Privacy Policy

1. Information We Collect

Account Information

• Name and email address
• Password (stored only in hashed form by our authentication provider; we never see it)
• If you choose to sign in with a third-party account, the name and email that provider shares with us

Meal Planning Preferences

• Your chosen diet, serving size, unit system, and ingredients you exclude
• Meal plans generated for you, favorite and hidden recipes, and shopping lists

Body Stats, Macro Targets, and Food Log (Optional)

If you use personalized macros or the food log, we store the information you enter:

• Sex, age, weight, height, activity level, goal, and (if provided) body fat percentage
• Your calorie and macro targets
• Foods, portions, calories, macros, and water you log

Some laws treat this as health-related or sensitive information. We use it only to provide these features to you. We do not use it for advertising.

Meal Photos (Optional)

If you scan a meal with your camera, the photo (and any note you add) is sent to an AI service provider to estimate the foods and macros. We do not store the photo. Only the entries you confirm are saved to your food log.

Billing Information

Payments are handled by our payment processor. We never receive or store your full card number. We keep your customer ID, plan, subscription status, renewal date, and payment and refund history.

Grocery Store Connection (Optional)

If you connect a grocery retailer account to send your shopping list to your cart, we store the access tokens the retailer gives us and the store location you pick. We do not receive your retailer password.

Messages and Feedback

• Contact form messages (name, email, subject, message)
• Cancellation feedback and reviews or testimonials you choose to submit
• Email sign-ups, including the store, region, and ZIP code you choose for grocery deal emails

Usage and Device Data

We automatically collect:

• Pages visited, referring site, browser and device type, and approximate country (through our analytics provider)
• Campaign tags in the link you arrived from (such as utm_source), which we attach to your checkout so we know which campaigns work
• IP address and request details in our hosting provider's server logs

2. How We Use Your Information

We use your information to:

• Create your account and provide meal plans, recipes, shopping lists, and the food log (to perform our contract with you)
• Process payments, free trials, cancellations, and refunds (contract and legal obligations such as tax records)
• Send account, billing, and service emails (contract)
• Send newsletters, tips, and offers; you can unsubscribe at any time (consent or legitimate interests, depending on where you live)
• Understand how the site is used and improve it, and prevent fraud and abuse (legitimate interests)
• Respond to support requests (legitimate interests)

3. Who We Share Information With

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only with the following categories of recipients, and only as needed to run the Service:

• Payment processor: your email, payment details, plan, and subscription events, to take payments, run free trials, and issue refunds.
• Hosting, database, and authentication provider: all account and app data described above, plus server logs, to host the Service and store your data.
• Email service provider: your name, email, diet, plan and subscription status, renewal date, member-since date, and account events (for example, starting a trial or cancelling), to send service and marketing emails. Contact form messages are also delivered to our support inbox through this provider.
• Grocery and retail integration partners: only if you connect a grocery account, the items you choose to add to your cart and the store you select. Shopping list links to online grocery services pass your list items in the link when you click it.
• AI service providers for photo analysis: meal photos and any note you add, only when you scan a meal. They process the photo under their own data-retention terms.
• Analytics provider: page views, referring site, browser, device type, and approximate country. It does not use cookies and does not identify you by name or email.
• Content delivery networks: fonts and some images are loaded from third-party networks, which receive your IP address and browser information when your browser requests them.
• Public nutrition databases: food search terms and barcodes you scan, without your name or email, to look up nutrition facts.
• Sign-in provider: only if you choose to sign in with a third-party account.
• Legal and business: professional advisers, or authorities when required by law; or a buyer or successor if our business is sold or reorganized.

4. Cookies and Local Storage

• Essential cookies: keep you signed in, and a short-lived security cookie while you connect a grocery account.
• Local and session storage: remember in-app choices on your device, such as favorites, dismissed pop-ups, a cached dashboard, and campaign tags for your current visit.
• No advertising cookies or pixels: we do not use advertising or social media tracking pixels, and our analytics does not use cookies.

Our checkout page is hosted by our payment processor, which may set its own cookies for security and fraud prevention. You can clear cookies and site storage in your browser settings; if you block essential cookies, you will not be able to sign in.

5. Data Retention

• Account and app data: kept while your account exists, including after you cancel your subscription, so everything is still here if you come back.
• Deleting your account (Settings → Delete account): cancels any subscription immediately and permanently erases your account, profile and preferences, body stats, food log, meal plans, saved recipes, shopping lists, grocery store connection, feedback, and contact form messages. We also unsubscribe you and ask our email service provider to delete your contact record. Deleted data may remain in our providers' routine backups for a limited period until those backups expire.
• Billing records: your customer record, invoices, payment and refund history, and our internal log of billing support actions are kept by us and our payment processor for as long as tax, accounting, and fraud-prevention laws require, even after you delete your account.
• Meal photos: not stored by us.
• Grocery connection: tokens and store choice are kept until you delete your account. The access tokens we hold expire on their own; deleting your account removes them from our systems.
• Support messages and feedback: kept as support records until no longer needed, or until you ask us to delete them.
• Server logs and analytics: kept under our providers' standard retention periods.

6. Your Rights

Wherever you live, you can ask us to:

• Access: send you a copy of your personal information
• Correct: fix inaccurate information (you can also edit most of it in Settings)
• Delete: erase your account and personal information, subject to billing records we must keep by law (you can do this yourself in Settings)
• Port: give you your data in a portable format
• Unsubscribe: stop marketing emails, using the link in any email or by contacting us

EEA, UK, and Swiss Residents (GDPR)

You also have the right to object to or restrict our processing, and to withdraw consent at any time without affecting earlier processing. You may complain to your local data protection authority.

California Residents (CCPA/CPRA)

In the past 12 months we collected these categories of personal information: identifiers (name, email, IP address), commercial information (plan and payment history), internet activity (pages visited), approximate location (country, and ZIP code if you give it), and sensitive information (account sign-in details, and the body stats and food log you choose to enter). We collect them for the purposes in Section 2 and disclose them to the categories of recipients in Section 3.

You have the right to know, delete, and correct your personal information. We do not sell or share personal information, and we use sensitive information only to provide the Service, so there is nothing to opt out of. We will not treat you differently for exercising your rights. You may use an authorized agent to make a request.

To make a request, email privacy@ultimatemealplans.com from the email address on your account so we can verify it is you. We respond within one month (GDPR) or 45 days (CCPA), and will tell you if we need more time.

7. Data Security

• All traffic is encrypted in transit (HTTPS)
• Your data is stored with a hosting provider that encrypts it at rest
• Database access rules limit each account to its own data
• Card details are handled only by our payment processor
• Access to personal data is limited to the people who need it to run the Service

No method of transmission or storage is completely secure, but we work to protect your information.

8. Children's Privacy

Ultimate Meal Plans is not intended for children under 13. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. International Users

Paleo Meal Plans LLC is a United States company, and your information is processed in the United States and other countries where our service providers operate. When we transfer personal information from the EEA, UK, or Switzerland, we rely on appropriate safeguards, such as the Standard Contractual Clauses in our service providers' data processing terms.

10. Changes to This Policy

We may update this policy from time to time. We will change the "Last updated" date above and, for significant changes, notify you by email or with a notice on our website.

11. Contact Us

For privacy-related questions or requests, contact Paleo Meal Plans LLC:

Email: privacy@ultimatemealplans.com
Support: ultimatemealplans.com/contact