MealPair is operated by James Brunwin trading as MealPair. James Brunwin is the data controller responsible for the personal information described in this notice. You can contact MealPair at brunwwwin@gmail.com or by post at 18 Mount Avenue, Halifax, HX2 0LF, United Kingdom.
Information MealPair collects
Depending on how you use MealPair, we collect:
Account details, including your name, verified email address, profile image, sign-in provider, account role, and active sessions.
Household and food preferences, including household size, time zone, dietary choices, allergens, and exact foods or ingredients you ask MealPair to avoid. We use these as cooking preferences and do not use them to diagnose a condition or infer your health or religious beliefs.
Product activity, including saved meals and articles, plans, shopping progress, cooking history, ratings, reviews, comments, photographs, and private recipe notes.
Recipe-generation information, including requests you submit, generated recipes, usage allowances, moderation status, and related operational records.
Membership and billing records, including your plan, subscription status, Stripe customer and subscription references, billing contact details, invoices, and limited card details such as brand and last four digits. MealPair does not receive or store your full card number.
Security and service information needed to deliver and protect requests. Passwordless sign-in throttles use non-reversible hashes rather than storing raw email addresses or network addresses in the throttle records.
If you sign in with Google, Google provides the account information you approve, such as your name, email address, and profile image. MealPair never receives your Google password. Passwordless email sign-in uses a short-lived, single-use link and does not create a MealPair password.
Why MealPair uses personal information
To provide the service and perform the contract with you: creating and securing your account, synchronising your activity, generating recipes, operating paid memberships, and providing support.
For MealPair's legitimate interests: protecting accounts, preventing abuse, maintaining the service, diagnosing faults, moderating public contributions, and understanding aggregate service performance. MealPair balances these interests against your rights and expectations.
With your consent: collecting optional first-party analytics. You can refuse or withdraw this consent at any time without losing the core service.
To meet legal obligations: keeping records required for tax, accounting, consumer protection, fraud prevention, and responding to lawful requests.
AI recipe generation
When you ask MealPair to generate a recipe, the request, relevant saved dietary, allergen, and exact ingredient-avoidance preferences, and any source recipe needed for a companion recipe are sent to OpenAI to produce the result. MealPair stores the request, result, provider and operational records so it can deliver the feature, enforce allowances, investigate failures, and moderate recipes that may join the public catalogue. Do not include confidential information or personal information about another person in a recipe request.
Who receives information
MealPair shares information only where needed to run the service, meet legal obligations, or protect users. Service providers include Google for optional Google sign-in, Resend for passwordless email delivery, Stripe for payments and subscription administration, OpenAI for AI generation, and Vercel plus database and storage providers for hosting, workflows, files, and application data. These providers process information under their own terms and data-protection commitments. MealPair may also disclose information to professional advisers, regulators, courts, law enforcement, or another party where legally required or necessary to establish, exercise, or defend legal rights.
MealPair does not sell personal information. If a provider processes information outside the United Kingdom, MealPair relies on an applicable adequacy decision or contractual and organisational safeguards intended to protect the transferred information.
Cookies and device storage
MealPair uses essential first-party cookies and device storage to keep you signed in, protect requests, remember cookie choices, and retain shopping or cooking progress you ask the app to keep on that device. These technologies are necessary for the requested features and cannot be switched off through MealPair's cookie preferences. You can clear MealPair's device data through Account settings or your browser controls.
Optional analytics
If you consent, MealPair creates first-party visitor and session identifiers and records a limited history of screens and successful or blocked product actions. Campaign source, medium, and campaign name may also be recorded when you follow a tagged promotional link. MealPair does not use third-party analytics, advertising identifiers, session replay, device fingerprinting, precise location, arbitrary referring URLs, search terms, private notes, payment details, or dietary and allergen choices for analytics.
Identifiable analytics events are retained for up to 90 days. Anonymous daily totals are retained for up to 25 months. You can decline before collection begins or withdraw at any time through Cookie preferences in the footer or Account settings. Withdrawal deletes your raw analytics events; anonymous totals that can no longer identify you remain.
How long information is kept
Account information is normally kept while your account is open. Operational and security records are kept only for as long as reasonably needed for their purpose. Billing and transaction records may be kept for the period required by tax, accounting, fraud, and consumer-protection law. Backups are deleted or overwritten through the normal backup cycle.
You can permanently delete your account from Account security. MealPair cancels an active subscription before deleting the account. Account-linked preferences, plans, shopping progress, cooking history, ratings, comments, photographs, and private content are removed subject to technical and legal retention requirements. A recipe already approved for the public catalogue may remain as MealPair editorial content without your account or public attribution.
Your rights
UK data-protection law may give you rights to access, correct, erase, restrict, or object to the use of your personal information, and to receive certain information in a portable format. Where processing relies on consent, you can withdraw it at any time. Some rights depend on the circumstances and lawful basis, and legal retention duties may limit a request.
To exercise a right, email brunwwwin@gmail.com. MealPair may need to verify your identity. You can also complain to the Information Commissioner's Office, although MealPair would appreciate the opportunity to address your concern first.
Security and changes
MealPair uses technical and organisational measures intended to protect personal information, but no online service can guarantee absolute security. This notice may be updated when the service, providers, or legal requirements change. Material changes will be brought to account holders' attention where appropriate, and the effective date above will be updated.