Privacy Policy
What MyMeals collects when you order, who we share it with, how long we keep it, and the choices you have.
- Effective date
- July 27, 2026
- Last updated
- July 27, 2026
This document is still being reviewed. Items shown as “to be confirmed” — including the retention periods — are being settled with counsel. We publish a retention period only once a deletion routine enforces it.
1. Scope
This policy explains how [legal entity name — to be confirmed](“MyMeals”) collects, uses, shares, and retains personal information when you use mymeals.fit. It applies to customers, visitors, and applicants in the United States.
2. Information we collect
2.1 You give us
| Category | Examples | Why |
|---|---|---|
| Identifiers | Name, email, phone | Create your account, contact you about orders |
| Delivery information | Street address, delivery instructions | Deliver your meals |
| Account credentials | Password (stored only as a cryptographic hash — we never see it) | Secure your account |
| Order content | Meals chosen, plan, delivery window | Fulfil your order |
| Communications | Messages you send support | Answer you |
2.2 Collected automatically
| Category | Examples | Why |
|---|---|---|
| Device and connection | IP address, browser type | Security, fraud prevention, rate limiting |
| Usage | Pages viewed, actions taken | Operate and improve the Service |
2.3 From others
| Source | What | Why |
|---|---|---|
| Stripe (payments) | Card brand, last four digits, expiration, payment status | Show your payment method and billing history |
| Delivery provider | Driver assignment, delivery status, proof of delivery | Tell you where your order is |
We do not store full card numbers. Card data is collected and stored by Stripe, a PCI-compliant payment processor. We receive only a token and the limited details above.
3. Sensitive information
Meal choices can reveal dietary preferences that may suggest health or religious information. We use this only to prepare and deliver your order and to show you relevant meals. We do not sell it and do not use it to make decisions about you outside the Service.
4. How we use your information
To create and manage your account; process orders, payments, and refunds; operate meal plans including automatic renewal; deliver your meals; send transactional messages (order confirmations, delivery updates, payment failures, password resets); provide support; prevent fraud and abuse; comply with legal obligations; and, with your consent where required, send marketing.
5. Who we share it with
| Recipient | What they receive | Why |
|---|---|---|
| Stripe | Name, email, amount, order reference | Process payment |
| Delivery provider | Name, delivery address, phone, delivery window | Deliver your order |
| Email provider | Name, email, message content | Send transactional email |
| Cloud storage and hosting | Data stored in the Service | Run the Service |
| Professional advisers, authorities | As required | Legal compliance, disputes |
We may transfer information as part of a merger, acquisition, or sale of assets. We will notify you if that changes how your information is handled.
We do not sell your personal information.
6. How long we keep it
| Data | Retention | Why |
|---|---|---|
| Account and order records | [retention period — to be confirmed] | Tax, accounting, and dispute obligations |
| Payment records | [retention period — to be confirmed] | Financial recordkeeping |
| IP addresses in security logs | [retention period — to be confirmed] | Fraud prevention and abuse investigation |
| Password reset tokens | 30 minutes | Security |
| Abandoned guest carts | [retention period — to be confirmed] | Let you resume; then deleted |
| Support messages | [retention period — to be confirmed] | Service history |
A retention period is a promise we have to keep, so we publish one only where a deletion routine actually enforces it. The periods still marked above are being settled; this page is updated when each one is.
7. Your rights
Depending on your state, you may have the right to know what we collect, access a copy, correct inaccuracies, delete your information, opt out of sale or targeted advertising, and not be discriminated against for exercising these rights.
To make a request, email [privacy email — to be confirmed] or use the controls in your account. We will verify your identity before acting. We respond within 45 days and may extend once when permitted. You may designate an authorized agent.
Some information must be kept even after a deletion request — for example, records we need for tax or fraud prevention. We will tell you when that applies.
8. Security
We protect your information with encryption in transit, hashed passwords using a modern algorithm, strict access controls, rate limiting on authentication, and audit logging of administrative actions. No system is perfectly secure. If a breach affects your personal information, we will notify you as required by law.
9. Cookies
We use cookies that are strictly necessary to keep you signed in and to secure the Service.
10. Children
The Service is not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child has given us information, contact [privacy email — to be confirmed] and we will delete it.
11. Changes
We will post any change here and update the date above. If a change is material, we will notify you before it takes effect.
12. Contact
[legal entity name — to be confirmed]
[address — to be confirmed]
[privacy email — to be confirmed]
You can also reach us through the contact page.