Privacy Policy

Data controller

The data controller for your personal data is the operator of the MealMateBuddy app. For questions about your data, contact us through the app Settings page.

What data we collect

We collect the following categories of personal data:

• Account data: your email address and name, provided when you sign in.
• Preferences: dietary restrictions, disliked ingredients, preferred cuisines, max cook time and default servings.
• Health-related data: dietary restrictions (e.g. gluten-free, dairy-free, vegan) may reveal health information.
• Family data: names and roles (parent/child) of household members.
• Usage data: meal plans, recipe ratings, favorites and ingredient preferences you create.
• Pantry data: ingredients and expiry dates you enter.
• Payment data: purchase records handled by Base44 Payments (powered by Wix). We store order status and amount; card details are never stored by us.
• Diagnostics: anonymized error summaries and user IDs in logs, kept for 30 days.

Legal basis

We process your data under the following legal bases:

• Performance of a contract: account and meal-plan data needed to provide the service.
• Explicit consent: health-related dietary data and family member details. You can withdraw consent at any time.
• Legitimate interest: diagnostics to keep the service running and secure, and anonymized analytics to improve the service.

Special category data (health)

Dietary restrictions can reveal health information and are treated as special category data under GDPR Article 9. We only process them with your explicit consent, collected during onboarding, and solely to personalize your meal plans. You may withdraw consent and delete this data at any time in Settings.

Children's data

Family member names may include children. We process this with your consent to tailor kid-friendly meal suggestions. We keep names to a minimum; consider using first names or roles only. You can remove family data anytime in Settings.

Data storage and location

Your data is stored by the Base44 platform and its database provider. We aim to keep data within the EU/EEA. If any transfer outside the EU/EEA occurs, it is protected by appropriate safeguards.

Data retention

We keep your data for as long as your account is active. Diagnostic logs are automatically deleted after 30 days. You can request deletion of your account and all associated data at any time.

Anonymized and aggregated data

We always derive anonymized and aggregated analytics from all users’ activity (for example, popular recipe counts, cuisine trends and cook-time distributions), because this data cannot identify any individual. This is done continuously and for everyone, regardless of consent choices, since fully anonymized data is not personal data under GDPR. When you delete your account, we remove all personal data that identifies you, but we keep these anonymized aggregates for statistical and service-improvement purposes, including analysis and marketing insights, because they can no longer be traced back to you.

Cookies and local storage

We use browser sessionStorage for your sign-in token (cleared when you close the tab) and a non-essential UI-state cookie for the sidebar. We do not use tracking or advertising cookies.

Third parties

We share data with these processors:

• Base44 Payments (powered by Wix): processes payments and subscriptions. Receives your email and purchase details.
• Google: provides sign-in. Receives the authentication request.
• Base44 platform and database provider: hosts your account, preferences and meal-plan data.

Your rights

Under GDPR you have the right to:

• Access your personal data.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Receive a copy of your data ("data portability").
• Object to processing based on legitimate interest.
• Withdraw consent for health and family data at any time.
• Lodge a complaint with your local data protection authority.

Exercising your rights

To access, export, correct or delete your data, or to withdraw consent, open Settings in the app or contact us. We respond within one month.

Changes to this policy

We may update this policy to reflect changes in the law or our service. We will notify significant changes in the app.