Privacy Policy
Last updated 22 October 2026
This explains, in plain English, what Mealkly collects, why, and what you can do about it. It follows UK GDPR and the Data Protection Act 2018.
Who we are
Mealkly is the data controller.
- Run by: [FOUNDER NAME], trading as Mealkly
- Status: Sole trader — company not yet registered
- Company number: [COMPANY NO. — not yet registered]
- Address: [POSTAL ADDRESS], United Kingdom
- Email: support@mealkly.com
What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Email, password (encrypted), name, handle, photo, bio | Run your account | Contract |
| Recipes, photos, videos, stories, comments, messages, likes, follows | Show and share what you post | Contract |
| Food diary, weight, body measurements, water, meal photos, birth year, sex, height, activity, goal | Calorie and progress tracking | Your explicit consent (health data) |
| Barcodes, product searches, label photos you send | Find and add foods | Contract |
| App events (e.g. 'recipe viewed', ids only, never what you type) | See which features work | Legitimate interests |
| Waitlist email and where you signed up | Tell you when Mealkly opens | Consent |
| Data-request email | Handle your request | Legal obligation |
Health data
Food logs, weight, measurements and similar figures are health data, a special category under UK GDPR. We only use them to show your own tracking and targets, we never sell them and never use them for advertising. Tracking is optional: you can use recipes without it, hide tracking in Settings, and delete your entries at any time. Withdrawing consent doesn't affect what happened before.
Who processes your data for us
- Lovable Cloud (Supabase infrastructure): database, sign-in, file storage, hosting.
- Lovable AI Gateway: reads recipe text and ingredient names to estimate nutrition. Not your diary or weight.
- Lovable email (sending from notify.mealkly.com): your email address, to send sign-in, password and invite emails.
- Open Food Facts: receives barcodes and product search words. If you choose to add a product there, that edit is public and anonymous.
- Google / Apple sign-in (website only, if you choose them): they confirm who you are.
No advertising or third-party tracking is used. Fonts are served from our own site. Some providers may store data outside the UK; where they do, they use UK-approved safeguards such as the International Data Transfer Addendum or adequacy regulations.
How long we keep it
- Your account data: while your account is open.
- After you delete your account: removed within 30 days.
- Label photos you send for a new ingredient: deleted once reviewed.
- Waitlist emails: until launch or until you ask us to remove you.
Your rights
You can access, correct, export, restrict or delete your data, object to processing, and withdraw consent. Delete your account in Settings → Delete my account, download your data in Settings → Download my data, or use the data request form without signing in. We reply within one month.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Age
Mealkly is not for children under 13. People under 18 get maintenance targets only: no weight-loss goals or calorie deficits.
Cookies
See our Cookie Policy. We only use what's needed to keep you signed in and remember your settings.
Food data attribution
Some product data comes from Open Food Facts under the Open Database License. All nutrition figures are estimates, not medical advice.