Privacy Policy

Your information should work for you.

This Privacy Policy explains how NextMeal ("NextMeal," "we," "us," or "our") collects, uses, discloses, and protects information when you use the NextMeal mobile application, related websites, and services (collectively, the "Service").

Effective date: August 8, 2026 · Last updated: September 4, 2026

Health information notice: Information such as weight, dietary restrictions, nutrition goals, and meal history may be sensitive. NextMeal is a general wellness tool, not a medical service, and does not provide medical advice.

1. Information we collect

Account and identity information

When you sign in with Apple or Google, we may receive an account identifier, email address, display name, authentication provider, and authentication tokens or claims needed to operate your account. Apple or Google controls the information it shares based on your settings and choices.

Profile, wellness, and preference information

You may provide age, gender, height, current and target weight, activity level, nutrition goal, dietary restrictions or allergies, country, time zone, preferred cuisines, and similar preferences. We use this information to calculate targets and personalize recommendations.

Meal, pantry, and interaction information

We collect information you submit or generate through the Service, including meal descriptions, meal photos, estimated or manually entered nutrition values, meal times and history, pantry items, cravings, plan customizations, skipped or swapped meals, and feedback or support messages.

Subscription and transaction information

Purchases are processed by Apple App Store or Google Play, as applicable. We do not receive or store your full payment card details. We and our subscription service provider may receive an app user identifier, product purchased, entitlement status, purchase and expiration dates, trial status, renewal status, store, country, and transaction identifiers.

Device, diagnostics, and usage information

We and our service providers may process device and app information such as operating system, app version, device identifiers used by a service provider, IP address, language or region, authentication events, crash or error information, and subscription diagnostics. We use this information to secure, operate, troubleshoot, and improve the Service.

Permissions

The app may request access to your camera or photo library when you choose to submit a meal photo, and notification permission when you choose to receive notifications. We do not access photos you do not select or capture for the Service. You can change permissions in your device settings.

2. How we use information

We use information to:

3. Artificial intelligence processing

Meal descriptions, meal photos, pantry information, dietary preferences, and relevant profile context may be sent to an artificial intelligence provider to estimate nutrition and generate recommendations. AI output can be inaccurate. Do not submit information in meal text or photos that you do not want processed for this purpose.

We do not use NextMeal to make decisions that produce legal or similarly significant effects about you.

4. How we disclose information

We do not sell your personal information. We do not use your information for third-party behavioral advertising. We may disclose information as follows:

Recipient or categoryPurpose and information involved
Firebase / GoogleAccount authentication, identity, and security for Apple and Google sign-in flows.
AppleSign in with Apple, App Store purchases, subscription management, refunds, and store compliance.
GoogleGoogle sign-in and, where offered, Google Play purchases and subscription management.
OpenAIProcessing meal text, meal images, pantry context, and relevant preferences to provide AI-generated nutrition estimates and recommendations.
RevenueCatSubscription purchase status, entitlements, trials, restoration, and customer subscription management.
Cloud and infrastructure providersApplication hosting, databases, network delivery, meal-photo storage, backups, logging, and security. Current infrastructure may include Railway, MongoDB, and Cloudflare R2.
Professional advisers and authoritiesInformation reasonably necessary for legal advice, compliance, fraud prevention, safety, or responding to lawful requests.
Business transaction recipientsInformation may be transferred as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards and notice where required.

These providers process information under their own terms and privacy policies as well as our instructions where applicable. Apple and Google independently control store transaction records and certain account information.

5. Legal bases

Where applicable law requires a legal basis, we process information as necessary to provide the Service and perform our agreement with you; based on our legitimate interests in operating, securing, and improving the Service; with your consent where requested, such as for device permissions; and to comply with legal obligations. You may withdraw consent through device settings or by contacting us, without affecting prior processing.

6. Retention

We generally retain account, profile, meal, pantry, plan, and subscription-linkage information while your account is active and for as long as reasonably needed to provide the Service. Individual meal and pantry records may be removed using available app controls. When you request account deletion, we delete or de-identify covered information from active systems, subject to verification and lawful exceptions.

Limited information may remain temporarily in backups or be retained when reasonably necessary for security, fraud prevention, dispute resolution, tax or accounting requirements, or other legal obligations. Apple, Google, and payment-related providers may retain transaction records under their own legal obligations.

7. Security

We use reasonable administrative, technical, and organizational measures designed to protect information, including authenticated access and restricted storage access. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.

8. International processing

We and our service providers may process information in countries other than the one where you live. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for cross-border transfers.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your information; object to or restrict certain processing; withdraw consent; or appeal a privacy decision. You may update certain profile information in the app and control camera, photo, and notification permissions in device settings.

To make a privacy request, email yourspaceai@gmail.com. We may need to verify your identity. You may also use our account-deletion instructions. You may complain to your local data-protection authority where that right applies.

10. Children

NextMeal is not intended for children under 16, and the onboarding experience is designed for users aged 16 or older. We do not knowingly collect personal information from children under 16. If you believe a child has provided information, contact us so we can investigate and delete it as appropriate.

11. Website privacy

This website does not intentionally use advertising cookies or analytics scripts. Cloudflare, as the website host, may process IP addresses and technical request information to deliver and secure the site.

12. Changes to this policy

We may update this Privacy Policy as the Service or legal requirements change. We will post the updated version here, revise the date above, and provide additional notice when required. Material changes apply prospectively unless the law permits otherwise.

13. Contact us

For privacy questions or requests, contact:

NextMeal
yourspaceai@gmail.com