MealCrew is a family meal-planning service. This policy explains the information MealCrew uses to operate the service and how that information is handled.
Information you provide
MealCrew may store account information such as your display name, username, email address, profile photo, family membership and notification preferences. When you use MealCrew, you may also provide family meal plans, recipes, ingredients, pantry items, shopping-list information, meal requests, ratings, favorites, notes, uploaded food/family/profile images and feedback messages.
Account email and communications
Email addresses are used for account verification, password recovery, family invitations, requested notifications and other transactional MealCrew messages. MealCrew does not require you to opt into advertising email in order to use the service.
Family sharing
MealCrew is designed around household accounts. Information intentionally added to a family workspace can be visible to other members of that family according to their permissions. Connected families may see only the recipes or meal-plan information that MealCrew specifically makes shareable; private household/account information is not intentionally exposed through those sharing features.
Usage and diagnostic information
MealCrew records limited service-usage information used to understand adoption, activity, feature use, performance and troubleshooting. This can include page activity, account activity dates, browser/device information submitted with feedback, and privacy-conscious visitor identifiers. MealCrew does not need to read the contents of your private family data to count ordinary site activity.
Cookies and local device storage
MealCrew uses browser cookies/session data to keep you signed in, protect forms and operate the service. The installed/web-app version may also cache static app files for offline/error handling. Unsaved drafts on selected forms may be stored temporarily in your current browser/app session. Passwords, uploaded files and security tokens are excluded from that draft-recovery storage.
Photos and uploaded files
Photos you choose to upload are stored so MealCrew can display them in the features where you added them. Camera/photo access is requested through your browser or device only when you choose a feature that needs it.
Third-party processing
MealCrew may rely on service providers or software components needed to deliver features such as email delivery, image/text processing, hosting, networking or app-store distribution. MealCrew does not sell your personal information and does not currently operate an advertising network or behavioral-advertising program.
Account deletion
You can initiate permanent account deletion from My Account → Delete My Account. You can also review the public deletion instructions at Delete Account & Data, including if you no longer have the app installed. A regular family member can delete their personal account without deleting the rest of the family's shared data. A family data owner must transfer family ownership before deleting themselves when other members remain. If the account is the only member of its family, deleting the account also deletes the active family workspace and its associated shared MealCrew data.
MealCrew keeps the newest 30 managed database backups for disaster recovery. With the current once-daily backup schedule, this is approximately 30 days of database history. When a new managed database backup is created or uploaded, older managed database backups beyond that limit are automatically removed. Deleted database information can therefore remain temporarily in those recovery copies until it rotates out. These managed .db backups do not include separately stored uploaded photo/file contents.
MealCrew can also create complete disaster-recovery snapshots containing the database together with uploaded photo/file contents. The newest 7 complete snapshots are retained when this built-in complete-backup feature is used. Complete snapshots are intended to restore the service as a whole, not to resurrect an individual deleted account.
Disaster-recovery backups are not intended as an active copy of a deleted account and are not ordinarily used to restore one deleted user's account.
Security
MealCrew uses HTTPS for its public service, hashed passwords, account-verification/reset tokens, CSRF protections and family/admin permission checks. No internet service can promise absolute security, so MealCrew's security and backup practices are reviewed as the service grows.
Children and family accounts
MealCrew is designed for household meal planning, but it is not specifically directed to children as an independent online service. Family administrators are responsible for deciding who should have access to their household workspace.
Changes to this policy
This policy may be updated as MealCrew adds features, changes infrastructure or prepares for app-store distribution. The effective date above will be updated when the policy materially changes.
Contact
Privacy or account questions can be sent to mealcrewapp@gmail.com. Signed-in users can also use MealCrew's Contact & Feedback page.