Privacy Policy for Meally

Last updated: October 25, 2025

1. Introduction

Welcome to Meally ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile application.

2. Information We Collect

2.1 Personal Information

When you use our app, we may collect:

• Email address (when you sign in with Google)
• Name and profile picture (from your Google account)
• User ID (automatically generated)

2.2 Data You Provide

• Recipes you create or save
• Meal plans you create
• Shopping lists
• Photos you upload for recipes

2.3 Camera Permission

We request camera permission to allow you to take photos of your meals and recipes. Photos are stored securely in your personal cloud storage and are only accessible by you. We do not access your camera without your explicit permission for each use.

3. How We Use Your Information

We use your information to:

• Provide and maintain the app functionality
• Authenticate your account via Google Sign-In
• Store your recipes, meal plans, and shopping lists
• Sync your data across devices
• Improve app performance and user experience
• Analyze app usage through anonymized analytics

4. Data Storage and Security

Your data is stored securely using Firebase services (Firestore, Authentication, and Storage), which are provided by Google Cloud Platform. We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication protocols
• Access controls and user authentication
• Regular security updates

5. Third-Party Services

We use the following third-party services:

• Google Sign-In: For secure authentication
• Firebase (Google): For data storage, authentication, and app infrastructure
• Google Analytics for Firebase: To understand app usage patterns (anonymized data)

These services have their own privacy policies. We recommend reviewing:

• Google Privacy Policy
• Firebase Privacy Policy

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Deletion: Delete your account and associated data
• Export: Download your data in a portable format
• Withdraw consent: Stop data processing at any time
• Object: Object to certain types of data processing

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, your data will be permanently deleted from our servers within 30 days, except where we are required to retain it for legal purposes.

8. Children's Privacy

Our app is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. International Data Transfers

Your data may be transferred to and stored on servers located outside your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

10. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of any material changes by updating the "Last updated" date at the top of this policy.

12. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to data portability
• The right to restriction of processing
• The right to lodge a complaint with your local supervisory authority

Our lawful basis for processing your data is based on your consent and the performance of our contract with you (providing the app service).

13. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt-out of the sale of personal information. Note: We do not sell your personal information.