Privacy Policy

1. Who we are

PlanMeal is operated by Adam Wudzinski - IT Solutions. This policy explains what data we handle and why. Contact: adam.wudzinski94@gmail.com.

2. Data we collect

• Account data — email address and authentication details, managed by our auth provider Clerk. We store your user id and email in our database.
• Payment data — purchases are processed by Lemon Squeezy (merchant of record). We never see your card details; we store order metadata (plan, amount, currency) to manage your access.
• Product data — the content you create in PlanMeal: your food preferences, recipes, weekly meal plans, nutrition and macro data, shopping lists, cooking notes, and any dish photos you upload to import a recipe. This is scoped to your account.
• AI input— when you use the AI features, the text and photos you provide are sent to OpenAI to generate or refine recipes and plans. We don't send your account identity to OpenAI, and per OpenAI's API terms this content is not used to train their models.

3. Where it lives

Application data is stored in a PostgreSQL database hosted by Neon. The app is hosted on Vercel, which also provides privacy-friendly usage analytics and performance metrics (Vercel Analytics and Speed Insights). Authentication runs on Clerk; payments on Lemon Squeezy; AI features are powered by OpenAI. These providers process data in the EU and/or the United States; where data leaves the EU it is transferred under the providers' standard contractual safeguards.

4. What we use it for

To provide the service, generate and refine your meal plans, manage your access and purchases, and keep the service secure (e.g. rate limiting). We use aggregated, privacy-friendly analytics to understand usage and improve performance. We don't sell your data and we don't use it for advertising.

5. Deletion

Deleting your account (Account → Danger zone) removes your login and all your data from our database immediately. Payment records are retained without your identity, as required for accounting. You can also request deletion by email: adam.wudzinski94@gmail.com.

6. Your rights

Under the EU General Data Protection Regulation (GDPR), you have the right to access, correct, export (portability) and erase your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on it. You can exercise most of these directly in the app or by emailing adam.wudzinski94@gmail.com. You also have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO).