The short version
- Your meal plans, pantry, grocery lists, recipes, notes and budget are stored on your phone, not on our servers.
- Your account holds your email address, an optional name and a sign-in ID, so you can sign in and use your plan.
- When you use a planned-for-you feature, only the details that feature needs are sent, and only at that moment.
- Analytics and crash reports never include your recipes, pantry, notes, prices or other kitchen content.
- You can export, clear or delete your data at any time.
- We don't sell your information, show ads, or track you across other apps and websites.
1. Who we are
MealSpring ("MealSpring", "we", "us") provides the MealSpring mobile app and this website. We are responsible for the personal information described in this policy.
Questions or requests about privacy: support@dayvityapp.com.
2. Information stored on your device
Most of what you put into MealSpring is kept in a database inside the app on your phone. This includes:
- meal plans, cooked meals, leftovers and eating-out entries;
- recipes, favourites, collections, recipe images and notes;
- pantry items, quantities and dates;
- grocery lists, stores, prices and receipts you enter;
- budgets, spending and insights;
- your kitchen profile, such as household size, diets, foods to avoid, cuisines, cooking preferences and goals;
- meal feedback (how you rated a meal, reasons and any note);
- app settings, such as theme, reminders and units.
We do not run a cloud copy of this information, and it is not synced between devices. Android's automatic app backup is turned off for MealSpring, so it is not copied to your Google backup either.
Backups you create
You can export a backup file from Profile → Data and privacy. The file is created on your phone and saved or shared wherever you choose. That destination is outside our control, so please keep backup files somewhere safe. Restoring a backup replaces MealSpring's data on that phone.
3. Your account
You sign in to MealSpring with an email address and password or with your Google account. Firebase Authentication (provided by Google) stores:
- your email address and whether it has been verified;
- your display name, if you provide one or it comes from Google sign-in;
- a unique account ID and basic sign-in records.
We use your account to let you sign in, to link your subscription to you, and to apply weekly limits on planned-for-you features. Your account is not used to store or sync your kitchen records.
To protect our services from abuse, the app uses Firebase App Check, which asks Google Play to confirm that requests come from a genuine copy of MealSpring on a genuine device. This check does not include your kitchen content.
4. Planned-for-you features
Some features create content for you: weekly meal plans (and regenerating or swapping meals in them), Kitchen Guide tips, recipe images, and recipe ideas. These run only when you ask for them.
When you use one, the app sends the details that feature needs to our server, which passes them to a trusted third-party content-generation provider to produce the result. Depending on the feature, this can include:
- your planning choices, such as the days, meals and servings to plan;
- kitchen profile details, such as diets, foods to avoid, cuisines, equipment, cooking time and goals;
- relevant pantry items, grocery items, budget figures, currency and measurement units;
- titles of recipes you already have, and meal feedback (ratings, reasons and notes) so plans suit your taste;
- for a recipe image or idea, the recipe or idea you've chosen.
We don't send your email address or name with these requests. Please don't include personal details in notes or ideas. Results are saved in the app on your phone.
This provider processes the information only on our behalf to provide the feature, under terms that do not allow it to use the information to train its models.
What our server keeps
Our server, which runs on Google Firebase, keeps a small amount of information linked to your account ID: a count of how many requests you've made in the current week, short-lived records of recent requests so a retry doesn't run twice, and the current state of a plan you're editing so you can swap meals within it. See How long we keep data.
5. Subscriptions and purchases
Plus and Premium subscriptions are sold and billed by Google Play. We never see or store your card or payment details.
We use RevenueCat to confirm your subscription. RevenueCat receives your account ID and purchase information from Google Play, such as the plan, purchase and renewal dates, and status. Our server keeps a record of your current plan and when it expires so the app can unlock the right features.
6. Analytics and crash reports
Analytics
We use Google Analytics for Firebase to understand basic app use: standard app and session events (for example, that the app was opened, and device type, app version, operating system and approximate country) and a few subscription events, such as which feature showed the upgrade screen, the plan and billing period chosen, and whether a purchase or restore succeeded. Automatic screen tracking is turned off.
