MealWithPrivacy policy
This policy explains how your personal data is processed when you use the MealWithAI mobile app and the mealwithai.com website. It is written for users in the European Union, the United Kingdom, the United States and other countries outside Türkiye. Users in Türkiye are covered by the Turkish version of this policy under the KVKK.
Who is responsible
The controller of your data is Şerife Nur Akdur, Turgut Reis Caddesi No:63, Bornova, İzmir, Türkiye. You can reach us about anything privacy-related at support@mealwithai.com.
Our representative in the European Union (GDPR Article 27): EU representative name and address.
What data we process
| Data | Why |
|---|---|
| Email address; your password if you sign up with email (stored only in irreversibly hashed form); your Apple or Google account identifier if you sign in with Apple or Google | Creating your account, signing you in, sending password reset codes |
| Your allergies and the ingredients you avoid, your extra allergy note | Never showing you recipes that don’t suit you |
| The diet plan you add from your dietitian (photo, PDF or text) | Reading it with AI, spreading it across your days, flagging items that may clash with your allergies and suggesting matching recipes. The photo, PDF or text itself is not stored; only the plan we read is kept until you delete it. |
| Diet type, household size, daily calorie goal, suggestion preferences | Tailoring suggestions, menus and ingredient amounts to you |
| Menus you create, shopping list ticks, day types (training day, cheat day), favourites | Showing them to you again next time |
| Ingredients you select for AI recipes and the recipes generated; ingredients you ask us to add to the list | Creating the recipe, enforcing the daily limit, improving the ingredient list |
| Technical logs: time of request, IP address, error logs | Keeping the service secure and working, preventing abuse |
Your theme, language, measurement unit and notification preferences are stored only on your phone. We do not collect your location, contacts, photos or advertising identifier, and there are no ads in the app. We do not sell your personal data and do not share it for cross-context behavioural advertising.
Your allergy information is health data
Information about your allergies and diet can be health data (a special category of data under the GDPR, and consumer health data under some US state laws). We process it only with your explicit consent and only to select recipes that suit you. It is never shown to any of our staff on an individual basis, never sold and never used for advertising.
A diet plan you add from your dietitian is also health data and is handled the same way: only with your consent and only to build your menu. You can delete it at any time in the app.
You can withdraw your consent at any time with the “Withdraw consent” link in your profile, or by deleting your account. Your allergy and health-related diet information is then deleted and suggestions come without the allergy filter. Withdrawing consent does not affect processing that took place before.
Sharing with your dietitian
If you connect to a dietitian with their invite code and explicitly agree, that dietitian can see your allergies, the things you avoid and your diet type, the plans they send you, and the meals you mark as eaten. They don’t see your email address, menus, favourites or shopping lists. The dietitian is responsible for how they use this information in their own practice. You can disconnect at any time in the app; after that they no longer see any of it.
Legal bases (GDPR)
- Your account and the app’s core features: performance of our contract with you (Article 6(1)(b)).
- Allergy and health data: your explicit consent (Article 9(2)(a)).
- Security logs and preventing abuse: our legitimate interest in a secure service (Article 6(1)(f)) and legal obligations (Article 6(1)(c)).
Where your data is stored and who we share it with
We work only with the following service providers, who process data on our behalf and under our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Google Cloud (Cloud Run, Cloud SQL, Cloud Storage) | Our servers and database | Germany (Frankfurt, EU) |
| Google Firebase (Authentication, Hosting) | Sign-in and hosting this website | Global servers, including the USA |
| Anthropic (Claude) | AI recipe generation. We send only the ingredients you selected, the meal type, the number of servings and a list of ingredients that suit you. Your allergies and account details are not sent. When you add a diet plan from your dietitian, the photo, PDF or text is sent to be read; it is not used to train models. | USA |
| Google Cloud Vertex AI (Gemini) | AI recipe generation and reading the diet plans you add, when a Gemini model is in use. The same limited data as for Anthropic is sent; it is not used to train models. | EU (Netherlands) or Google’s global servers, depending on the model |
| Resend | Account emails such as password reset codes | Ireland (EU) |
| Apple, Google | Only if you choose “Sign in with Apple” or “Sign in with Google” | USA |
Where data is transferred outside the EU/EEA or the UK, we rely on an adequacy decision (such as the EU–US Data Privacy Framework for certified providers) or the European Commission’s Standard Contractual Clauses. Transfer mechanisms to be confirmed with legal counsel, including transfers to the controller in Türkiye.
How long we keep it
We keep your data for as long as your account is open. When you delete your account, all data linked to it is deleted immediately and disappears from our infrastructure provider’s backups within 30 days at the latest. Technical logs are kept for at most 90 days.
Your rights
Depending on where you live, you have the right to access your data, to receive a copy of it in a portable format, to have it corrected or deleted, to restrict or object to its processing, and to withdraw your consent at any time.
You can delete your account yourself in the app (Delete account). For any other request, write to support@mealwithai.com from your registered email address. We will reply within one month at the latest. We will not treat you differently for using your rights.
If you are in the EU or the UK, you also have the right to lodge a complaint with your local data protection authority.
Consumer health data (USA)
Some US states, including Washington (My Health My Data Act) and Nevada, have specific rules for consumer health data. In MealWithAI this means your allergies, the ingredients you avoid and your diet type.
- We collect it from you, in the app, only with your consent, and use it only to filter recipes for you.
- We share it only with the service providers listed above, to run the service. We do not sell it.
- You can see and change it in your profile, withdraw your consent, or delete it together with your account at any time.
- To exercise any other right or appeal a decision, write to support@mealwithai.com.
Children
The app is not intended for children under 16 and we do not knowingly collect their data. The kids’ menu is meant for parents choosing recipes for their children.
Health notice
MealWithAI does not give medical advice. Calorie values are approximate. If you have a serious allergy, always check the labels of the products you use and follow your doctor’s advice.
Changes
When we update this policy, we change the date above. We will also announce important changes in the app.