Last updated 22 September 2026
This policy explains what MESLI collects, why, and who else sees it. It covers the MESLI mobile application and the backend service it talks to.
To build a plan, the App asks for household size and the ages of any children, your weekly grocery budget, the store you shop at, cuisines you like, dietary needs, allergens and foods to avoid, foods you prefer, your kitchen equipment, how much prep time you want and how you feel about leftovers. Dietary needs and allergens can reveal health-related information, so we treat them as sensitive: they are used only to generate your plan, they are stripped from our server logs, and they are never used for advertising.
If you use the Vision add-on, photos of meals or of your fridge are sent to our backend, forwarded to our analysis provider, and used to produce an estimate. Neither we nor our provider retain the image afterwards. The estimate that comes back is stored locally on your device. Please do not photograph people, documents or anything other than food.
We generate a random installation identifier and keep it in your device keychain. It ties your device to your plans so the App can load them again. It is not linked to your name or to any account. Our subscription provider also assigns its own user identifier.
If you allow tracking when iOS asks, our attribution provider may also process your device’s advertising identifier (IDFA) and vendor identifier (IDFV). If you decline, the IDFA is not available to us.
We receive from our subscription provider whether you hold an active subscription, which product it is, and its trial and renewal status. We never see your card details — payment is handled entirely by Apple.
Our backend records ordinary server logs: request time, endpoint, response status, a request identifier and error codes. Allergen and avoided-food fields are redacted from these logs. We also record marketing-attribution events such as which paywall was shown and whether a purchase started, so we can tell which campaigns bring people to MESLI.
| Purpose | Data used |
|---|---|
| Generate your weekly plan, recipes and grocery list | Household profile, budget, dietary needs, equipment |
| Generate a photograph for each dish | Dish title and description |
| Estimate nutrition or suggest recipes from a photo | The photo you submit, your profile |
| Keep your plan available between launches | Installation identifier |
| Unlock paid features and restore purchases | Subscription status, provider user identifier |
| Measure which campaigns bring people to MESLI | Attribution events, IDFA and IDFV if you allowed tracking |
| Keep the service working and diagnose faults | Server logs, error codes |
| Provider | What it receives | Why |
|---|---|---|
| OpenAI | Your planning profile; meal and fridge photos | Generates plans, recipes, dish images and photo estimates |
| Supabase | Your generated plans and profile; generated dish images | Stores plans so they survive between sessions |
| Railway | Requests to our backend | Hosts the backend service |
| Apphud | Subscription status, device identifiers | Manages subscriptions, paywalls and purchase restoration |
| AppsFlyer | Attribution events; IDFA and IDFV if you allowed tracking | Marketing attribution |
| Apple | Payment and subscription details | Processes all purchases |
These providers act on our instructions and are not permitted to use your data for their own purposes. We do not sell your personal information, and we do not share it with data brokers.
On first launch, iOS asks whether MESLI may track your activity across other companies’ apps and websites. This controls access to your advertising identifier, which we use only for marketing attribution. Declining does not limit any feature of the App. You can change your answer at any time in Settings → Privacy & Security → Tracking.
Deleting the App from your device removes everything stored locally, including your profile, plans, past weeks and saved estimates. Because MESLI has no accounts, we cannot look you up by name — to have server-side plans deleted, email mesliappsupport@gmail.com from the device in question and we will tell you how to supply your installation identifier so we can remove the matching records. Note that a subscription is separate: cancel it in your Apple Account settings.
Depending on where you live, you may have the right to access, correct, delete or port your personal data, to object to or restrict processing, and to withdraw consent. If you are in the EEA or the UK, our lawful bases are performance of a contract (delivering the features you asked for), legitimate interests (keeping the service secure and measuring marketing) and consent (tracking, camera and photo access). If you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising your rights. To exercise any right, email mesliappsupport@gmail.com.
Our providers operate in the United States and the European Union, so your data may be processed outside your country. Where required, transfers rely on appropriate safeguards such as the European Commission’s standard contractual clauses.
MESLI is not directed at children under 13, and we do not knowingly collect personal information from them. The App lets an adult enter the ages of children in the household so that portions and meals suit the family; those ages are used only to plan meals. If you believe a child has provided us with personal information, contact us and we will delete it.
Traffic between the App and our backend is encrypted in transit. Access to stored plans is limited to the installation that created them. The installation identifier is held in the device keychain. No system is perfectly secure, so we cannot guarantee absolute security.
If we change this policy we will update the “Last updated” date above and, where the change is material, give notice in the App before it takes effect.
MESLI is the controller of the personal data described in this policy. For any question about it, or to exercise a right described above, write to mesliappsupport@gmail.com and we will answer within 30 days.