Privacy Policy
Last updated: July 14, 2026
This Privacy Policy explains how Foodplan ("Foodplan", "we", "us", or "our") collects, uses, and protects your personal data when you use the Foodplan app and related services (the "Service"). We are committed to protecting your privacy and handling your data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Who we are
Foodplan is the data controller responsible for your personal data collected through the Service. If you have any questions about this policy or how we handle your data, contact us at privacy@foodplan.me.
2. What data we collect
We collect the following categories of data:
- Account data: name, email address, password (stored as a secure hash), and household membership.
- Meal planning data: weekly menus, recipes, products, portions, day notes, and shopping lists you or your household create.
- Nutrition tracking data: the meals, snacks, and calorie information you personally log against a given day. This is linked to your individual user account, even within a shared household plan.
- Household preferences: settings such as your household's chosen start day of the week and other configuration choices.
- Device and usage data: app version, device type, operating system, and basic diagnostic/crash information, used to keep the Service reliable.
- Support communications: any information you provide when you contact us for support.
We do not knowingly collect special categories of health data beyond the self-reported calorie and meal information described above, and we do not require you to disclose medical conditions to use Foodplan.
3. How we use your data
- To create and manage your account and household;
- To provide the core functionality of the Service: weekly menu planning, recipes and products, shopping lists, and personal nutrition tracking;
- To sync your data across your devices;
- To communicate with you about the Service, including service updates and support requests;
- To maintain the security, integrity, and reliability of the Service, including diagnosing technical issues;
- To comply with our legal obligations.
4. Legal basis for processing (GDPR)
- Performance of a contract: processing needed to provide the Service you signed up for (account, meal planning, shopping lists, tracking).
- Legitimate interests: keeping the Service secure, preventing abuse, and improving reliability.
- Consent: where we ask for it separately, such as optional marketing communications.
- Legal obligation: where processing is required to comply with applicable law.
5. Sharing within your household
Weekly menus, recipes, products, and shopping lists are shared with other members of your household account, since Foodplan is designed for household meal planning. Your personal nutrition tracking data (what you individually log as eaten) is private to you and is not shared with other household members through the Service.
6. Sharing with third parties
We do not sell your personal data. We only share data with third parties in the following limited circumstances:
- Service providers who host our infrastructure, send emails, or provide analytics/crash reporting on our behalf, under contractual confidentiality and data protection obligations;
- Legal reasons, if required to comply with a legal obligation, protect our rights, or respond to a valid legal request;
- Business transfers, if Foodplan is involved in a merger, acquisition, or asset sale, in which case we will notify you before your data becomes subject to a different privacy policy.
7. International data transfers
If your data is transferred outside the European Economic Area, we ensure an adequate level of protection through appropriate safeguards, such as the European Commission's Standard Contractual Clauses, or transfers to providers certified under an approved adequacy framework.
8. Data retention
We retain your personal data for as long as your account is active, and for a limited period afterwards where needed to comply with legal obligations, resolve disputes, or enforce our agreements. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where retention is required by law.
9. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request deletion of your data ("right to be forgotten");
- Request restriction of processing in certain circumstances;
- Request a portable copy of your data;
- Object to processing based on legitimate interests;
- Withdraw consent at any time, where processing is based on consent;
- Lodge a complaint with your local data protection authority.
You can exercise most of these rights directly within the app (for example, editing your profile or deleting your account), or by contacting us at privacy@foodplan.me.
10. Data security
We use industry-standard technical and organizational measures — including encryption in transit, access controls, and secure password hashing — to protect your data against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Children's privacy
Foodplan is not directed at children under 16, and we do not knowingly collect personal data from children under that age. If you believe a child has provided us with personal data, please contact us so we can delete it.
12. Cookies and similar technologies
Our website and app may use essential cookies or local storage to keep you logged in and remember your preferences. We do not use third-party advertising cookies.
13. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.
14. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at privacy@foodplan.me.