Mealy

Privacy Policy

Effective date: 2026-06-28 Last updated: 2026-08-15

This Privacy Policy explains what information the Mealy mobile app (“Mealy”, “we”, “us”) collects, how we use it, and the choices you have. Mealy is operated as a personal project by the developer reachable at mealy.support@gmail.com.

If you have any question about this policy, email us at mealy.support@gmail.com.

Account and data deletion

You can delete your Mealy account and all of its data at any time. Mealy is operated by the developer reachable at mealy.support@gmail.com.

How to request deletion

• In the app. Open the You tab and choose “Delete account”. This is a one-tap, irreversible action handled by a server-side function and typically completes within seconds.
• By email (no app needed). If you have already removed the app, or the in-app flow fails for any reason, email mealy.support@gmail.com from your account’s email address and ask us to delete your account. We complete these requests within 30 days.

What gets deleted. Deleting your account permanently removes everything associated with it from our database: your profile (name, preferences, weight goal and weight-journey entries, height, body fat, waist, daily water target, dietary preferences), your food log, workouts, water intake, weight history, meal feelings and notes, saved go-to meals, saved menus, user-created recipes, shopping list, your chat threads and messages, and your diagnostics (usage events and crash reports).

What is retained. We do not keep a copy of your account content after deletion. Server error logs, which do not contain your profile content, are retained for up to 30 days for debugging and are then deleted automatically.

What we collect

We only collect information you give us directly through the app, plus the minimum needed for authentication and to make the features work.

Account information. Email address (when you sign in by email or magic link). Mealy also supports Sign in with Apple, in which case Apple may share a relay email instead of your real address.

Profile information you provide. Name, language preference, units, locale, weight goal and weight-journey entries, height, body fat, waist, daily water target, dietary preferences, cooking effort, meal-planning preferences, and other fields you choose to fill in on the You tab and during onboarding.

Food and activity log. Meals you log (name, ingredients, kcal and macro estimates, meal time, meal context), workouts you record, water intake, weight entries, meal feelings and notes, saved go-to meals, saved menus, and your user-created recipes.

Health Connect (Android). On Android, Mealy can read your daily step count from Health Connect to show your activity alongside your nutrition. Mealy only reads step data and never writes to Health Connect. Steps read from Health Connect stay on your device and are never sent to our servers or shared with anyone.

Apple Health (iOS). On iPhone, Mealy can read your active and resting energy from Apple Health to show how many calories you burned today, and it may read basic characteristics (height, body weight, date of birth, and biological sex) to estimate your resting energy when Apple Health has no reading of its own. Mealy only reads this data and never writes to Apple Health. Data read from Apple Health stays on your device, is never sent to our servers or shared with anyone, and is never used for advertising. This is optional: the feature is off until you choose to connect Apple Health and grant permission.

Photos and voice. If you log a meal by photo, the photo is uploaded for AI analysis. If you log by voice, the audio is transcribed. We do not retain raw photos or voice recordings beyond the time needed to produce the structured log entry.

Chat messages. Messages you send to the Mealy guide chat, the assistant’s replies, and chat usage counts for tier limits.

Device-only preferences. Some UI preferences (locale prefs, water-intake-by-day cache, weight cache, custom menus, go-to meals) are stored on your device using AsyncStorage and are not sent to our servers unless cloud sync is enabled by signing in.

Subscription status. If you buy Mealy Pro, we record whether your subscription is active so the app can unlock the paid features and so support can help you if a purchase does not unlock. We never receive or store your card number, billing address, or any other payment details - those stay with Apple or Google.

Technical information. Standard logs that any modern app produces (request timestamps, error traces).

Diagnostics. Mealy records app usage events (which screens you open, which features you use, and the counts and durations around them), crash reports, and failed launches, so we can see what is broken and fix it. Usage events and crash reports are linked to your account and to an identifier for your app install.

Usage events carry only categories, ids, counts and durations - never the content of what you log, so no food names, weight values, chat text, display names or email addresses. Crash reports carry the error message and stack trace, with email addresses, access tokens and long digit sequences stripped on your device before anything is sent.

A failed launch is the one report that is not linked to an account, because at that moment there is no account to link it to. It is sent when the app opens but cannot sign you in, and it records only that this happened: a reason from a short fixed list (no network, a timeout, or a rejected sign-in), the identifier for your app install, the app version, and whether you are on iOS or Android. It carries no name, no email address, no user id, and no text from the error itself.

