Privacy Policy

1. Overview

MealRoute ("we", "us", or "our") is a nutrition planning app that helps you track meals, generate AI meal plans, and monitor your nutritional intake. This Privacy Policy explains what data we collect, how we use it, and the choices you have.

We are committed to protecting your privacy and being transparent about our data practices.

2. Information We Collect

Account Information

• Email address (for authentication and communication)
• Password (stored as a secure hash via Supabase Auth — we never see the plain text)

Profile & Nutrition Data

• Age, sex, height, weight, and activity level (for calorie calculations)
• Nutrition goals (e.g., lose weight, maintain, gain muscle)
• Custom macro targets (protein, carbs, fat)
• Weight progress logs over time

Food & Meal Data

• Food preferences and saved foods in your palette
• Meal slot assignments (breakfast, lunch, dinner, snack)
• Daily meal logs and nutritional intake history
• AI-generated meal plans you accept or reject
• Grocery lists derived from your meal plans

Photo Data

• Meal photos you upload for AI analysis
• AI-generated nutritional estimates from those photos

Water & Lifestyle Data

• Daily water intake logs
• Water intake goals

Usage Data

• Device type and browser information
• App interactions and feature usage (anonymized)
• Error logs for debugging and service improvement

3. How We Use Your Data

We use your data to:

• Provide personalized meal plans and nutrition tracking
• Calculate calorie and macro targets based on your profile
• Analyze meal photos and return nutritional estimates
• Generate weekly grocery lists from your meal plans
• Track your water intake and weight progress over time
• Sync your data across devices when logged in
• Improve our AI models and food database accuracy
• Send important account or service-related notifications

4. How We Store Your Data

Your data is stored securely using Supabase, a PostgreSQL-based platform with row-level security (RLS). This means:

• Your nutrition data is tied to your authenticated user ID
• Other users cannot access your data
• Data is encrypted in transit (TLS) and at rest
• Authentication is handled via Supabase Auth with secure password hashing

5. Third-Party Services

MealRoute uses the following third-party services to operate:

• Supabase — Authentication and database storage. Your email and nutrition data are stored here. Supabase Privacy Policy
• USDA FoodData Central — Public nutritional database used to look up food information. No personal data is sent. USDA Privacy Policy
• OpenAI — Used for AI-powered meal photo analysis. When you upload a photo, it is sent to OpenAI for analysis. OpenAI Privacy Policy
• Google Analytics — Anonymized traffic analytics. Google Privacy Policy

We do not sell your data to any third party.

6. AI Photo Analysis

When you upload a meal photo for analysis, the image is sent to OpenAI's API for processing. MealRoute uses the AI response to estimate ingredients, portions, and nutritional content.

We recommend not uploading photos containing sensitive personal information. Photos are processed on-demand and are not stored permanently on our servers unless you choose to save them to your meal log.

7. Data Sharing

We do not share your personal data with any third party for marketing or advertising purposes. Your data is only shared with the third-party services listed above for the sole purpose of operating MealRoute.

We may disclose data if required by law, court order, or to protect the rights, property, or safety of MealRoute or its users.

8. Data Retention

Your data is retained for as long as your account is active. When you delete your account:

• All nutrition data, meal logs, and food preferences are permanently deleted
• Weight logs and water tracking history are deleted
• Your account and authentication credentials are removed
• Deletion is irreversible and cannot be undone

9. Your Privacy Rights

You have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate data in your profile
• Erasure — Delete your account and all associated data
• Portability — Export your nutrition data
• Withdraw Consent — Stop using features that require certain data

To exercise any of these rights, contact us at support@mealroute.app.

10. Cookies & Tracking

MealRoute uses minimal cookies for authentication (keeping you logged in). We use Google Analytics for anonymized traffic analysis. We do not use tracking cookies for advertising.

11. Children's Privacy

MealRoute is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe a minor has registered an account, please contact us and we will delete it.

12. International Users

MealRoute is available globally. If you are accessing the Service from outside New Zealand, your data may be processed and stored in servers located in other countries. By using the Service, you consent to this transfer of data.

13. Security

We take reasonable measures to protect your data, including encryption in transit (TLS) and at rest, secure authentication via Supabase, and row-level security policies that prevent unauthorized access. However, no system is 100% secure, and we cannot guarantee absolute security.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the app or by email. The updated date at the top of this page reflects the most recent revision.

15. Contact

Questions about your privacy? Contact us at support@mealroute.app.

← Back to MealRoute·Terms of Service

© 2026 MealRoute. All rights reserved.