Effective September 6, 2026

Privacy Policy

Westbrook Software LLC, doing business as Meal Monster ("Meal Monster," "we," "us," or "our"), provides food logging, nutrition estimates, progress tracking, and related account features in the United States. This policy explains what personal information we collect, where it comes from, why we use it, when we disclose it, how long we keep it, and the choices available to you.

Meal Monster is intended only for adults age 18 and older. It is a general wellness service, not a medical provider or emergency service.

Privacy requests: support@mealmonster.app

Read the separate Consumer Health Data Privacy Policy.

Information we collect

• Account and identity: email, login provider, authentication identifiers, and account settings from you, Supabase, and Apple or Google sign-in.
• Nutrition and wellness: age or birth date, sex or gender selection, height, weight, goals, calorie and nutrient targets, appetite, routine, meal timing, foods you choose to avoid, meals, saved foods, weigh-ins, and workouts from you and calculations performed for requested features.
• Apple Health: steps, workouts, workout source, workout duration, and active energy, only after you grant permission.
• Feature content: typed meal descriptions, voice recordings and transcripts, user-selected food photos, barcode values, food edits, and optional profile photos.
• Purchases: product, trial, subscription, renewal, expiration, refund, and entitlement status from RevenueCat and app stores. Meal Monster does not receive full payment-card numbers.
• Notifications and device data: Expo push token, platform, timezone, locale, reminder preferences, delivery status, app/build version, and permission state.
• Friends accountability: chosen first name, invite code, friendship and request status, equipped Meal Monster skin, current logging streak, per-friend calorie-sharing consent, selected widget friend, and the phone contact you choose.
• First-party product events: bounded events such as app open, onboarding completion, meal-log result, progress view, paywall view, trial start, and purchase restoration, with limited source, result, latency-range, route, or error-category metadata.
• AI and security metadata: feature, provider, model, status, token counts, approximate cost, usage counters, consent version and time, and security or privacy-request events.
• Website requests: IP address, browser or device information, requested page, and request time that may appear in ordinary hosting logs.

First-party product events do not include meal text, food names, health values, email addresses, voice transcripts, or other free-form content. We do not use an advertising SDK or third-party behavioral analytics service in the app at launch.

When you use Photo AI, the food photo you choose is sent through Meal Monster's authenticated server function to OpenAI for a nutrition estimate. Meal Monster does not store the raw food photo in cloud storage after the request completes. A saved meal may retain attachment metadata and the reviewed nutrition estimate. Optional profile photos are stored separately and are not used for food analysis.

How we use information

We use information to provide, personalize, maintain, secure, and support requested features; calculate nutrition targets; display food, activity, and progress; process AI food logs after consent; return barcode and nutrient data; manage subscriptions; deliver enabled reminders; connect you with friends you invite, show accepted friends your chosen name, equipped Meal Monster skin, and current logging streak, and show each friend only the calorie total and daily goal you separately choose to share; answer privacy and support requests; enforce limits; prevent abuse; troubleshoot failures; measure reliability and retention; and meet legal, tax, accounting, app-store, security, and dispute obligations.

Meal Monster does not sell or rent personal information. We do not share personal information for targeted advertising or cross-context behavioral advertising. We do not use health, fitness, nutrition, food-log, Apple Health, or AI content for advertising, marketing profiling, or unrelated data mining.

AI processing and consent

AI food logging is optional. Before the first AI request, Meal Monster asks for affirmative consent to send the meal text, voice recording, transcript, or food photo you choose to submit through Meal Monster servers to OpenAI for transcription, classification, and nutrition estimates. We record the notice version, processor, scope, and acceptance or revocation time. You can turn AI data sharing off in the app; barcode scanning remains available.

Meal Monster does not opt API content into training by OpenAI and requests that Responses API application state not be stored. Under OpenAI's current default controls, text API content may remain in abuse-monitoring logs for up to 30 days. OpenAI currently documents no abuse-monitoring or application-state retention for audio transcription requests. Raw voice audio is not stored by Meal Monster after the request completes.

AI outputs and nutrition values are estimates and may be wrong or incomplete. Review and correct estimates before relying on or saving them.

Apple Health

If you connect Apple Health, Meal Monster requests read-only access to steps, workouts, workout source, workout duration, and active energy. Meal Monster does not write to Apple Health. Apple Health and other health or fitness information is used only for requested health-management features and is not sold, used for advertising or marketing, shared with data brokers, or used for unrelated data mining.

