Privacy Policy

Information collected

Account information

When an adult creates or signs into an account, Meal Planner may process their name, email address, Firebase user identifier, sign-in provider and profile picture. Passwords are handled by Firebase Authentication and are not visible to the developer.

Planner information

Meal plans, meal ideas, ingredients, recipe details, shopping-list entries, preferences and family-group settings are processed to provide the app. Signed-in family information is stored in Firebase so authorised family devices can stay synchronised.

Pictures

Adults may optionally upload profile and family pictures. A child profile may upload its own picture only after the family administrator enables this option. Family and profile pictures are visible only to authenticated members of the same family group. Turning off a child's picture permission deletes that child's stored picture.

Recipe scanning

When an adult chooses or takes recipe photos, Meal Planner sends those images to secure cloud services to read the text, detect the recipe layout and create an editable recipe draft. This processing may use Google Cloud Vision and Google Vertex AI. The scan result is shown for review before the user saves it. Recipe photos are not included in feedback reports unless the user deliberately chooses to share them through a future supported feature.

Child profiles

A child profile is created and managed by a family administrator. It stores a first name, a secure account identifier, its family membership, role and, if specifically enabled by the administrator, an optional profile picture. Child profiles do not provide an email address to Meal Planner and usage analytics are disabled for them.

Usage analytics

Adults may optionally enable Firebase Analytics. This records general feature interactions, app configuration and device or app identifiers to help improve reliability and usability. Meal names, recipes, shopping-list contents, names, email addresses and child activity are not added to analytics events. Analytics is disabled until the adult opts in and can be turned off in Account settings.

Google Drive

An adult using Google sign-in may optionally enable personal planner backup in the private Google Drive application-data folder. Meal Planner requests this permission only when the feature is enabled. The data is not placed in the user's ordinary Drive files and is not shared with other Drive users.

Recipe websites

When an adult imports or opens a recipe link, the linked website receives a normal internet request and may process information such as the device IP address under its own privacy policy. Child profiles cannot open external recipe links.

Why information is used

• To authenticate accounts and keep them secure.
• To save and synchronise planners, recipes and shopping lists.
• To scan recipe photos, import recipe text and create editable recipe drafts.
• To operate family groups and enforce adult and child permissions.
• To provide support, prevent misuse and diagnose service failures.
• To improve the app using optional adult analytics.

Service providers and locations

Meal Planner uses Google Firebase services including Authentication, Cloud Firestore, Cloud Storage, Cloud Functions and optional Analytics. Recipe photo scanning may use Google Cloud Vision and Google Vertex AI to extract text and structure recipe information. Google processes this information as a service provider under its applicable terms. Firestore and Cloud Functions are configured in London, United Kingdom. Image storage is currently configured in the United States. Firebase Authentication, Analytics, Vision and Vertex AI may process data globally.

Sharing and selling

Personal information is not sold. Information is not shared for third-party advertising. Data may be disclosed when legally required or to service providers that operate the app on the developer's behalf.

Security and retention

Data is encrypted in transit. Firebase Security Rules restrict family records and pictures to authorised family members. Information is retained while the account or family group is active and is deleted through the account controls described below, subject to short-lived operational logs or legally required retention.

Account deletion

Signed-in users can open Account and select Delete account. A family administrator's deletion also deletes the shared family planner, family pictures and managed child profiles. Other adult family accounts remain active but leave that family. A non-admin adult deletes only their own account and membership.

Further instructions and an alternative request route are available on the account deletion page.

Children and parental controls

Child profiles are available only through a code created by the family administrator. They are read-only for the planner, cannot access the shopping list, cannot open external recipe links, do not use Google sign-in and do not send usage analytics. An adult must enable optional child profile pictures and can disable the feature and delete the picture at any time.

Your rights

Depending on where you live, you may have rights to access, correct, delete or restrict use of personal information and to object to or withdraw consent for certain processing. Analytics consent can be withdrawn in the app. Contact the developer to exercise another privacy right.