Privacy

MealPlus holds information about what you eat, which is health information, so we keep it to what the app needs. We do not sell it, we do not show ads, and nothing in MealPlus follows you across other apps or websites. What you log is private unless you post it or share it with a coach.

• Your email address, to sign you in.
• Your profile: display name, username, bio and picture, if you add them.
• Your sex (for nutrient reference values) and year of birth, and your daily targets.
• What you log: meals, the foods and amounts in them, photos, water, weight readings, steps, training sessions, and workouts (the exercises, sets, weights and reps, and any notes).
• What you do with other people: posts, comments, likes, follows, meals you send, and messages.
• Coaching: who coaches you, what you have chosen to share, meals and training planned for you, and replies on your workouts.
• Plan my week: your answers (meals, moods, proteins), your “Loved” and “Not again” on meals, and anyone without MealPlus you add to your household: a first name and the calories and macros you type in, seen only by your household. Also your weekly food budget, if you set one, and any prices you put in for what you paid. Nobody else sees your prices; once three or more people have put in a price for the same food, the middle one (never yours on its own) helps estimate prices for everyone.
• If you buy Premium or a coach’s plan: which plan you have, when it renews or ends, and whether it came through Apple or the website. Never your card details.
• If you turn notifications on, an address your browser gives us to send them to.
• If you connect the Health app in the iPhone app: your daily step count, your workouts (kind, length and the calories the Health app recorded) and your weight readings, read from it when you open MealPlus. Nothing else is read, and none of it changes your calorie target. Only if you also turn on “Send what you eat to Apple Health”, MealPlus writes each meal's calories, protein, carbs, fat and fibre to the Health app on your phone, for the last week, and nothing else.
• The days you open MealPlus: how many times, how many of those came from tapping a notification or were in the iPhone app, and when you were last on it that day. No pages, no device and no location. We use it only as totals across everyone, to see how MealPlus is doing.
• Records of errors the app hits, which can include the page and your account, so they can be fixed.

• Only you: your logged meals, water, weight, targets and year of birth, unless you share them.
• Everyone on MealPlus: your display name, username, bio and picture, and anything you post.
• Anyone with a post’s link: that post, with its photo, foods, method and your display name, even without an account. Unposting it closes the link.
• Followers of @mealplus.app on Instagram, only if you say yes: a meal you’ve posted (its photo, name and numbers), credited to your username. It’s off unless you turn on “Feature my meals on Instagram” when posting or in Settings, and turning it off stops anything more being shared.
• Your coach, if you have one: only what you tick in Settings, and nothing after coaching ends.
• MealPlus admins: content that has been reported, error records, and your data where needed to keep the app working, deal with abuse, or meet a legal obligation.

Your data is stored in Sydney, Australia. These services help us run the app:

• Supabase for the database, sign-in and photo storage, in its Sydney region.
• Vercel to host the website, in its Sydney region, though requests can pass through its network elsewhere. Its Speed Insights measures how fast pages load (the page, the kind of device and the load times), with no cookies and nothing that names you.
• Resend to send email: sign-in links, the daily digest and coaching invites. Resend is based in the United States, so your email address and those emails pass through there.
• OpenAI to check photos before other people see them (a post, a reply, a profile picture, a photo sent to a group or in a message), for nudity, violence and self-harm. Only the photo is sent: no name, account or words. Photos you keep to yourself are never sent. OpenAI is based in the United States; it says photos sent for checking are not kept and are not used to train its models.
• Google or Apple, only if you choose to sign in with them.
• Apple and RevenueCat, if you buy Premium in the iPhone app: Apple takes the payment, and RevenueCat (based in the United States) tells us which plan you have and when it renews, under your MealPlus account number. Your card details never reach us.
• Stripe, if you pay on the website: Stripe takes the payment and keeps your card; we keep which plan you have and when it renews. Stripe is based in the United States.
• Your browser’s push service (from Apple, Google or Mozilla), only if you turn notifications on. Notifications say who did something, never what you ate.

Some of these providers are based overseas. They handle your data only to provide their service to us.

• Download a copy of your data, or delete your account, from Settings. Deleting removes your profile, meals, photos, comments and posts. If someone saved a copy of one of your posts, their copy stays theirs but no longer names you.
• Unpost a meal at any time, which also closes its link.
• Change what a coach can see, or end coaching.
• Turn notifications and the daily email off in Settings.
• Stop reading steps from the Health app with the Stop link under the steps box, or in your iPhone’s Health app under Sharing.

Backup copies of the database are kept for a limited time and then deleted, so deleted data can take a little while to leave them.

Connections are encrypted, photos are private files that need a short-lived signed link to open, and the database enforces rules so one account cannot read another’s private data. No system is perfectly secure, but if something goes wrong with your data we will tell you.

MealPlus is for people 16 and older. Under 18s need a parent or guardian’s permission.

MealPlus is run by Edward Bookallil, a sole trader in New South Wales, Australia (ABN 93 344 220 235), who is responsible for the information it holds. Email hello@mealplus.com.au to ask what we hold about you, to correct it, or to complain. If you are not happy with our answer, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

We will update this page when what we collect or who helps us changes. The date at the top says when it last changed.