Diagnostics are never used for advertising, never sold, and never shared with third parties. They are deleted automatically after 90 days. You can turn them off at any time in the app under You tab → Legal → Share diagnostics; with the switch off, nothing is recorded and anything still waiting to be sent is discarded.

We do not use third-party analytics or advertising SDKs and do not track you across other apps or websites. Diagnostics are collected by Mealy itself and stay in our own database.

How we use the information

• Run the features you asked for (saving meals, showing history, building plans, answering chat questions).
• Personalize the experience (Hebrew/English language, units, gender grammar for Hebrew, dietary preferences).
• Maintain your account (sign-in, account recovery, account deletion).
• Improve the app (debugging from error logs, and seeing from usage events which features are used, where people get stuck, and what crashes).

We do not sell your data. We do not share it with advertisers. We do not use your content to train third-party AI models for purposes other than answering your own request.

How AI requests work

Mealy’s chat assistant and food-recognition features call Google Gemini (and, depending on configuration, OpenAI) through a small server-side proxy we run on Supabase Edge Functions. Your message, any attached photo, and the relevant context for that request are sent to the AI provider so it can produce a reply. Provider privacy policies:

• Google AI / Gemini: https://ai.google.dev/gemini-api/terms and https://policies.google.com/privacy
• OpenAI: https://openai.com/policies/privacy-policy/

The provider key is held server-side and is never embedded in the app binary. Requests are made over HTTPS.

How subscriptions are handled

Mealy Pro is sold only through the Apple App Store and Google Play. We use RevenueCat to check with the store whether your subscription is active. RevenueCat receives your store transaction and, if you are signed in to Mealy, your Mealy account id, so that a subscription you bought on one device unlocks Pro on your other devices and on the other platform. If you are not signed in, the purchase is held against an anonymous id that RevenueCat generates, and we cannot connect it to you.

RevenueCat privacy policy: https://www.revenuecat.com/privacy

We never receive your card number or billing address. Apple and Google handle the payment and hold those details.

How long we keep your data

• Profile, food log, workout log, water, weight history, saved meals, saved menus, user recipes, shopping list, and chat threads are kept for as long as your account is active.
• When you delete your account from inside the app (You tab → Delete account), all of the above is removed from our database. This is a one-tap, irreversible action handled by a server-side function and typically completes within seconds.
• Server error logs are retained for up to 30 days for debugging.
• Diagnostics are retained for 90 days and then deleted automatically by a scheduled job. Deleting your account removes your usage events and crash reports straight away, along with everything else. Failed-launch reports hold nothing that identifies you and are not linked to any account, so there is nothing in them for us to find and remove when you delete; they expire on the same 90-day schedule.

Your rights and choices

• See your data. Most of it is visible inside the app (history, profile, saved items). For anything else, email us.
• Correct your data. Edit profile fields from the You tab; edit a logged meal from history.
• Delete your account and data. You tab → Delete account. You can also email us if the in-app flow fails for any reason.
• Turn off diagnostics. You tab → Legal → Share diagnostics. Mealy works exactly the same with it off.
• Decline AI features. Mealy still works for manual food logging if you avoid the chat and photo / voice logging features.

If you are in the EU, the UK, or California, you have additional rights under the GDPR, UK GDPR, and CCPA respectively (access, rectification, erasure, portability, objection). To exercise them, email us; we will respond within 30 days.

Security

We use Supabase (Postgres + Auth) with row-level security policies that restrict each row to its owning user via auth.uid(). Network traffic is HTTPS. We never store provider API keys on your device.

No system is perfectly secure. If you believe your account has been compromised, change your password and email us.

Children

Mealy is not directed to children under 13 (or under 16 in the EU). Do not use Mealy or create an account if you are below the applicable age.

Health and medical disclaimer

Mealy provides general nutrition and wellness information. It is not medical advice and is not a substitute for professional medical care. Consult a qualified clinician for any health-related decisions, especially if you are pregnant, nursing, have a medical condition, or are taking medication.

Changes to this policy

We may update this policy from time to time. Material changes will be shown in the app or noted at the top of this page with a new “Last updated” date.

Contact

Questions, requests, or complaints: mealy.support@gmail.com.