Privacy Policy

1. Information We Collect

We collect information you provide during registration (email, name), onboarding (age, gender, weight, height, dietary preferences, religious dietary requirements, activity level, primary goal), and app usage (meal plans viewed, water intake, meal completions, meal swaps, weight log entries). We collect this information solely to provide and improve the Menero service.

2. How We Use Your Data

Your data is used to personalize meal plans, track nutritional goals, generate grocery lists, and improve our AI recommendations. We never sell your personal data to third parties. Specifically, we use your data to:

• Generate AI-powered meal plans tailored to your goals and preferences (see Section 4 for details on AI personalization)
• Calculate nutritional values for the meals you log
• Provide reminders for meals, water intake, and habit streaks
• Manage your subscription and account
• Improve our recipe recommendations through anonymized aggregate analysis

3. Data Storage & Security

All data is encrypted in transit (TLS) and at rest. We use industry-standard security measures to protect your information. Your health data is stored separately with additional encryption. We retain your data for as long as your account is active. Backend infrastructure is hosted in secure data centers with physical and digital access controls.

4. AI Personalization (Google Gemini)

Menero AI uses Google Gemini (operated by Google LLC) to generate personalized meal plans. When you generate a plan, the following information is sent to Google’s Gemini API:

• Your dietary goal (e.g. lose weight, gain muscle)
• Cuisine preferences
• Eating lifestyle (vegetarian, vegan, keto, etc.)
• Religious dietary requirements (Halal, Kosher, No Beef)
• Age, height, weight, and activity level
• Past meal preferences and dislikes

The following data is never sent to Google: your email address, full name, password, payment information, device identifiers, or location.

Google has confirmed that data sent via the Gemini API is not used to train Google’s AI models. Google’s data handling is governed by the Google Generative AI Privacy Notice.

Explicit consent is required before any data is shared. The first time you use AI plan generation, the app presents a consent screen disclosing exactly what is sent to Google and asks you to agree. Without consent, AI meal-plan generation is disabled and the rest of the app continues to work normally. You can withdraw consent at any time in Profile → Privacy → AI Personalization.

5. Other Third-Party Services

In addition to Google Gemini described above, Menero uses a limited number of third-party services to operate:

• Apple Sign in with Apple & Apple Push Notifications — for authentication and notifications
• Apple StoreKit — for in-app subscription processing (no card details are stored on our servers; Apple handles all payment processing)
• Google Sign-In — optional authentication method
• Resend — for transactional emails (verification, password reset)
• Cloudflare R2 — for recipe image storage and delivery
• Railway — for backend hosting

These services do not have access to your personally identifiable health information beyond what is required for their function. None are used for advertising purposes.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time. You can delete your account in-app via Profile → Delete Account. Your account is hidden immediately; all personal data is permanently erased within 30 days. To recover your account during this grace window, email privacy@menero.app.

If you are a resident of the European Union, the United Kingdom, or California, you have additional rights under GDPR / UK GDPR / CCPA, including the right to data portability and the right to object to processing.

7. Cookies & Tracking

The Menero mobile app does not use browser cookies. We may use device identifiers for analytics purposes, which can be reset through your device settings. This website (menero.app) uses minimal cookies for theme preference (light/dark mode) and standard hosting analytics.

8. Children's Privacy

Menero is not intended for children under 13. We do not knowingly collect personal data from children under 13. If we discover such data, we will delete it promptly. Parents who believe their child has submitted information without consent should contact us at privacy@menero.app.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. By using Menero, you consent to such transfers. We ensure adequate protections are in place through standard contractual clauses and other approved transfer mechanisms.

10. Changes to Policy

We may update this policy periodically. We will notify you of significant changes through the app or email. If we materially change how AI personalization data is used or which third-party AI services we share with, we will request your consent again. Continued use of Menero after changes are posted constitutes acceptance of the updated policy. The “Last updated” date at the top of this page reflects the most recent revision.

11. Contact

For privacy concerns, data access requests, or any questions about this policy, email privacy@menero.app. We aim to respond within 5 business days.