Privacy Policy

1. Information We Collect

Personal Information

• Basic Details: Name, email address, age, gender, weight, height
• Account Information: Login credentials, password reset tokens, session data
• Contact Information: Messages sent through our support system

Health & Wellness Data

• Dietary Information: Food preferences, allergies, dietary restrictions, gut health status
• Fitness Data: Training schedules, activity levels, fitness goals
• Lifestyle Information: Sleep patterns, stress levels, alcohol/caffeine consumption
• Progress Data: Body measurements, weight changes, meal completion tracking

Technical Data

• Device Information: IP address, browser type, device identifiers
• Usage Data: Pages viewed, meal plan interactions, feature usage
• Cookies & Tracking: Session cookies, preference settings, PWA data

2. How We Use Your Information

Primary Services

• Meal Planning: Generate personalized nutrition plans using AI-powered analysis
• Progress Tracking: Monitor your journey and provide coaching insights
• Customer Support: Respond to inquiries and provide assistance
• Account Management: Maintain your profile, preferences, and meal plan history

Social Media Marketing & Advertising

With your consent, we may use your information for:

• Success Stories: Share client transformations and testimonials across Instagram, Facebook, TikTok, and YouTube
• Targeted Advertising: Create custom audiences for Facebook/Meta advertising campaigns
• Marketing Communications: Send promotional emails about our services and success stories
• Social Media Engagement: Feature client results in posts and stories (with explicit consent)

Legal Basis for Processing

• Consent: Marketing communications, social media usage, success story sharing
• Contract Performance: Providing meal planning services you've requested
• Legitimate Interest: Improving our services, fraud prevention, system security

3. Information Sharing & Third Parties

Service Providers

• Typeform: Initial data collection and form management
• SendGrid: Email delivery and communication services
• Anthropic: AI-powered meal plan generation (Claude AI)
• OpenAI: Backup meal plan generation (GPT-4)
• Render.com: Cloud hosting and data storage
• Stripe: Payment processing

Advertising Platforms

• Facebook/Meta: Advertising pixels, custom audiences, conversion tracking
• Google Analytics: Website usage analytics and advertising insights
• Social Media Platforms: Content sharing and engagement tracking

We never sell your personal data. Information is only shared with trusted partners who help us deliver our services.

4. Your Rights & Data Control

Data Deletion & Erasure Rights

Additional Rights (GDPR & CCPA)

• Access: Request a copy of all personal data we hold about you
• Correction: Update or correct inaccurate information
• Portability: Receive your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications and social media usage
• Limit Processing: Restrict how we use your sensitive health information

Marketing & Social Media Opt-Out

• Email Marketing: Click unsubscribe in any email or contact us directly
• Success Story Usage: Withdraw consent for featuring your results on social media
• Advertising: Opt out of targeted ads through platform settings (Facebook, Instagram, etc.)

5. Data Retention & Storage

Retention Periods

• Active Accounts: Data retained while account is active and for 2 years after last login
• Meal Plans: Stored for 3 years to support ongoing nutrition coaching
• Marketing Data: Retained until consent is withdrawn or 2 years of inactivity
• Legal Requirements: Some data may be retained longer for tax, legal, or regulatory compliance

Data Security

• Encryption: All sensitive data encrypted in transit and at rest
• Access Controls: Limited access on a need-to-know basis
• Regular Audits: Security assessments and vulnerability testing
• Secure Hosting: Infrastructure hosted with enterprise-grade security

6. Health Information & HIPAA

Important: Meal Engine is not a covered health care provider under HIPAA. However, we treat your health information with the same level of care and protection.

Health Data Protection

• Sensitive Information: Health conditions, dietary restrictions, and wellness data receive enhanced protection
• Limited Access: Only authorized personnel can access health-related information
• Consent Required: Explicit consent obtained before sharing health data for marketing purposes
• Professional Standards: All health data handled according to nutrition industry best practices

7. International Data Transfers

Your data may be transferred to and processed in countries outside your residence, including the United States. We ensure appropriate safeguards are in place:

• Adequacy Decisions: Transfers to countries with equivalent data protection laws
• Standard Contractual Clauses: EU-approved contracts with service providers
• Security Measures: Additional protections during international transfers

8. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. Cookies & Tracking Technologies

Types of Cookies We Use

• Essential Cookies: Required for login, session management, and core functionality
• Analytics Cookies: Help us understand how you use our services
• Marketing Cookies: Track conversions and enable targeted advertising
• Preference Cookies: Remember your settings and personalization choices

You can control cookies through your browser settings, but some features may not work properly if disabled.

10. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make significant changes:

• Email Notice: We'll notify you via email if we have your consent
• Website Notice: Prominently display policy updates on our website
• Effective Date: Changes take effect 30 days after notification
• Review Period: You can review changes and withdraw consent if needed

11. Contact Us & Data Protection

For any questions about this Privacy Policy, data deletion requests, or to exercise your rights, please contact us:

Legal Compliance

This Privacy Policy complies with:

• Australian Privacy Act 1988
• General Data Protection Regulation (GDPR) for EU residents
• California Consumer Privacy Act (CCPA) for California residents
• Personal Information Protection and Electronic Documents Act (PIPEDA) for Canadian residents