Privacy Policy
Last updated October 28, 2026
This policy explains what MealKlip (“MealKlip”, “we”, “us”) collects when you use the MealKlip website and apps, why, and what you can do about it. Questions: support@mealklip.com.
What we collect
- Recipes you import: the links, photos, screenshots, and text you give us to read a recipe. Photos, screenshots, and pasted text are read and then discarded; we don’t keep them. A recipe read from a public social post may be kept for 7 days, without any link to you, so the same post loads faster for the next person.
- Your account: your email address and your password, which we store only as a one-way hash, never as readable text.
- Your Klips and plans: the recipes you save (title, ingredients, steps, servings, times, the source link, and a copy of the source’s public picture), your meal plans, and your grocery lists.
- Your subscription: whether you have Premium, where you bought it (our website, the App Store, or Google Play), and when it renews or ends. Payments are handled by Stripe, Apple, or Google. We never see or store your card number.
- Usage information: what you do in MealKlip (for example, importing a recipe or saving a Klip), your device type, app version, the website that referred you, and campaign labels in the link you followed. It’s tied to a random ID and, once you sign up, to your account ID. It never includes your email, recipe links, recipe text, or pictures.
- Security information: to stop abuse we count sign-in and import attempts per email and network address, stored only as short-lived scrambled keys. Our hosting providers keep standard technical logs, which can include IP addresses.
How recipe import works
To read a recipe, we may send what you gave us to these services, only for that purpose:
- OpenAI: reads photos, captions, video frames, audio, and text to find the recipe
- ScrapeCreators: reads the public social post at a link you paste
- Google (Gemini): reads a public YouTube video from its link
- Brave Search: looks up the recipe’s page using only the dish name and creator
We also fetch the public web page or post at the link you paste. Pictures we copy for your Klips are stored under random names that anyone with the exact link can open; they are the source’s public pictures, never your own photos or screenshots.
Cookies and device storage
The website uses two cookies to keep you signed in, keeps the recipe you’re looking at in your browser until you close the tab, and stores a random analytics ID in your browser. The apps keep your sign-in in your device’s secure storage (Keychain or Keystore). If you turn on Face ID, Touch ID, or fingerprint unlock, your device checks it; we never receive biometric data. We don’t use advertising cookies.
How we use it
- to read recipes and keep your Klips, meal plans, and grocery lists
- to send account emails: confirming your email address and resetting your password
- to provide Premium and handle your subscription
- to understand which features work, using the usage information above
- to keep MealKlip secure and prevent abuse
- to meet legal obligations
We don’t send marketing email, and we don’t sell your personal information or share it for advertising.
Who we share it with
Only service providers that run MealKlip for us, each for its own job:
- Render and Cloudflare: hosting and network delivery
- Supabase: our database and picture storage
- OpenAI, ScrapeCreators, Google, and Brave: recipe import, as described above
- Amazon Web Services (Amazon SES): sending account emails
- PostHog: usage analytics, with IP addresses discarded
- Stripe: payments on our website
- Apple and Google: purchases in their app stores, under their own privacy policies
We may also disclose information when the law requires it, or to protect MealKlip and its users. Your information is stored and processed in the United States.
How long we keep it
We keep your account information while you have an account. When you delete it, we delete your account and everything in it from our database right away. We keep only a random ID that says an account was deleted, never your email or anything you entered, so a subscription you still pay for in an app store can be moved to a new account. Database backups are kept for 7 days and then expire. Import services may keep what we send them for a limited time under their own terms (OpenAI, for example, for up to 30 days to monitor abuse). Payment providers keep their own records, such as receipts, as the law requires. Usage information is kept by our analytics provider; what’s linked to your account ID is deleted when you delete your account.
Your choices
- Delete your account: in Account, choose Delete account and confirm with your password, on the website or in the app. A subscription on our website ends at the same time; an App Store or Google Play subscription has to be cancelled in the store (see our Terms of Use).
- Delete a Klip: delete it in MealKlip at any time.
- Access or correct your information: email us and we’ll help.
- Biometric unlock: turn it on or off in the app at any time.
Depending on where you live, you may have other privacy rights. Email us to use them; we won’t treat you differently for doing so.
Security
Connections are encrypted, passwords are hashed with a modern algorithm, and sign-in tokens are stored only in scrambled form. No system is perfectly secure, but we work to protect your information.
Age
MealKlip is for adults 18 and older. It isn’t meant for children, and if we learn that we have information from a child, we delete it.
Changes
If we change this policy, we’ll post the new version here and update the date above. If a change is significant, we’ll also tell you by email or in MealKlip.