Privacy Policy

1. Introduction

Simple Meal Prep ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our meal planning application.

We process your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

Account Information

When you create an account, we collect:

• Email address (required)
• Name (optional)
• Password (stored securely hashed)

Profile & Preferences

To personalize your experience, we collect:

• Dietary restrictions and allergies
• Child-friendly recipe preferences
• Language preferences

Family Member Information

If you add family members to your account, we collect:

• Family member names
• Their dietary restrictions
• Whether they are children (for recipe filtering)

Meal Planning Data

• Recipes you select and save
• Meal plans you create
• Serving sizes and meal assignments

Technical Data

We automatically collect:

• IP address
• Browser type and version (user agent)
• Pages visited and interactions
• Session information

4. How We Use Your Data

5. Analytics & Tracking Technologies

We use the following third-party analytics services:

Microsoft Clarity

We use Microsoft Clarity to understand how users interact with our website through session recordings and heatmaps. Clarity may collect information about your device, browser, and interactions with our site.

Privacy Policy: Microsoft Privacy Statement

Google Analytics

We use Google Analytics to analyze website traffic and usage patterns. Google Analytics uses cookies to collect anonymous information about how visitors use our site.

Privacy Policy: Google Privacy Policy

PostHog

We use PostHog for product analytics to understand feature usage and improve user experience.

Privacy Policy: PostHog Privacy Policy

Reddit Pixel

We use the Reddit Pixel for advertising measurement and optimization. When you are logged in, your email address (in hashed form) may be shared with Reddit for conversion tracking.

Privacy Policy: Reddit Privacy Policy

6. Third-Party Services

Google Sign-In (OAuth)

If you choose to sign in with Google, we receive your email address and basic profile information from Google. We do not receive or store your Google password.

Anthropic Claude API

We use the Anthropic Claude AI service to generate optimized batch cooking instructions. When you create a meal plan, recipe ingredients and instructions are sent to this service for processing. No personal identifying information is shared with this service.

Amazon Web Services (AWS)

We may use AWS S3 for storing media files. Data is stored in EU data centers (eu-central-1 region).

Email Service Provider

We use email services for sending account verification emails and password reset requests.

7. Cookies

We use the following types of cookies:

8. Data Retention

We retain your personal data for as long as:

• Your account remains active
• Necessary to provide our services to you
• Required by law or for legitimate business purposes

When you delete your account, we will delete or anonymize your personal data within 30 days, unless we are required to retain it for legal purposes.

9. Your Rights (GDPR)

Under GDPR, you have the following rights:

• Right of Access - Request a copy of your personal data
• Right to Rectification - Request correction of inaccurate data
• Right to Erasure - Request deletion of your data ('right to be forgotten')
• Right to Restrict Processing - Request limitation of data processing
• Right to Data Portability - Receive your data in a machine-readable format
• Right to Object - Object to processing based on legitimate interests
• Right to Withdraw Consent - Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at: privacy@simplemealprepapp.com

You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS encryption for all data in transit
• Secure password hashing
• CSRF protection on all forms
• Regular security updates
• Access controls and authentication

11. International Data Transfers

Some of our third-party service providers (Google, Microsoft, Anthropic, Reddit) are based in the United States. When your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

12. Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: