MealPrepPrivacy Policy
This policy explains what MealPrep (the iPhone app and its service at api-mealprep.bragdeal.cloud) collects, why, how it is protected, and the choices you have. We wrote it to be read, not skimmed. If anything is unclear, email support@bragdeal.com.
What we collect
Only what the app needs to do its job:
- Account: your email address and a password hash (never the password itself), or the identifier Apple or Google gives us when you sign in with them. Your name, if you give one.
- Body data you enter: age or birth year, sex, height, weight entries, activity level and goal. These set your calorie and macro targets.
- Food preferences: the meals you usually eat, foods you love or dislike, allergies and intolerances, and the kitchen appliances you own.
- Plans and activity: the plans generated for you, swaps, grocery check-offs, meals marked eaten or cooked, recipe ratings.
- Optional: a profile photo, a postal or ZIP code for the store search, notification preferences.
- Purchases: which plan credits you hold and the App Store transaction identifiers needed to honour them. We never see your card details; Apple handles payment.
- Technical: the usual server logs (request time, path, status, a device identifier for the session) kept for security and debugging.
What we do not collect
No advertising identifiers, no tracking across other apps or websites, no contacts, no precise location history. The store search uses your location only while that screen is open, on your phone, and never sends it to our servers unless you type a postal code yourself.
How plans are generated
To build a plan, MealPrep sends your targets and food preferences (meal times and habits, loved and disliked foods, allergies, appliances) to an AI model provider under a contract that prohibits using the data to train its models. Your name, email and account identifiers are not included. Calories and macros come from the USDA FoodData Central database on our server, not from the model.
How your data is protected
- Everything travels over HTTPS.
- Weight entries, food habits and allergies are encrypted at rest with a key that is not stored in the database.
- Passwords are hashed with Argon2id. Sessions use short-lived tokens that can be revoked at any time.
- Every record is tied to your account; our software cannot read one person's data on behalf of another.
- Servers are in a Hostinger data centre; backups are encrypted.
Who else sees it
We do not sell or rent personal data, ever. We share only what a service needs to work for you: Apple (sign-in and purchases), Google (sign-in, if you choose it), the AI model provider (preferences and targets, as above), our email provider (to send verification and password emails to you), and our hosting provider. Each is bound by its own privacy terms and our contract.
Your choices
- Export: Account, Export my data gives you everything as a file.
- Delete: Account, Delete account removes your account and every record immediately. Apple or Google sign-in links are revoked at the same time.
- Edit: name, body data, preferences, appliances, postal code and photo can be changed in the app at any time.
- Notifications are off until you turn them on.
Retention
Your data is kept while your account exists. When you delete the account it is removed within minutes, and from backups within 30 days. Server logs are kept for 30 days.
Children
MealPrep is for adults 18 and over. We do not knowingly collect data from anyone younger; if you believe we have, email us and we will delete it.
Where it lives
BragDeal Inc. is a Canadian company and this policy follows Canada's PIPEDA and British Columbia's PIPA. Data may be processed in Canada, the United States and the European Union by the providers named above.
Changes
If this policy changes in a way that matters to you, the app will tell you before the change takes effect. The date at the top always shows the current version.
Contact
BragDeal Inc., Vancouver, BC, Canada · support@bragdeal.com