Privacy Policy

1. What we collect

• Account: email address and an authentication record.
• Body metrics: sex, age, height, weight — used to calculate your energy needs.
• Goals and lifestyle: activity level, cooking preferences, meal schedule.
• Food preferences: allergies, exclusions, likes and dislikes.
• Health screening answers: used solely to decide whether generating a plan is appropriate for you.
• Generated plans and purchase records.

Some of this is health-related information. Depending on where you live it may be a special category of personal data with additional legal protections — the scope of this section requires legal review before launch.

2. How we use it

To calculate your nutrition targets, generate and store your plan, apply your allergy and exclusion constraints, run the health screening, and process your purchase. We do not sell your personal data, and we do not use it for advertising.

3. Who processes it

• Supabase — database and authentication.
• Anthropic — receives recipe design requests containing your dietary preferences, cooking profile, and calorie/macro budget. It does not receive your email address or payment details.
• USDA FoodData Central — receives ingredient names only, never personal data.
• Stripe — payment processing. Card details go directly to Stripe; we never see or store them.
• Vercel — hosting.

4. Storage and access control

Your records are protected at the database level: row-level security policies restrict every user-owned table so that a row is only readable by the account that owns it.

5. Your rights: export and deletion

From your dashboard you can download the personal data we hold about you as a JSON file, and you can delete your account yourself — you do not need to email anyone. The export includes the answers you gave us, your consent records and your payment history. For a plan whose purchase was refunded or charged back, the export still contains your own answers but not the generated recipes themselves; each such entry says so.

Deleting your account permanently removes your profile, body metrics, allergies, food exclusions, preferences, consent records, every generated plan — including the health-screening answers stored alongside each plan — and the queued work behind them. It also clears the copy of your onboarding answers held in your browser. PDFs are generated on demand and never stored, so there is nothing to delete.

Payment records are kept, and they are not anonymous. Payment records are kept because tax and accounting law requires it. We remove our link to you — your account reference is replaced with a non-reversible identifier — but the record still contains Stripe's own transaction identifiers, which Stripe can trace back to you. It is therefore not anonymous. To have Stripe's copy erased you would need to contact Stripe directly.

The retention period for these records has not yet been set. It requires confirmation against Bulgarian and EU accounting law and will be stated here before this product accepts real payments.

6. Data held in your browser

While you work through onboarding, your answers — including your health-screening responses — are held in your browser so you can move between steps. They are stored for the current browser tab only, expire after two hours, and are erased when you log out, when a plan is created from them, and when you delete your account. Closing the tab discards them.

7. Cookies

MealDNA uses cookies necessary to keep you signed in. We do not use advertising or third-party tracking cookies.

8. Contact

Contact details for privacy requests will be published here before launch.