Privacy Policy

What we store

When you generate a plan: the preferences you submit (diet type, cuisines, allergens, cart selections, plan duration, servings, spice/effort), your IP address, and your user-agent string. The IP and user-agent are used for rate limiting and basic abuse prevention.

When you post a comment on a shared plan: the comment body, an optional author name, your IP, and your user-agent.

When you send a message through the contact form: the category you picked, the subject and body, any reference URL you paste, an optional name and email if you choose to fill them in, your IP, and your user-agent. The whole message is stored in a database row that only the operator can read.

What we do not store

We do not require an account, so there is no password, email, phone number, profile, or login history attached to your plans or comments. Anything we know about you is whatever you typed into a form on this site.

How long we keep it

Generated plan rows stay around indefinitely so share links keep working. We may purge old plans during database resets without notice.

Contact-form messages stay until they are resolved, then remain in the database for our own records. If you want yours deleted, send another contact message asking us to delete it and include enough detail to identify the original.

Rate-limit counters (in Upstash / Vercel KV) auto-expire on a sliding window — typically within an hour or a day.

Who we share with

Your plan inputs are sent to OpenRouter, which forwards them to whichever AI model is currently configured. Depending on the model that's active, that's Anthropic, OpenAI, Google, or another provider. Those providers handle prompt data per their own privacy policies.

The site is hosted on Vercel, stores data in Vercel Postgres, and uses Upstash / Vercel KV for rate-limit counters. We do not sell personal information and we do not share it with anyone outside the infrastructure providers strictly necessary to run the site.

Cookies and analytics

We use Vercel Analytics, which is cookie-less and collects aggregate, anonymous visit data only. We do not set tracking, advertising, or third-party cookies. No consent banner is shown because nothing requires one.

Your rights

You can request access, correction, or deletion of any personal information we hold by sending a message through the Meal Planner contact form. Depending on where you live, you may have additional rights under GDPR, UK GDPR, India's DPDPA, or CCPA — we honour valid requests under those laws.

Children

The site is not directed at children under the minimum age of digital consent in your jurisdiction (13 in most places, 18 under India's DPDPA framework). We do not knowingly collect information from children.

Changes

If we make material changes to this policy we will bump the "last updated" date at the top. Continued use after a change means you accept the revised policy.