Privacy Policy
Last updated: June 29, 2026
1. Information We Collect
When you create a Mealio account, we collect your email address, username, and password. If you sign up via Google, we receive your name, email address, and profile photo from Google. We also collect information you voluntarily provide during onboarding: dietary preferences, health goals, body measurements, and household size.
As you use the app, we collect meal logs, recipes you create or save, grocery lists, pantry data, and nutrition information. We automatically collect usage data including log timestamps, feature interactions, and device/browser type.
2. How We Use Your Information
- Provide, operate, and maintain the Mealio service
- Personalize your meal plans and recipe recommendations
- Calculate your nutrition targets using the Mifflin-St Jeor equation
- Send transactional emails (account verification, password reset)
- Process subscription payments via PayPal
- Improve our AI meal generation algorithms
- Respond to your support requests
3. Information Sharing
We do not sell your personal information. We share data only with:
- PayPal — to process subscription payments (governed by PayPal's Privacy Policy)
- Google — when you use Google Sign-In (governed by Google's Privacy Policy)
- Service providers — hosting, analytics, and email delivery under strict data processing agreements
- Law enforcement — when required by applicable law
4. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we permanently delete your personal data within 30 days, except where retention is required by law.
5. Your Rights
You have the right to access, correct, or delete your personal data at any time. You can export your data from Settings → Profile. To request account deletion, use the Delete Account option in Settings or email us at privacy@mealio.ca.
6. Cookies
We use essential cookies to keep you signed in and a session cookie for CSRF protection. We do not use advertising cookies. You can accept or decline non-essential cookies via the cookie banner when you first visit Mealio.
7. Security
Passwords are hashed using bcrypt. API requests are authenticated using Laravel Sanctum tokens. All data is transmitted over HTTPS. We do not store payment card details — payments are handled exclusively by PayPal.
8. Children's Privacy
Mealio is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.
9. Contact Us
For privacy-related questions, contact us at privacy@mealio.ca or write to: Mealio Inc., Toronto, Ontario, Canada.