This policy explains how Omar Mhiri ("we", "us"), trading as Meal Pilot, uses your personal data. We are the data controller for the personal data described here, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Contact us at mealpilotuk@outlook.com.
What we collect and why
- Account details — email address and login credentials (or your Google sign-in). Used to create and secure your account. Legal basis: contract.
- Plan preferences — budget, supermarket, household size, cooking time, goals, cupboard staples, and your saved and discarded meals. Used to build your plans. Legal basis: contract.
- Health-related details you choose to give — dietary requirements, allergies, calorie target and body weight, including those you enter for other people in your household on the Family plan (only add details for people who are happy for you to, or children you're responsible for). These may be special category data; we only use them to shape your plans, and only with your explicit consent under UK GDPR Article 9(2)(a). You give that consent by ticking the box \u201cI agree to Meal Pilot using my dietary, allergy and body details to build my plans\u201d on the setup page or in Preferences. If you don't tick it, we use these details only to build the plan in front of you and never save them. You can withdraw consent at any time by unticking the box in Preferences, which deletes these details from your account and saved plans.
- Price corrections — prices you enter for items. Used to improve your own estimates. Legal basis: contract.
- Technical data — IP address, device and browser information, and logs. Used to keep the service secure and working. Legal basis: legitimate interests.
- Emails — if you turn on the weekly reminder, we use your email to send it. Legal basis: consent; you can turn it off in Preferences.
Who we share it with
- Paddle.com, our Merchant of Record, which sells Meal Pilot Pro and Family, manages subscriptions, takes payments, handles tax and issues invoices. Paddle processes your payment details under its own privacy policy.
- Service providers that host our app and database and help us run it, acting on our instructions.
- Professional advisers such as lawyers and accountants, where needed.
- Authorities, where the law requires it.
We never sell your personal data.
International transfers
Some providers may store or process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
How long we keep it
We keep your account data while your account is open. When you delete your account from the Account page, your profile, plans, swipes and price corrections are deleted straight away. Backups and logs are removed within 30 days. Paddle keeps billing records as the law requires.
Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict or object to how we use it
- receive your data in a portable format
- withdraw consent at any time, where we rely on consent
Email mealpilotuk@outlook.com to use any of these rights. We'll reply within one month. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Security
We use encryption in transit, access controls so each person can only see their own data, and limited staff access to protect your information.
Cookies
We only use essential cookies and browser storage needed to keep you signed in and remember your progress. We don't use advertising or analytics cookies. Checkout is provided by Paddle, which may set its own essential cookies to process your payment.
Changes
We'll update this page if anything changes and tell you about significant changes by email.