, grocery lists, budget entries and receipts, household membership, food likes and dislikes, canteen routines and kitchen-equipment notes — and, only if you consent, allergies and diet style (Section 3).
• Optional photos: receipt, fridge/pantry and cookbook-page photos you choose to upload.

Trying without an account: if you start without an account, we create a trial account for you without an email address — instead of one it only has a random user ID issued by our sign-in provider (Supabase). It stores what you enter while trying the app, for example your onboarding answers, your consents, your week plan, your grocery list, your budget, receipts and expenses you enter by hand, your own recipes, favorites and ratings, and a display name if you set one. AI features, purchases, photo uploads, household sharing and in-app support are only available with a real account. If you add your email address later, the trial account becomes your account with the same data. If you sign out or sign in to a different, existing account instead, the trial data stays on the trial account and can no longer be opened from the app.

We use no advertising SDKs and build no advertising profiles, and nothing you create is ever used for advertising. Usage analytics are strictly opt-in: they are off unless you switch “Share usage signals” on in Settings, and even then they record only which features were used — never contents, names or amounts.

Error reports: when the app hits a technical fault it records the error type, where it occurred and the app version, so the fault can be found and fixed. These reports are stored in our own database — no third-party crash service is involved — and they are scrubbed before leaving your device: addresses, identifiers and any quoted values are removed, and the text is capped. They contain no meal, receipt, grocery or household content. This is not analytics and is not used to measure you; it is how we learn that something broke.

To provide the service: build your plans and grocery lists, track your budget, and — if you join a household — share that content with the members you invite. We use your email to operate your account and, only with your consent, to send product updates.

Allergies and intolerances are health data, and your diet style can reveal similarly sensitive information. We therefore treat both as special categories of personal data under Art. 9 GDPR (sensitive personal data under the nDSG) and process them only with your explicit consent (Art. 9(2)(a) GDPR). We ask for this consent separately from the terms of use. It is voluntary: you can use MealVibes without it — we then don't ask about allergies and don't filter suggestions by them.

With your consent we use these details to filter meal suggestions and recipes and, as described in Section 4, include them in requests to our AI processors when they create recipes or suggestions for you.

You can withdraw your consent at any time — directly in the app under Settings → Food preferences, or by email to contact@mealvibes.app. When you withdraw it (or decline it), we delete your saved diet style and allergies; likes and dislikes are not health data and are kept. Withdrawal does not affect the lawfulness of processing before it.

To power features like receipt scanning, recipe import, recipe suggestions, storage tips and the budget coach, the relevant content (e.g. a receipt photo, or short item and meal names) is sent to an AI processor for processing. When an AI feature creates recipe suggestions or a recipe for you, the request can also contain your food likes and dislikes and — if you have consented (Section 3) — your allergies and diet style, so that the result can respect them. We use OpenAI (API) as our primary processor and Anthropic (Claude API) as a fallback. Both process this data solely to return the result, do not use API data to train their models, and retain it only transiently. No AI feature makes an automated decision with legal or similarly significant effects for you.

Before an AI feature sends anything for the first time, the app asks you once whether it may, and names OpenAI and Anthropic. If you choose "Not now", nothing is sent and that feature doesn't run; everything else in MealVibes works without it. You can withdraw this permission at any time under Settings → Food preferences ("AI features"); the app then asks again before the next AI request.

Content produced by these features — generated recipes, storage tips and coach texts — is AI-generated and marked as such in the app. It is a suggestion, not advice: cost figures are estimates, and recipes are not nutritional or medical guidance. Always check ingredients yourself if you have allergies.

If you create or join a household, your meal plans, grocery lists, budget figures and receipts become visible to the other members of that household. You choose who to invite (via a private invite code) and can leave a household at any time in Settings.

Your account and content are stored on Supabase infrastructure in the EU (Frankfurt, Germany), protected by row-level security so only you and your household members can access your data. AI processing (Section 4) and payment processing (Section 7) involve providers located in the United States; such transfers rely on the providers' standard contractual clauses and equivalent safeguards.

The full list of processors we rely on: Supabase (database, files and sign-in, EU), Cloudflare (hosting — every request passes through it), OpenAI and Anthropic (the AI features in Section 4), RevenueCat (subscription status on iOS; it receives your account id, never your email), Apple and Stripe (payments), and Brevo (the sign-in and password-reset emails).

The core app is free. Premium is an auto-renewing subscription. On iOS the purchase is handled by Apple; RevenueCat manages the subscription status on our behalf and receives your account id — never your email or payment details. Web payments are handled by Stripe. We never receive or store your full card details.

You can delete your account at any time in Settings → Delete account. On deletion we permanently erase your account, your content and your uploaded images without undue delay. Content you contributed to a shared household may remain visible to that household's remaining members. If you subscribed to product emails, you can unsubscribe at any time via the link in every email.

Trial accounts without an email address that have not been used for a longer period may be deleted by us. You can delete a trial account yourself at any time in Settings → Account & security → Delete account. Because a trial account has no email address, we cannot find it from an email request — please delete it in the app.

No longer have the app installed? The account deletion page explains how to request it by email, and exactly what is erased.

Providing the service — performance of a contract. Allergy and diet details — your explicit consent (Art. 9(2)(a) GDPR), voluntary and withdrawable at any time in Settings (Section 3). Product emails — your consent. Security and abuse prevention — our legitimate interest. For users in Switzerland, the equivalent nDSG grounds apply.

You have the right to access, correct, export and delete your data, to object to or restrict processing, and to withdraw consent at any time — your consent for allergy and diet details also directly in the app under Settings → Food preferences. Contact contact@mealvibes.app. You may also lodge a complaint with your supervisory authority — in Switzerland the FDPIC (EDÖB), or your local EU data-protection authority.

MealVibes is not directed to children under 16, and we do not knowingly collect their data.

We may update this policy; the "Last updated" date above reflects the current version, and material changes will be announced in the app.