Privacy Policy

1. Introduction

Welcome to MakeMealPlan ("we," "our," or "us"). We operate makemealplan.com (the "Site" or "Service") and are fully committed to protecting your privacy, securing your personal data, and maintaining transparent practices. This Privacy Policy details how we collect, use, process, share, and protect your information when you access our tools, create an account, or subscribe to our meal planning services.

By visiting, accessing, or subscribing to makemealplan.com, you acknowledge the terms of this Privacy Policy. If you do not agree with our practices, please discontinue use of the Service.

2. Information We Collect

We collect information necessary to compute personalized nutrition plans, operate member accounts, and process subscriptions.

2.1 Account & Identity Information

When you register, log in, or subscribe, we collect:

• Contact Details: Your name and email address.
• Authentication Credentials: Securely hashed passwords, One-Time Password (OTP) verification tokens, or authenticated Google OAuth 2.0 identifiers (Google account ID and public avatar).

2.2 Dietary, Biometric & Health Preference Data

To calibrate your custom nutritional roadmap and calculate daily metabolic equations (BMR and TDEE), we collect:

• Biometric Metrics: Age, biological sex, current height, current weight, and target weight.
• Lifestyle & Activity: Physical activity levels (sedentary, light, moderate, active) and fitness targets (weight loss, muscle gain, maintenance).
• Dietary Choices: Diet archetype (e.g., Balanced, Low-Carb, Keto, High-Protein, Mediterranean, Vegan, Vegetarian, PCOS, Anti-Inflammatory, Intermittent Fasting).
• Allergies & Exclusions: Food allergies (nuts, dairy, gluten, shellfish, eggs) and disliked ingredients.

2.3 User Content & Meal History

Subscribers can generate, swap, and save meal plans. We store your active and archived 7-day meal plans, recipe choices, and grocery checklist states inside your secure member database profile so you can access them across devices.

2.4 Payment & Subscription Data

All payments and subscription purchases are processed securely by our Merchant of Record, Dodo Payments Inc. We do not collect, process, or store your credit card numbers, CVVs, or bank account details on our servers. We receive and retain only non-sensitive transaction records, including Dodo subscription IDs, plan type (weekly, monthly, 3-month), billing status (active, cancelled, refunded), and payment receipt timestamps.

2.5 Automatically Collected Technical Information

When you navigate our website, our servers automatically record standard internet log data:

• IP (Internet Protocol) address (anonymized for analytics).
• Browser type, device model, operating system, and screen resolution.
• Referring URL, pages visited, time of access, and session duration.

3. How We Use Your Information

We use the collected information exclusively for legitimate business and service purposes:

• Meal Plan Generation: Calculating your Basal Metabolic Rate (BMR) and Total Daily Energy Expenditure (TDEE) to construct accurate 7-day meal schedules, macro targets, and grocery lists.
• Account & Access Management: Verifying logins via email OTP or Google OAuth, managing subscriptions, and providing customer support.
• Communication: Sending essential transactional emails (login passcodes, payment receipts, subscription notifications, and critical service updates).
• Platform Security: Detecting, investigating, and preventing fraudulent transactions, abusive scraping, or security threats.
• Service Improvement: Analyzing aggregated usage trends to optimize website speed, fix bugs, and refine user interface design.

4. Third-Party Service Providers

We partner with select, reputable service providers who process data strictly under our instructions and in compliance with modern privacy standards:

5. Cookies & Browser Local Storage

We utilize cookies and modern browser storage mechanisms:

• Essential Session Cookies: Encrypted PHP session tokens (`PHPSESSID`) required to maintain your login status, CSRF security, and wizard progress across pages.
• Browser LocalStorage: Temporary onboarding parameters (such as pending meal plan selections and measurement units) are stored locally in your browser to prevent data loss if a page is refreshed.
• Analytics Cookies (optional): Cookies from Google Analytics and Microsoft Clarity that collect non-identifying interaction signals. They are set only if you allow them in the cookie banner. We do not use advertising cookies. See our Cookie Policy.

You can change your analytics choice at any time from “Cookie settings” in the footer, or manage cookies in your browser settings. Please note that disabling essential session cookies will prevent login and checkout from functioning properly.

6. Your Privacy Rights (GDPR & Global Standards)

Under applicable data protection regulations (including the General Data Protection Regulation - GDPR), you have the following enforceable rights:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can update or correct your profile data, dietary preferences, or account email at any time from your Member Dashboard.
• Right to Erasure ("Right to be Forgotten"): You have the right to request the complete deletion of your account and associated meal plans.
• Right to Data Portability: You can export your saved meal plans and grocery lists in PDF format at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting prior lawful processing.

To exercise any of these rights, email us at support@makemealplan.com. We respond to all verified requests within thirty (30) days.

7. California Privacy Rights (CCPA / CPRA)

If you reside in California, you have specific rights under the California Consumer Privacy Act:

• Right to Know & Access: You may request the categories and specific pieces of personal information collected in the preceding 12 months.
• Right to Delete: You may request the deletion of your personal information collected by us.
• No Sale of Personal Information: We do not sell your personal information, biometric inputs, or health data to data brokers or third parties for monetary consideration.
• Right to Non-Discrimination: We will never discriminate against you, deny services, or alter pricing because you exercised your CCPA rights.

8. Children's Online Privacy (COPPA)

MakeMealPlan is intended solely for individuals who are at least 18 years old (or 13 with parental consent). We do not knowingly collect personal information from children under 13. If we discover that personal information has been inadvertently collected from a child under 13, we will immediately delete it from our databases.

9. Data Security & Retention

We implement robust industry-standard safeguards to secure your personal data, including 256-bit TLS/SSL encryption for all data in transit, hardened session cookie configurations, Content Security Policies (CSP), and restricted database permissions.

We retain your account and meal plan data for as long as your account remains active or as needed to provide you with services. If you delete your account, your personal data and saved plans are permanently deleted from our active databases.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection representative: