1Who we are
iPlan Meal is a meal planning service available at iplanmeal.com, as a web app and as
apps for iPhone and Android. The controller responsible for your personal data is
Internet Market Solutions EOOD (“we”, “us”), at:
92 Kniaz Boris I Str.
Stara Zagora 6000
Bulgaria
For anything about your data, write to support@iplanmeal.com.
2What we collect
Your account
Your email address, your name and, if you sign up with an email, your password, which we store only as a secure hash. If you
sign in with Google or Apple, we receive your name, email address and profile picture from them, and an identifier for
your Google or Apple account. For Sign in with Apple we also keep a token that lets us revoke the app's access when you
delete your account.
Your profile and health-related data
To plan meals that fit you, you can tell us your goal (lose weight, maintain or build muscle), sex, age, height, weight,
body fat, how active you are and when you train, your dietary preferences (such as vegetarian or vegan) and your allergies
and foods to avoid. Some of this is data about your health. It is optional: you choose what to enter, and you can change or
remove it in the app at any time.
What you do in the app
- Your meal plans, the recipes you save or write, and your shopping lists.
- Your thumbs up and thumbs down on recipes.
- How many recipes and meal plans you used each week, to apply the limits of your plan.
- Your language, theme and notification settings.
Your taste summary (Premium)
On the Premium plan, once a night we summarize your recipe ratings into what you like and dislike for each meal
(breakfast, snacks, lunch and dinner). This summary is used to choose and write recipes you will enjoy. You don't see it in
the app, but you can ask us for a copy, as for any of your data.
Subscriptions
If you subscribe to a paid plan, Stripe handles the payment. We receive and keep your plan, its status, when it renews or
ends, and a Stripe customer reference. We never see or store your full card details.
Technical data
Like any website, our servers receive your IP address and basic request details. We use them to deliver the service, to
keep it secure and to limit abuse, such as repeated sign-in attempts.
3Why we use it
Purposes and legal bases
| Purpose | Legal basis (GDPR) |
| Creating your account, signing you in and providing the app | Performance of our contract with you |
| Planning meals around your goal, diet and allergies | Your explicit consent for health-related data, which you give by entering it; you can withdraw it by removing the data |
| Personalizing plans from your ratings and taste summary | Performance of our contract and our legitimate interest in recommending meals you enjoy |
| Taking payments and managing subscriptions | Performance of our contract; legal obligations for accounting and tax |
| Sending emails needed for your account, such as confirming your address | Performance of our contract |
| Keeping the service secure and preventing abuse | Our legitimate interest in a safe, reliable service |
We don't use your data for advertising, we don't sell it, and we don't make decisions about you that have legal or similarly significant effects based only on automated processing.
4How AI is used
iPlan Meal uses AI language models, reached through the provider OpenRouter, to write recipes and week plans, to translate
recipes and, on Premium, to summarize your taste.
-
Writing recipes and plans: the request contains what the recipe has to fit: your goal, sex, age,
activity level, dietary preferences, allergies, the nutrition targets of the meal, the products you may eat, and, unless
you choose “Feeling adventurous”, your likes and dislikes for that meal.
-
Taste summaries: the request contains only the recipes you rated (their title, cuisine, meal, tags and
main ingredients) and whether you liked them. These requests are deleted from OpenRouter once the summaries are stored.
- Translations, images and search: these use the recipe's text only, never data about you.
Your name, email address and account details are never included. Requests are identified only by an internal number.
5Who we share it with
We share personal data only with service providers that process it for us, under data processing agreements, and only as much as they need:
- Hetzner (Germany): hosting and storage of the service and recipe images.
- OpenRouter and the AI model providers it routes to: recipe, plan and taste generation, as described above.
- Stripe: payments and subscriptions.
- Brevo: sending account emails.
- Google and Apple: signing in with your Google or Apple account, if you choose to.
Shared shopping lists: if you share a shopping list, anyone with the link can see that list. Nothing else
from your account is shown.
We may also disclose data when the law requires it, or to protect our rights or the safety of others. Recipes written by
AI for you go into our shared recipe library without any link to you, so other users can be given them too.
6Transfers outside the EU
Some providers, such as OpenRouter, Stripe, Google and Apple, may process data outside the European Economic Area,
including in the United States. When they do, we rely on an adequacy decision of the European Commission, such as the EU-US
Data Privacy Framework, or on the Standard Contractual Clauses approved by the Commission.
7How long we keep it
- Your account and everything in it: until you delete your account.
- Accounts whose email address is never confirmed: deleted with everything in them after 7 days.
- Signed-in sessions: up to one year, or until you sign out.
- Records of AI generation requests: 7 days.
- Weekly usage counts: 60 days.
- Email confirmation links: until they expire.
- Payment records: as long as accounting and tax law require; Stripe keeps its own records under its privacy policy.
When you delete your account, we delete your profile, meal plans, your own recipes, saved recipes, shopping lists, ratings,
taste summary and sessions, and revoke Sign in with Apple. Recipes that AI wrote for you stay in the shared library without
any link to you.
8Your rights
Under the GDPR and similar laws you have the right to:
- Access your data and get a copy of it
- Correct data that is wrong or incomplete
- Have your data deleted
- Restrict or object to how we use it, including the taste summary
- Receive your data in a portable format
- Withdraw your consent at any time, without affecting what was done before
You can change your profile, diet and allergies in the app, and delete your account under Profile. For anything else, write to
support@iplanmeal.com; we answer within one month. You also have the right to complain to a data protection authority,
in particular in the EU country where you live or work. In Bulgaria, where we are based, this is the Commission for Personal
Data Protection (cpdp.bg).
9Cookies and device storage
We don't use advertising or analytics cookies, and nothing tracks you across other websites. The web app keeps your
sign-in and language in your browser's local storage; the mobile apps keep your sign-in in the secure storage of your
device. Signing out removes the sign-in.
Our website loads its font from Google Fonts, so your browser connects to Google's servers and Google receives your IP
address.
10Security
All connections are encrypted with HTTPS. Passwords are stored only as secure hashes, sign-in tokens are short-lived and
renewed automatically, and access to the systems that hold your data is limited to the people who need it. No system is
perfectly secure, but we work to protect your data and will tell you, as the law requires, if a breach puts it at risk.
11Children
iPlan Meal is not meant for children under 16, and we don't knowingly collect their data. If you believe a child has given
us personal data, contact us and we will delete it.
12Changes to this policy
We update this policy when the service or the law changes. The date at the top shows the latest version. If a change
matters for how we use your data, we will tell you in the app or by email before it takes effect.
13Contact us
Questions about this policy or your data? Write to support@iplanmeal.com, or by post to
Internet Market Solutions EOOD at:
92 Kniaz Boris I Str.
Stara Zagora 6000
Bulgaria