Privacy policy
Last updated: [DATE THE SITE GOES LIVE]
This policy covers the Meal Motive app for iPhone and Android, and this website. It says the same things as the "What leaves this phone" screen inside the app, in the same plain words. If the two ever disagree, that's a mistake, and we'd like to hear about it at web.makers.qld@gmail.com.
Meal Motive is run by [OWNER NAME, OR BUSINESS NAME AND ABN], in Australia. We handle personal information under the Australian Privacy Principles.
The short version
Meal Motive needs an account, and that account holds your food diary. Almost everything else happens on your phone. There are no ads, no analytics and no trackers, and your information is never sold or shared for marketing.
What your account holds
When you make an account, we store:
- Your email address, and your password (stored only as a secure hash by our database provider; we can't see it). If you sign in with Google, we receive your email address from Google, and nothing else is used.
- Your diary: the foods you log, the amounts, the meal and the day.
- The water you log, one total per day.
- The meals you save, and what's in them.
- Products you add or correct, including any ingredient list you type or photograph (the text is read on your phone; the photo is never uploaded).
- Your profile, if you answer the optional energy questions: height, weight, age in years (not your birth date), sex, activity level and goal. These are used only to estimate your daily energy.
- Your badges, and the day you earned each one.
That's the whole list. It's copied to our server so a second phone can have your diary and a lost phone isn't a lost diary. Only you can read it. The database itself enforces that, and the app's tests include one that tries to read one account from another and must fail.
Your account data is stored with Supabase, our database provider, in [SUPABASE REGION, e.g. Sydney, Australia].
What never leaves your phone
- The food database comes with the app. Looking a product up never asks a server, which is why the scanner works in a supermarket with no signal.
- The camera. Scanning reads the barcode on the pack. No photo is kept or sent. The same goes for photographing a nutrition panel or ingredient list: the text is read on your phone and the picture is thrown away.
- Apple Health and Health Connect. If you allow it, the app reads one thing, the active energy you burned today, to adjust your daily energy estimate. It never writes to your health records, and the number isn't sent to our server.
- Reminders, if you turn them on, are scheduled on your phone and sent by it. No server knows they exist.
- Personal alerts and Insights (Meal Motive Plus) are worked out on your phone from data that's already there.
What is never collected
- No analytics. Nothing counts which screens you open or how long you spend on them, in the app or on this website.
- No advertising and no third-party trackers. This website sets no cookies, and only collects your email address if you join the waiting list.
- No location, contacts, photo library or microphone.
Crash reports
When the app crashes, it may send a crash report to Sentry, our error-reporting service, so the bug can be fixed. A report contains the error, where in the code it happened, and the phone model and operating system version. It never contains your name, email, account, IP address, or anything you've logged. Email addresses and barcodes are removed from the error text before it leaves your phone. It does carry one random number, created when you installed the app, so that ten crashes from one phone are recognised as one problem. That number isn't linked to your account. Reinstalling the app gives you a new one.
Buying Meal Motive Plus
Payments are handled entirely by Apple (the App Store) or Google (Google Play). We never see your card or payment details. We use RevenueCat to check that a purchase is valid and to keep your subscription working across your phones. RevenueCat receives the purchase record from the store and your account's random identifier. It doesn't receive your email or your diary.
Sharing your weekly recap
The app can make a picture of your week to share. It's only created when you ask for it, you see exactly what's in it before it's shared, and it goes wherever you choose to send it. We don't receive a copy.
Emails we send
We send email only to confirm your address and to reset your password. No marketing email is ever sent. Emails are delivered through Resend.
How long we keep it
We keep your account data while your account exists. When you delete your account, everything on our server is deleted straight away and can't be recovered. Database backups held by Supabase are removed on their normal cycle, within [BACKUP RETENTION, e.g. 7 days].
Your choices
- Export everything. On the Account screen, "Export" gives you one file with your diary, your products and your profile.
- Delete your account from the Account screen in the app, or ask us at this page. Deleting the copy on your phone is a separate choice, and it's off by default.
- Access or correction. Everything we hold is visible and editable in the app. You can also ask us at web.makers.qld@gmail.com.
- Complaints. Contact us first at web.makers.qld@gmail.com. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Children
Meal Motive accounts are not open to anybody under 13. The app asks for an age and won't make an account for someone younger.
The waiting list
If you join the waiting list on this website, we keep your email address so we can tell you when Meal Motive is ready. It's stored with Resend, our email provider, and used for nothing else: we don't share it and don't send marketing. To be taken off the list, reply to any email from us or write to web.makers.qld@gmail.com. When the app launches and we've sent that one email, we delete the list.
This website
This website has no analytics, no cookies and no trackers, and loads nothing from any other site. Our host, Cloudflare Pages, keeps standard server logs (including IP addresses) for security, under Cloudflare's own privacy policy. We can't see individual visitors in them, and we don't use them to track anyone.
Changes
If this policy changes, we'll update the date at the top. If a change affects what leaves your phone, the app will say so before it happens.