An optional setting, Share optional feature analytics, sends extra anonymous feature-use events. It is off unless you turn it on, and you can turn it off at any time.
Crash reports
Firebase Crashlytics sends us a report when the app crashes or hits a serious error, including the error details, device model, operating system and app version, so we can fix problems.
Analytics and crash reports never include recipe titles, pantry contents, notes, prompts, dietary information, prices, spending or other kitchen content.
7. Notifications
Meal, pantry, grocery and budget reminders are scheduled on your phone from your own data; nothing is sent to us to create them. You choose which ones you get in Profile → Notifications.
If you allow notifications, the app also registers with Firebase Cloud Messaging so we can send occasional announcements, such as news about MealSpring. This uses a notification token for your device and does not use your kitchen data. You can turn notifications off in your phone's settings.
8. Service providers
We share information only with these providers, only for the purposes described, and under contracts that require them to protect it:
| Provider | What it does for MealSpring |
|---|---|
| Google Firebase (Authentication, Cloud Functions, Firestore, App Check, Analytics, Crashlytics, Cloud Messaging) | Sign-in, running our server and storing its limited records, abuse protection, analytics, crash reports and notifications. |
| Google Play | App distribution, subscription billing and app integrity checks. |
| RevenueCat | Confirming and managing subscription status. |
| Content-generation provider | Producing meal plans, Kitchen Guide tips, recipe images and recipe ideas when you request them. |
We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a merger or sale of MealSpring, in which case this policy would continue to apply to your information.
We do not sell or rent your personal information, and we don't share it for advertising.
9. How long we keep data
| Information | How long |
|---|---|
| Kitchen data on your phone | Until you clear it, delete your account, or uninstall the app. |
| Account (email, name, account ID) | Until you delete your account. |
| Weekly request counts | The current weekly period, and deleted when you delete your account. |
| Recent request records | Removed automatically, usually within a day. |
| Plan editing state | Up to 30 days, or until you delete your account. |
| Subscription record | While you have an account; deleted with your account, along with your RevenueCat customer record. |
| Analytics and crash reports | According to Firebase's retention settings for our project, after which they are deleted automatically. |
We may keep limited information longer only if the law requires it, for example purchase records.
10. Your choices and rights
- See and change your data: almost everything is visible and editable in the app.
- Take a copy: Profile → Data and privacy → Export backup.
- Clear your phone's data: Profile → Data and privacy → Clear local data.
- Delete your account: Profile → Account → Delete account, or see Delete your account.
- Optional analytics: turn off Share optional feature analytics.
- Notifications: change them in the app or your phone settings.
Depending on where you live, including under Kenya's Data Protection Act, 2019, the EU and UK GDPR, and US state privacy laws, you may have the right to be informed, to access, correct or delete your personal information, to object to or restrict processing, to data portability, and to withdraw consent. To make a request, email support@dayvityapp.com. We may need to confirm you own the account first, and we'll respond within the time the law allows, usually 30 days.
You can also complain to your local data protection authority. In Kenya, this is the Office of the Data Protection Commissioner.
11. Children
MealSpring is a household planning app for adults. It is not directed at children under 13 (or the minimum age in your country), and we don't knowingly collect their personal information. If you believe a child has created an account, contact us and we will delete it.
12. Security and international transfers
Information sent between the app and our services is encrypted in transit. Our server records are locked so that only our own server can read or change them, and our server accepts requests only from signed-in, verified accounts. Data on your phone is protected by your device's security, so keep your phone locked and your backup files safe. No system is perfectly secure, but we work to protect your information.
Our providers may process information in countries other than yours, including the United States. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.
13. This website
mealspringapp.com is a simple information site. It uses no cookies, analytics or advertising and loads nothing from other websites. Our hosting provider may keep standard server logs, such as IP address, browser type and pages requested, for security and reliability.
14. Changes and contact
We'll update this policy when MealSpring or the law changes, and change the effective date at the top. If a change is significant, we'll let you know in the app or on this site before it takes effect.
Contact: support@dayvityapp.com