Privacy Policy

What we collect

We collect information you choose to give us, including:

• Account information, such as your email address, display name, sign-in provider identifier, and securely hashed password where you create an email-and-password account.
• Family account information, such as invitation email addresses, who invited you, family membership, and whether you are the family owner or a member.
• Recipes and planning information, including recipes you add, import, save, or edit; recipe ratings and feedback; meal plans; shopping lists; and recipe images or profile photos you upload.
• Preferences, such as household size and measurement settings.
• AI feature inputs, such as messages to Chef Remy, recipe-edit requests, and images, text, or audio you submit for recipe extraction or generation.
• Recipe-search inputs, such as the dish or ingredients you enter when asking us to find matching recipes.
• Subscription information, such as whether you have an active subscription or free trial, which plan you are on, renewal and expiry dates, and the transaction and app-user identifiers our payments provider uses to link a purchase to your account. We never receive or store your card details.
• Notification information, namely the push token for your device and your notification preferences, if you allow notifications.
• Waitlist information, namely your email address if you sign up on our website.
• Technical information needed to operate and secure the Service, such as device and app information, IP address, browser or operating-system information, request logs, and error information.
• Optional usage analytics, if you consent, such as screens or pages viewed, feature actions, broad request outcomes, session information, and marketing attribution. Analytics events use a pseudonymous account identifier in the app and a device identifier on the website. They do not include recipe text, search terms, Chef Remy messages, names, email addresses, or uploaded content.

How we use information

We use personal information to:

• create and secure your account, authenticate you, and provide the Service;
• store and synchronise your recipes, meal plans, shopping lists, preferences, and uploads;
• send and manage family invitations and make the family owner’s recipes, plans, shopping lists, and Premium access available to accepted family members;
• personalise meal suggestions using the preferences you choose to provide;
• process AI-powered requests and generate the responses, recipe changes, tags, images, or transcriptions you ask for;
• search for recipes, retrieve public recipe pages, and keep reusable publisher-source snapshots so the same page does not need to be fetched for every user;
• sell and manage subscriptions, including checking whether your account has access to Premium features, applying free trials, and handling renewals, cancellations, and support queries about billing;
• send service messages, such as password-reset emails and waitlist updates;
• send push notifications you have opted into, such as meal-plan and shopping reminders, which you can turn off in your device settings at any time;
• maintain, troubleshoot, secure, and improve the Service; and
• understand product usage and marketing performance where you have chosen to allow optional analytics;
• comply with legal obligations and protect the rights, safety, and security of Master Meals and others.

We do not sell personal information or use it for third-party behavioural advertising. We do not make decisions that produce legal or similarly significant effects about you solely by automated means.

Our legal bases

Where UK or European data-protection law applies, we process information to perform our contract with you (for example, to provide your account and the Service), for our legitimate interests in running, securing, and improving the Service, to comply with legal obligations, and with your consent where required. You can withdraw device permissions in your device settings and any other consent by contacting us; this will not affect processing that occurred before withdrawal.

When we share information

We share information only as needed to provide the Service, including with:

• people in a family account you join, who can see and change the family recipes, meal plans, shopping lists, and related shared activity; family owners and members can also see each other’s display name and email address;
• OpenAI or Google Gemini, depending on the configured AI provider, which processes the content you submit to AI features so it can generate requested responses, recipe changes, image analysis, images, or transcriptions;
• Brave Search, when web recipe discovery is enabled, which receives the recipe-search words you submit so we can find relevant public recipe pages;
• cloud infrastructure and storage providers, which host our application, database, and uploaded images;
• Resend, which sends transactional emails such as password-reset messages and family invitations;
• RevenueCat, which manages subscription purchases and entitlements on our behalf and receives your app-user identifier, device and app information, and purchase history;
• Apple, which processes payments for purchases made through the App Store under its own terms and privacy policy, and which does not share your payment details with us; and
• OneSignal, which delivers push notifications and receives your device push token and device information.
• Amplitude, if you allow optional analytics, which processes pseudonymous usage, session, device, and marketing-attribution data in its European data centre on our behalf.

These providers act on our instructions or under their own terms when you use their services. We may also disclose information where required by law, to enforce our rights, or in connection with a merger, acquisition, financing, or sale of all or part of our business.

International transfers

Our providers may process information in countries other than the one where you live. Where required, we use appropriate safeguards for international transfers, such as contractual protections approved by applicable data-protection law.

Retention and deletion

We keep account information and content for as long as your account remains active and as needed to provide the Service. You can request account deletion in the app’s Profile settings while you have app access. If you cannot access Profile, email us to make an account or data request. Deleting an account initiates removal of the account and associated data from our active application systems, subject to limited retention where necessary for security, legal obligations, dispute resolution, and backup recovery. Waitlist information is kept until it is no longer needed for launch communications or you ask us to remove it.

Your choices and rights

You can update much of your account information and preferences in the app. Depending on where you live, you may also have rights to:

• ask for access to, correction of, deletion of, or a portable copy of your personal information;
• ask us to restrict or object to certain processing; and
• withdraw consent where we rely on it.

To exercise these rights, make an account or data request, or ask a privacy question, email chef.remy@mastermeals.app. This route is available if you cannot access Profile. We may need to verify your identity before responding. If you are in the UK or EEA, you may also complain to your local data-protection authority.

Cookies and similar technologies

Our website does not use advertising or cross-site tracking cookies. We and our infrastructure providers may use essential technologies and collect technical logs needed to deliver, secure, and diagnose the Service. With your permission, Amplitude stores a pseudonymous identifier and related analytics state in your browser so it can measure sessions and marketing attribution. We store your analytics preference locally as an essential setting. You can allow or refuse analytics when first asked and change your choice later using “Analytics settings” in the website footer or “Share usage analytics” in the app’s Profile screen.

Security

We use reasonable technical and organisational safeguards designed to protect personal information, including encrypted connections and password hashing. No system is completely secure, so please use a unique, strong password and keep your account credentials confidential.

Children’s privacy

Master Meals is not directed to children under 13, and we do not knowingly collect personal information directly from them. If you believe a child has provided us with personal information, please contact us so we can investigate and take appropriate action.

Changes to this policy

We may update this policy as the Service or applicable law changes. We will post the updated version here and change the “Last updated” date. For material changes, we will provide additional notice where required.

Contact us

For privacy questions or requests, contact Master Meals at chef.remy@mastermeals.app.