Privacy Policy

Introduction

MealCanvas is operated by an individual developer. This Privacy Policy explains how we collect, use, and protect your personal information when you use our meal planning application.

Information We Collect

We collect the following information when you create an account and use our service:

• Account Information: Email address and encrypted password
• Profile Information: Household size, country, preferred cuisines, and ingredients you want to avoid
• Usage Data: How you interact with the app (meals planned, preferences updated)

How We Use Your Information

We use your information to:

• Provide and maintain the meal planning service
• Personalize meal suggestions based on your preferences
• Send you password reset emails when requested
• Improve and optimize the application
• Communicate with you about the service

We do not sell your personal information to third parties.

Data Storage and Security

Your data is stored securely:

• Database: PostgreSQL database hosted on Railway
• Password Security: All passwords are hashed using bcrypt and never stored in plain text
• Authentication: We use JWT tokens stored in secure, httpOnly cookies
• Encryption: All data transmission uses HTTPS encryption

Data Retention

We retain your account information and preferences as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal purposes.

Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct your information through your account settings
• Deletion: Request deletion of your account and data
• Export: Request a copy of your data in a portable format

To exercise these rights, please contact us at the email address below.

Cookies

We use essential cookies to maintain your login session. These cookies are necessary for the service to function and cannot be disabled. We do not use tracking or advertising cookies.

Third-Party Services

We use the following third-party services:

• Railway: Database hosting (see Railway's privacy policy)
• Resend: Email delivery for password resets (see Resend's privacy policy)

Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this policy. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or want to exercise your rights, please contact us at:

Email: michnai.eszter@yahoo.co.uk