Privacy policy

OWNER ACTION REQUIRED: This starter policy must be reviewed and customized before you accept paying customers. Add your legal business name, contact details, jurisdiction-specific notices, and real hosting providers.

Last updated: October 29, 2026

What the software stores

This app stores the account name, email address, salted password hash, selected dietary preferences (including ingredients to exclude), weekly meal plans and a subscription status from Stripe. It stores authentication cookies and server-side sessions. It does not ask for or store payment card numbers.

Why data is used

Data is used to generate meal plans, retain customer access, create shopping lists, manage subscriptions and support customer accounts. Recipe selections and dietary preferences are not forwarded to Stripe by the code as supplied; Stripe receives customer email, customer reference and payment metadata.

Service providers

The site owner must identify the hosting provider, email delivery provider and Stripe as payment processor, and insert links to their current privacy notices.

Retention and deletion

Customers can delete accounts in account settings. The app will request cancellation of any active Stripe subscription first, then delete the account and meal plans from its local database. Payment processor records and separately retained backups may follow different retention rules.

Security

The app uses password hashing, a restricted session cookie, CSRF checks and HTTPS when production is configured correctly. No online service is risk-free.

Contact

[Replace with your business name, mailing address and privacy contact email before publishing.]