Privacy Policy

1. Who we are

The Service is operated by MealForm LLC, organized under the laws of the State of North Carolina, United States. For privacy-related questions or requests, contact us at admin@mealform.ai.

2. Information we collect

2a. Information you give us

Marketing site (taste.mealform.ai):

• Your email address when you request access to the Test Kitchen
• Optional free-text you submit about your interest in MealForm
• Basic metadata about the submission (timestamp, approximate country derived from your IP, browser user agent)

MealForm app:

• Account information: email address, hashed password, optional display name
• Your flavor identity preferences (taste profile, dietary restrictions, equipment, household)
• Recipes you save, cook, rate, or modify
• Cooking sessions and outcomes you record
• Photos you capture of your dishes during cooking or for Flavor Match
• Voice recordings if you use Capture with Dala (the heirloom recipe feature). See Section 7 for additional protections.
• Text and voice input you send to DALA, our AI assistant
• Subscription and billing information, handled by our payment processor (e.g., Apple App Store in-app purchase, Google Play Billing, or a third-party processor where applicable). We do not see or store your full payment card details.

2b. Information collected automatically

• Device type, operating system, app version
• IP address (used for rate limiting and approximate region only; not retained long-term)
• Basic usage telemetry and crash reports needed to operate and improve the Service
• Cookies and local-storage values. See Section 6.

We do not currently use third-party advertising trackers or behavioral advertising cookies.

3. How we use information

We use information to:

• Operate the Service (recommend recipes, run voice and visual guidance during cooking, manage your account, process payments)
• Send you transactional emails (account notifications, password resets, billing receipts, Test Kitchen approval status)
• Send optional product updates if you opt in
• Provide AI-assisted features by processing your input through third-party AI providers (Section 4)
• Improve recipes, models, and the cooking experience over time
• Detect and prevent abuse, fraud, and security incidents
• Comply with legal obligations

We do not sell your personal information. We do not share your personal information with third parties for their independent marketing.

4. Third parties we share information with

We share limited information with the following service providers, each acting on our instructions:

• OpenAI:text and voice input you submit to DALA is processed through OpenAI's API to generate AI responses. Per OpenAI's API terms, content sent through the API is not used by OpenAI to train its models.
• Resend:your email address and submitted text are used to deliver transactional and Test Kitchen notification emails on our behalf.
• Cloudflare:hosts the Service's infrastructure, including web pages, databases, and stored files (including voice captures).
• Apple App Store and Google Play:handle app distribution and in-app purchase. Each operates under its own privacy policy.
• Payment processors:process paid subscriptions. We do not receive or store your full card details.

We may also disclose information if required by law, court order, or to protect the rights, property, or safety of MealForm, our users, or others.

5. Storage, security, and retention

Where data is stored: Cloudflare's global edge network. Specific data types may be stored in specific regions; voice captures are stored in Cloudflare R2 object storage.

How long we keep it:

• Account information: while your account is active, plus a limited period after deletion for legal and operational reasons (typically up to 30 days)
• Marketing site submissions: as long as needed to process and respond, then archived
• Cooking sessions, recipes, and dish photos: while your account is active or until you delete them
• Voice captures (Capture with Dala): preserved for the lifetime of the Service unless you delete them. See Section 7.
• Logs and security data: typically 30–90 days

Security: we use industry-standard practices including encryption in transit (HTTPS) and at rest where applicable, password hashing, and scoped access controls. No system is perfectly secure; we cannot guarantee absolute security.

6. Cookies and local storage

• The marketing site uses a service worker for offline support. No third-party trackers.
• The MealForm app uses local device storage (localStorage, IndexedDB) to cache your data for offline use and faster load times.
• We do not use third-party advertising cookies.

You can clear stored data through your browser or device settings.

7. Captured voice content. Our lifetime preservation commitment.

If you use Capture with Dala to record a loved one teaching their recipe, that audio is treated with stronger protections than ordinary content:

• The original recording is the artifact. We do not clone, synthesize, or modify the voice. Playback during cooking uses the actual audio you recorded.
• Lifetime preservation. For as long as MealForm operates and your account is active, we preserve your captured recordings. This is a deliberate product commitment, not an aspiration.
• No model training. We do not use captured voices to train AI models, ours or any third party's.
• You can delete a recording at any time. Deletion is permanent and cannot be reversed.
• Wind-down plan. If MealForm is acquired or discontinued, we will provide reasonable notice and the ability to export captured recordings in their original audio format.

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information (subject to legal retention requirements)
• Object to or restrict certain processing
• Receive your data in a portable format
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local data protection authority

To exercise these rights, email admin@mealform.ai with the subject line "Privacy Request." We respond within 30 days.

California residents (CCPA/CPRA): you have additional rights including the right to know categories and specific pieces of personal information we have collected and the right to opt out of "sales" or "sharing" of personal information for cross-context behavioral advertising. We do not sell or share personal information for these purposes.

EU/UK residents (GDPR / UK GDPR): the lawful bases for our processing include your consent (where required), the performance of a contract (operating the Service for you), our legitimate interests (improving the Service, security), and legal obligations. The data controller is MealForm LLC, contact admin@mealform.ai.

9. Children

MealForm is not directed to children under 13. Paid features require users to be at least 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact admin@mealform.ai and we will delete it.

10. International transfers

If you are located outside the United States, your information may be transferred to and processed in the United States or other countries where our infrastructure providers operate. By using the Service, you consent to such transfers.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new policy here with an updated "Last updated" date. For significant changes, we will give reasonable notice (in-app message or email to the address on your account).

12. Contact

Questions or requests: admin@mealform.ai

See also our Terms of Service.