Privacy Policy

Effective July 11, 2026

Meepers ("the app", "we") is a recipe and meal-planning app. This policy explains what information the app handles, why, and the choices you have. The short version: your data exists to run your account and the features you use. We do not sell it, we do not show ads, and we do not track you across other apps or websites.

Information we collect

Account information

• Email address and password when you create an account with email. Passwords are handled by our authentication provider (Supabase) and stored only as a secure hash — we never see or store your plain-text password.
• Sign in with Apple: if you use it, Apple shares your name and email (or Apple's private relay email if you choose "Hide My Email").
• Username and optional profile photo that you set yourself.

Content you create

• Recipes, recipe photos, cooking notes, and collections.
• Meal plans, shopping lists, and pantry items.
• Nutrition goals you enter (for example a daily calorie target). These are self-reported preferences used only to show your own progress in the app.
• Likes/dislikes on discovered recipes, used to rank suggestions for you.

Social features

• Friend connections you request or accept.
• Household membership: if you join a household, its members can see the shared meal calendar, shared shopping lists, and content you share with the household.
• Recipes and collections you explicitly share with friends.

Support requests

• If you contact support or report a problem, we receive your message plus basic context: platform (e.g. iOS version), app version, and — for bug reports — the error details. If you are signed in, your account email is attached so we can reply.

Subscription status

• Payments are processed entirely by Apple. We never see your payment details. RevenueCat, our subscription manager, tells us whether your subscription is active so the app can unlock premium features.

Notifications

• If you turn on notifications, we store your device's push token so we can deliver them (for example a friend request or a household update). The token is removed when you sign out or delete your account, and you can turn notifications off any time in your device Settings.

What we do not collect

• No advertising identifiers, no cross-app tracking, no analytics SDKs.
• No location data.
• No contacts — friends are added by username only.

How photos and imports are processed

• Photo scan: when you scan a recipe photo, the image is sent to Google's Gemini API to extract the recipe text, then discarded from that flow. It is not used to identify you.
• URL and social imports: the link or caption you submit is sent to our server and, where needed, to a recipe-extraction service (Spoonacular) or Google's Gemini API to parse the recipe.
• Recipe search: your search terms are sent to search providers (e.g. Brave Search, Spoonacular) to find recipes. Search terms are not linked to your identity by those providers through the app.

Sharing

• Share links: when you create a public share link for a recipe, anyone with that link can view the recipe (and its photo) without an account. You can revoke a share link at any time in the app.
• Photos: recipe and profile photos are stored at unlisted URLs. Anyone who has a photo's exact URL (for example via a recipe you shared) can view it.
• We never sell personal information, and we never share it with third parties for their own marketing.

Service providers

The app runs on a small set of processors, used only to provide the features above:

• Supabase — database, authentication, and file storage.
• Apple — Sign in with Apple and payment processing.
• RevenueCat — subscription status management.
• Google (Gemini API) — recipe extraction from photos and captions you submit.
• Spoonacular and Brave Search — recipe search and extraction.

Data retention and deletion

• Your data is kept while your account exists.
• You can delete your account at any time in the app: Account → Delete account. This permanently deletes your account and the data associated with it — recipes, photos, plans, pantry, friendships, and household membership. Deletion is immediate and cannot be undone.
• Support requests may be retained after account deletion, without your account attached, to keep a record of reported issues.
• Deleting your account does not cancel an active subscription — manage subscriptions in your device's Settings → Apple ID → Subscriptions.

Security

Data is encrypted in transit (TLS). Access to your data inside the app is enforced per-account with row-level security. On your device, your session is stored using iOS secure storage.

Children

Meepers is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

Changes

If this policy changes materially, we will update the effective date above and note the change in the app.

Questions? Contact us at meepers.app@gmail.com.