My Meal Planner Pro ("we," "our," or "the app") is a household meal planning tool. This Privacy Policy explains what information we collect, why, what our legal basis is, how long we keep it, and what rights you have over it.
My Meal Planner Pro is operated by Erik Johnson, a sole proprietor based in the United States, who is the data controller for the information described in this policy. "We" and "our" below mean him.
The best way to reach us about anything in this policy — including any of the rights in Section 12 — is support@mymealplannerpro.com. If you need a postal address for a formal request, ask and we'll provide one.
Information you enter
Information collected automatically
We do not collect payment or card information, we do not process payments, we do not collect location data, and we run no analytics, advertising, tracking or profiling of any kind. We set no cookies.
If you are in the UK or the European Economic Area, the UK GDPR and EU GDPR require us to have a lawful basis for each purpose. Ours are:
| What we do | Why | Legal basis |
|---|---|---|
| Create and manage your account and household | You can't use the app without one | Performance of a contract |
| Store and sync recipes, plans, lists and inventory | This is the service itself | Performance of a contract |
| Generate recipes, import them, scan receipts, suggest meals | Features you chose to use | Performance of a contract |
| Record dietary restrictions and allergens | To flag conflicts in planned meals | Your explicit consent (see Section 3) |
| Send push notifications | Reminders you asked for | Your consent, given through your browser's permission prompt |
| Send feedback you submit to our support inbox | To read and reply | Performance of a contract, and our legitimate interest in supporting the product |
| Keep server and authentication logs | Security, abuse prevention, debugging | Our legitimate interest in running the service safely |
We do not use your data for advertising, profiling, automated decision-making, or any purpose beyond operating the app.
The Per-Person Preferences feature lets you record allergens and dietary restrictions for people in your household. Depending on what you enter, this can amount to information about someone's health, which data-protection law treats as a special category needing extra protection.
We ask you to bear three things in mind:
This information is never used for any other purpose, never shared beyond your household, and never sent to any third party — including our AI provider. It is not part of what is transmitted for recipe generation.
Household features let you enter information about people who may not have their own account — a partner, a child, a housemate. If you do that, you are responsible for making sure they are comfortable with it, and for telling them their information is held here and can be removed on request.
If someone in your household wants their information removed and you are not able to do it yourself, contact us at the address in Section 15 and we will help.
Your account and household data is stored using Supabase, a managed Postgres platform. Access is enforced by row-level security policies at the database level, so a request can only read rows belonging to a household the requester is a member of. Receipt images are held in a private storage bucket under a household-scoped path, not on a public URL.
All traffic is served over HTTPS, and the site sends HSTS, Content-Security-Policy and related headers to reduce the risk of interception and script injection.
No system is perfectly secure, and we can't guarantee absolute security — but we do not store card data, we hold no passwords ourselves (authentication is handled by Supabase), and we keep the amount of personal data we collect deliberately small.
We do not sell or rent your personal information, and we do not share it with anyone for their own purposes. It is shared only with the providers we need to run the app:
| Provider | What it does | What it handles |
|---|---|---|
| Supabase | Database, authentication, file storage | Account and household data, receipt images |
| Vercel | Hosting and serverless functions | Request and log data for every visitor |
| OpenAI | AI recipe and receipt features | Only the content described in Section 7, when you use those features |
| Resend | Email delivery | Feedback messages you send us |
We use no analytics, advertising, tag-management or session-recording provider of any kind. Fonts are served from our own domain rather than a third-party font service, so loading a page does not disclose your visit to anyone else.
If you choose to share a meal publicly within the app, that meal's name, ingredients and recipe become visible to other My Meal Planner Pro users. Your email address and household name are not attached to it. You can un-share a meal at any time.
My Meal Planner Pro uses OpenAI's API for recipe generation, recipe import, ingredient classification, nutrition estimates, weekly plan suggestions and receipt scanning. When you use one of those features, only the content that feature needs is sent — a meal name, an ingredient list, a recipe URL or document, or a receipt photograph.
We do not send your email address, your household name, your account identifiers, or the health-related information described in Section 3.
OpenAI processes this under their own Privacy Policy. We do not enable OpenAI's optional data-sharing or model-training programmes, so this content is not used to train their models.
We set no cookies. The app stores a small amount of information in your browser's localStorage, which stays on your device and is not transmitted to us. You can clear it at any time through your browser settings; doing so signs you out and resets these preferences.
| Key | Purpose | Kept until |
|---|---|---|
sb-…-auth-token | Keeps you signed in. Strictly necessary. | You sign out or it expires |
darkMode | Light or dark appearance | You clear it |
staples_overrides_… | Which items you treat as pantry staples | You clear it |
cooked_days_… | Which days of a week you've marked cooked | You clear it |
tour_seen_… | Which in-app guided tours you've already seen, so they don't repeat | You clear it |
notifHistoryLastRead, latestNotifAt | Marks which notifications you've read | You clear it |
pwa_visits, pwa_install_dismissed, pwa_ios_hint_dismissed | Whether to offer the "install app" prompt, and whether you dismissed it | You clear it |
cookModeIosTimerHintSeen | Whether you've seen the iOS timer hint in Cook Mode | You clear it |
These are functional and preference items only. None of them track you, profile you, or follow you to other sites.
If you subscribe to your meal plan as a calendar feed, the subscription link contains a secret token. Anyone who has that link can read your meal plan without signing in — that is how calendar subscriptions work. Treat the link as a password and don't post it anywhere public.
Our providers are based in the United States, and your information is stored and processed there. If you are in the UK or the EEA, this means your data is transferred outside your home jurisdiction. Those transfers rely on the safeguards our providers offer, such as Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. You can ask us for details of the safeguards that apply.
| What | How long |
|---|---|
| Account and household data | While your account is active |
| After you ask us to delete your account | Removed within 30 days |
| Encrypted database backups | Deleted data may persist in backups for up to 30 days after removal |
| Server and request logs | Retained by our hosting providers for a short period, typically days to a few weeks |
| Push notification subscriptions | Until you turn notifications off or the subscription expires |
| Feedback emails | Kept in our support inbox while needed to handle your query |
You have the right to access a copy of your information; to have inaccurate information corrected; to have your information deleted; to restrict or object to how we use it; to receive it in a portable, machine-readable format; and, where we rely on your consent, to withdraw that consent at any time without affecting what we did before you withdrew it.
Much of this you can do yourself inside the app — editing or deleting recipes, plans, people and preferences takes effect immediately. For anything else, email support@mymealplannerpro.com and we will respond within one month.
If you think we've handled your information badly, please tell us first so we can put it right. You also have the right to complain to a data protection authority — in the UK the Information Commissioner's Office, and in the EEA the supervisory authority for the country you live in.
My Meal Planner Pro is intended for adults managing a household, and accounts are not directed at or intended for children under 13. We do not knowingly create accounts for children.
Household features do let an adult record a child's name, food preferences and age band. That information is entered by the account holder, not by the child, and is covered by Sections 3 and 4. If you believe a child has created an account or that a child's information is held here in a way you're not comfortable with, contact us and we will remove it.
We do not make any decision about you by automated means that produces a legal or similarly significant effect. The AI features suggest recipes and meal plans; they do not decide anything about you, and you are free to ignore them.
We may update this policy from time to time. If we make a material change we will update the effective date at the top of this page, and where the change is significant we will tell you in the app. Please check back occasionally.
Questions about this policy, or about your information: