Privacy Policy — FitMeal AI

Last updated: July 10, 2026

FitMeal AI ("we", "our", "the app") is an AI-powered meal planning app. This Privacy Policy explains what information we collect, how we use it, and your rights regarding it.

1. Information We Collect

Account information. By default, you use the app anonymously — we create an anonymous account identifier with no personal information attached. If you choose to link an email address (to back up and restore your data across devices), we store that email and a securely hashed password via our authentication provider (Firebase Authentication).

Health & fitness information you provide. Age, weight, height, gender, activity level, dietary goal, food allergies/exclusions, weight-log entries, daily water intake, and which meals you've marked as eaten. This data is used solely to generate and personalize your meal plans and track your progress.

Usage analytics. We collect anonymized product-usage events (e.g. which screens you open, whether you complete onboarding, whether you swap a meal) to understand how the app is used and to fix bugs. This is not linked to your real identity beyond your anonymous account ID.

2. How We Use Your Information

• To generate your personalized weekly meal plan and shopping list using an AI model (see "Third-Party Services" below).
• To sync and back up your data across your devices, if you link an email account.
• To understand app usage and improve the product.

We do not sell your personal information. We do not show third-party advertising in this app.

3. Third-Party Services

• Firebase (Google LLC) — authentication and cloud data storage (Firestore). Access to your data is restricted by security rules to only your own account.
• Anthropic (Claude API) — your profile data (age, weight, goals, etc.) is sent, through our own secure server-side proxy, to Anthropic's Claude API solely to generate your meal plan. Anthropic does not receive your name, email, or any direct identifier — only the nutritional profile data needed to build the plan.
• PostHog — product analytics, as described above.
• RevenueCat, Apple, and/or Google — if you purchase a subscription, payment is processed entirely by Apple/Google; we never see or store your payment card details.

4. Data Storage & Security

Your data is stored on Google Cloud infrastructure via Firebase, protected by security rules that only allow your own authenticated account to read or write your data. Data also remains stored locally on your device.

5. Legal Basis for Processing (GDPR)

We are based in the Republic of Latvia (EU) and process personal data of all our users in accordance with the EU General Data Protection Regulation (GDPR), regardless of where you are located. Our legal bases for processing are:

• Performance of a contract — processing your health/fitness inputs and account data is necessary to provide the core app functionality you request (generating and syncing your meal plan).
• Consent — for linking an email account and for optional analytics, which you can decline without losing access to the core app.
• Legitimate interest — for aggregated, anonymized product analytics used to fix bugs and improve the app.

6. International Data Transfers

Some of our service providers (Firebase/Google, PostHog, Anthropic) are based in or process data in the United States. Where personal data is transferred outside the European Economic Area, we rely on the provider's Standard Contractual Clauses (SCCs) or an applicable adequacy mechanism, as required under GDPR Chapter V.

7. Data Retention

We retain your account data for as long as your account exists. If you use the app anonymously without linking an email, your data lives only on your device until you delete the app or reset it. If you link an email account, your cloud-backed-up data is retained until you request deletion (see "Your Rights" below) or delete your account.

8. Your Rights

You can permanently delete all your locally stored data at any time via "Reset everything" in the app's Profile screen. In addition, under GDPR (and equivalent laws in your country of residence), you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your cloud-backed-up account and all associated data.
• Restriction — request that we limit processing of your data in certain circumstances.
• Portability — request your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest, including analytics.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at harlass85@gmail.com. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority — in Latvia, the Data State Inspectorate (Datu valsts inspekcija), or the equivalent authority in your own EU member state.

9. Children's Privacy

FitMeal AI is not directed at children under 16, and we do not knowingly collect information from children under 16.

10. Health Disclaimer

FitMeal AI provides general nutritional information generated by an AI model and is not a substitute for professional medical or dietary advice. Always consult a qualified healthcare provider before beginning any diet or exercise program, especially if you are pregnant, nursing, have a medical condition, or have a history of disordered eating.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

12. Contact Us

FitMeal AI is operated by Deniss Harlass, based in Riga, Latvia. Questions about this Privacy Policy? Contact us at harlass85@gmail.com.