Privacy Policy

1. Data controller

The controller is the MyMenu / MonMenu team. Contact for any privacy question or request: max@mg.usemealplanner.com.

2. Data we process, purposes and legal bases

Website: the website is a static information site (articles, weekly meal plan pages, free cooking tools). It has no user accounts and does not store your meal preferences: the cooking tools run in your browser.

Meal preferences (iOS app): household size, tastes, diet and budget that you enter in the app to generate meal plans, recipes and grocery lists. Purpose: provide the Service. Legal basis: performance of the contract.

Allergies, intolerances and diets linked to health: this information may reveal data concerning health (GDPR art. 9). It is only processed if you choose to provide it in the app, on the basis of your explicit consent, solely to adapt generated meals. Providing it is optional and you can withdraw consent at any time by removing it or by contacting us (this does not affect processing already carried out).

AI generation (iOS app): to generate meal plans and recipes, your preferences and requests are sent to AI model providers (see section 3). Your name and email address are not sent to them for this purpose. Legal basis: performance of the contract (and your explicit consent for health-related information).

In-app purchases (iOS app): Pro subscriptions are sold through Apple's App Store. Apple processes payment data; we do not receive your card details. We receive information about your subscription status (for example via RevenueCat, our subscription management provider) to unlock Pro features. Legal basis: performance of the contract and legal obligations (accounting).

Former web app and past website purchases: until October 2026 the website offered accounts (Google sign-in), saved recipes and meal-credit packs paid through Stripe. This web app has been discontinued. Data from former web accounts is no longer used; we only keep what the law requires (billing records of past Stripe purchases), and Stripe keeps its own billing data (we never received full card numbers). You can ask us at any time to confirm the deletion of your former account data.

Early access form: if you use the early access link, your email address is collected through a form hosted by Tally, to contact you when access opens. Legal basis: consent.

Technical logs: like any website, your IP address and browser information appear in our hosting provider's technical logs. Legal basis: our legitimate interest in securing the Service.

Audience measurement: only if you accept analytics cookies, we use PostHog to measure page views and how the site is used: pages visited, interactions collected automatically (autocapture of clicks and other interactions with page elements), device and browser information, approximate location derived from IP and a pseudonymous identifier. Nothing is collected before you accept. If you refuse or later withdraw consent, PostHog stops collecting and its identifiers are removed from your browser. Legal basis: consent.

Support: when you write to us, we process your messages and email address to answer. Legal basis: legitimate interest.

3. Recipients and processors

Your data is accessed only by us and by processors acting on our instructions:

• Vercel (website hosting).

• AI providers used by the iOS app to generate meal plans and recipes (such as OpenAI and Anthropic, possibly through OpenRouter).

• PostHog (audience measurement, only with your consent) — hosted in the EU or the US, with appropriate safeguards.

• Apple (App Store, in-app payments) and RevenueCat (subscription management).

• Stripe (billing records of meal-credit packs previously sold on the website).

• Tally (early access form, only if you use it).

We do not sell your personal data.

4. Transfers outside the European Union

Several of these providers are located in, or may access data from, the United States or other countries outside the EU. Such transfers are covered by the EU-US Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses, together with additional safeguards where needed. You can request more information at max@mg.usemealplanner.com.

5. Retention

Preferences in the iOS app (including health-related ones): until you delete them, withdraw consent or stop using the app and ask for deletion.

Former web accounts: the database of the former web app has been shut down and is no longer used; only billing records that must be kept by law are retained.

Early access form: until you ask us to remove you, and at the latest until early access is closed.

Technical logs: limited period, in line with our hosting provider's standard log retention.

Analytics data: kept for a limited period, then deleted or aggregated. Your cookie choice is stored in your browser for 13 months if you accept and 6 months if you refuse, after which we ask again.

Billing records (including past Stripe payments): as required by law (10 years in France for accounting documents).

6. Cookies and similar technologies

Strictly necessary: the language cookie (NEXT_LOCALE) and the storage of your cookie choice (13 months for acceptance, 6 months for refusal). These do not require consent.

Audience measurement (PostHog, including autocapture of clicks and page interactions): only placed after you click "Accept" in the banner. If you refuse, PostHog is not loaded. If you withdraw consent later, PostHog stops collecting and its identifiers are removed. You can change your choice at any time with the "Manage cookie preferences" button below.

7. Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, to withdraw consent at any time, and to give instructions on what happens to your data after your death (French law). To exercise these rights, write to max@mg.usemealplanner.com. We may ask for proof of identity in case of reasonable doubt. We reply within one month.

You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or the authority of your EU country of residence.

8. Children

The Service is intended for people aged 15 and over. In France, a minor under 15 may only consent to processing based on consent together with a parent. If you believe a child has provided personal data, contact us so we can delete it.

9. Security

We use appropriate technical and organisational measures (encrypted connections, access control, providers with recognised security practices). No system is perfectly secure; if a breach is likely to put your rights at risk, we will notify the CNIL and, where required, you.

10. Changes

We may update this policy. The date at the top shows the latest version. We will inform you of significant changes in the app, on the website or by email.

11. Contact

Privacy questions or requests: max@mg.usemealplanner.com.