Privacy Policy

• Account data: your email address and Google account identifier, collected when you sign in with Google OAuth.
• Profile data: display name, dietary preferences, and app settings you choose to provide.
• Recipe data: recipes, ingredients, and images you create or import.
• Usage data: meal plans, shopping lists, cook history, and ratings you create within the app.
• Household data: household names and membership, and any shared recipes or shopping lists within a household.

• To provide and personalise the service (meal planning, recipe recommendations)
• To share content you choose to make visible to your household or publicly
• To process subscription payments (where applicable)
• To send notifications you have opted in to (prep alerts, shopping list updates)

We do not sell your data to third parties.

All data is stored in a PostgreSQL database hosted by Supabase. Images are stored in Supabase Storage. Supabase's infrastructure is provided by AWS; see Supabase's privacy policy for their sub-processor list.

• Google OAuth — authentication. Google's privacy policy applies to the sign-in flow.
• Supabase — database, authentication, and file storage.
• Stripe (where subscriptions are enabled) — payment processing. Card details are never stored by Our Meals; they are handled entirely by Stripe.

We retain your personal data for as long as your account is active. If you delete your account, your personal data (email, usage history, meal plans, shopping lists, and preferences) is permanently erased within 30 days. Your recipes are retained under the community attribution policy described in our Terms of Service §4.

Under the GDPR and CCPA you have the right to:

• Access the personal data we hold about you
• Erasure (right to be forgotten) — delete your account at any time via Profile → Danger Zone. This satisfies GDPR Art 17 by severing the link between your identity and your content.
• Portability — request an export of your data by emailing us (self-service data export coming in a future release).
• Rectification — update your display name and preferences in Profile settings.
• Objection — contact us to object to any processing.

We use strictly necessary cookies for authentication session management (set by Supabase Auth). Optional cookies for product analytics are only set if you accept the consent banner that appears on first visit. You can change your decision at any time: Manage cookie preferences.

Our Meals is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect data from children.

We may update this policy from time to time. Continued use of the service after changes are posted constitutes acceptance of the revised policy.

For privacy enquiries, data access requests, or erasure requests, contact us at: [email protected]

If you are in the EU and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority.