Privacy Policy

1. Introduction

Meal7 ("we", "our", or "us") is a recipe generation app that uses AI to create recipes from what you describe — a list of ingredients you have, a dish name, or an idea written in your own words. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using Meal7, you agree to the practices described in this policy.

2. Information We Collect

Account information. When you sign in with Google or Apple, we receive your name and email address from the provider. When you use the app as a guest, we assign an anonymous user ID tied to your device.

Usage data. We store the recipes you generate and save, your meal plans, and your coin and Premium transaction history. The ingredients or description you type are used to produce the recipe and are not stored.

Device information. We collect a device identifier to manage the new user bonus and prevent abuse.

Purchase information. In-app purchases are processed through the Apple App Store or Google Play Store. We receive transaction identifiers to credit coins to your account and to activate Premium. For the Premium subscription we also record when the current period ends and whether it was renewed, cancelled, or refunded, so the app knows whether your access is still active.

3. How We Use Your Information

• To provide and improve the recipe generation service
• To manage your account, coins balance, and purchase history
• To unlock Premium features and keep track of whether your Premium access is still active
• To display your profile name and email within the app
• To prevent fraud and abuse of the coin system
• To fulfill in-app purchase transactions

We do not sell your personal information to third parties.

4. Third-Party Services

Meal7 uses the following third-party services:

• Supabase — database, authentication, and backend infrastructure
• Google (Gemini API) — recipe generation and meal plan autofill
• Together AI — recipe image generation
• RevenueCat — in-app purchase management
• Google Sign-In / Apple Sign-In — optional account authentication

Each service operates under its own privacy policy.

5. Data Shared With AI Services

Meal7 creates recipes and images using third-party AI services. We ask for your permission inside the app before anything is sent to them for the first time, and you can decline.

This is exactly what each service receives:

• Google (Gemini API) — the ingredients or dish description you type, plus your dietary restrictions, allergies, servings, available tools, time limit, and difficulty. For meal plan autofill it receives no recipe text at all: only each recipe's internal ID, its meal type, its nutrition figures, and the nutrition goals you set for the week.
• Together AI — an image description generated from your recipe. Your own typed text is not sent to Together AI.

Your name, email address, and account details are never sent to either service. Requests are made from our servers, so these providers do not receive your device identifier or IP address.

How each provider handles the data it receives is governed by its own terms: see the Gemini API terms and the Together AI privacy policy.

6. Data Retention

We retain your data for as long as your account is active. Your profile, your saved recipe list, and your meal plans are kept until you delete them, and are removed when you delete your account.

Two things outlive your account:

• Recipes you generated stay in the shared recipe catalogue that all users can browse, because other people may have saved them or added them to a meal plan. The link back to you is removed, so they are no longer connected to your identity.
• Purchase records are retained for accounting and for handling refund disputes.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Delete your account and associated data from within the app (Profile → Settings → Delete Account)
• Request a copy of your data by contacting us

8. Children's Privacy

Meal7 is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Security

We use industry-standard security measures including encrypted connections (HTTPS), row-level security on our database, and secure token-based authentication. However, no method of transmission over the internet is 100% secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Us