Friends and calorie sharing

Friends is optional. You choose a first name for Friends and connect through a one-time invite code or friend request. Accepted friends can see your chosen name, equipped Meal Monster skin, and current logging streak. Calorie sharing is directional and remains off unless you explicitly enable it while inviting a friend or after connecting. Choosing it during an invite reveals nothing until that friend accepts. That friend can then see only your current day's consumed calorie total and base daily calorie goal. It does not share meal names or items, macros, weight, email, phone number, Apple Health, or workouts. You can turn calorie sharing off or remove the friend at any time.

If you allow Contacts access, your address book is displayed only on your device and is not uploaded to Meal Monster. The selected contact name and phone number stay in device-local secure storage. Meal Monster opens the system Messages composer with suggested text and does not send messages automatically. A Friends widget uses a revocable, limited token to retrieve only the two authorized first names and calorie totals needed for that widget.

Service providers and disclosures

• Supabase: authentication, database and private profile-photo storage, server functions, access controls, and operational logs.
• OpenAI: selected meal text, voice audio, transcript, or food photo after consent, plus request metadata needed for AI food logging.
• RevenueCat and Apple or Google app stores: app-user, product, transaction, subscription, and entitlement information.
• Apple or Google sign-in: login and authentication information when selected.
• Expo: push token, device and delivery information, and notification content needed to deliver reminders.
• Open Food Facts and USDA FoodData Central: barcode values or normalized food queries. We do not intentionally include your Meal Monster user ID.
• Website and email providers: ordinary request data and content you choose to send to support.

We may also disclose information when reasonably necessary to comply with law or legal process; protect users, Meal Monster, or others; investigate fraud, abuse, or security incidents; complete a corporate transaction subject to applicable obligations; or follow your direction.

Retention and deletion

• Account, profile, saved nutrition, health, and preference data: while your account is active, unless deleted earlier.
• Raw voice audio: transient processing only; not stored by Meal Monster after the request.
• Raw food photos submitted to Photo AI: transient processing only; not stored by Meal Monster in cloud storage after the request.
• Saved food-photo attachment metadata: while the related meal log remains in your account, unless deleted earlier.
• Encrypted validated meal-parse cache: up to 24 hours.
• First-party product events and content-free AI request metadata: up to 13 months.
• Notification delivery history: up to 90 days.
• Security and privacy-request events: up to 24 months when reasonably needed, with identifiers removed when no longer needed.
• Profile photos: until replaced, removed, or the account is deleted.
• Friend invites, friendships, sharing choices, and widget access records: while needed for Friends or until revoked, removed, expired, or the account is deleted.
• Device-only friend contact: until you remove the friend, replace the contact, log out, or clear the app's local data.
• Usage-limit protection after account deletion: a server-keyed one-way account code and minimal AI usage events may remain for up to 31 days to prevent account recreation from resetting usage limits. This record contains no email, account ID, provider identifier, meal, prompt, photo, voice recording, or AI result.
• Confirmed account deletion: other active-system account data is deleted; backup copies are deleted or rendered inaccessible within six months unless a longer period is legally required.

Provider records may also be subject to provider retention requirements. We notify applicable processors of verified consumer-health deletion requests when required. Deidentified or aggregate information that can no longer reasonably identify you may be retained.

Your choices and rights

You can update supported profile information; turn device permissions or AI data sharing off; turn per-friend calorie sharing off, remove a friend, or disable the Friends widget; export Meal Monster data; permanently delete your account; or request confirmation, access, correction, deletion, applicable recipients, consent withdrawal, or appeal of a denied privacy request by emailing support@mealmonster.app. We authenticate requests, respond within applicable deadlines, explain appeals, and do not unlawfully discriminate for exercising a privacy right.

Deleting a Meal Monster account does not cancel an app-store subscription. Manage or cancel it separately through the store used for purchase.

Security and breach notification

Meal Monster uses safeguards designed to protect information, including encrypted transport, authenticated server routes, owner-scoped database policies, private profile-photo storage, short-lived signed links, secure native session storage, server-held credentials, validation, and usage limits. No system is perfectly secure. If a breach or unauthorized disclosure requires notice, we will notify affected users, regulators, and others as required by law.

Children

Meal Monster is intended only for adults age 18 and older. It is not directed to children, and we do not knowingly collect personal information from children.

Changes

We identify material changes with a new effective date and provide in-app notice or seek renewed consent when required. We will not collect, use, or disclose additional categories of consumer health data for materially new purposes without required notice and consent.

Contact

Westbrook Software LLC, doing business as Meal Monster
Email: support@mealmonster.app
Mailing address: 4539 N 22nd St Ste R, Phoenix, AZ 85016
Website: mealmonster.app