Privacy Policy

1. Introduction

MedMenu ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our meal planning service.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (as provided by Google OAuth)
• Profile picture (if provided by Google OAuth)

Condition Selections and Dietary Preferences

To provide personalized meal recommendations, we collect:

• The conditions you pick for recipes to be checked against (e.g., diabetes, hypertension). We treat these as health data, collect them only with your consent, and handle them as described in our Consumer Health Data Privacy Policy.
• Dietary restrictions and food allergies
• Cuisine preferences
• Food exclusions

Usage Information

We automatically collect:

• Recipes viewed and saved
• Meal plans generated
• Feature interactions
• Device and browser information
• IP address and approximate location

3. How We Use Your Information

We use the information we collect to:

• Provide personalized meal recommendations based on the conditions and preferences you pick
• Improve and optimize our service
• Process payments and manage subscriptions
• Send service-related communications
• Analyze usage patterns to enhance user experience
• Prevent fraud and ensure security

Communications

By creating an account, you acknowledge and agree that MedMenu may contact you via email for the following purposes:

• Feedback and research: Requesting your input on the Service, including surveys, user interviews, and product feedback
• Product updates: Informing you of new features, improvements, or changes to the Service
• Promotional communications: Notifying you of offers, discounts, or subscription opportunities
• Educational content: Sharing information about how MedMenu may help you discover recipes and understand nutritional content

MedMenu does not provide medical advice through any communication channel. Any health-related information included in communications is for informational purposes only and does not constitute a recommendation, diagnosis, or treatment plan. You remain solely responsible for all dietary and health decisions and should consult a qualified healthcare professional before acting on any information received from MedMenu.

Marketing, promotional and educational emails are the same for every recipient. We never choose who receives them, or what they say, based on the conditions you pick.

If you download a free guide or meal-plan sample, MedMenu receives your email address and uses it to send you the file and, as stated on the download form, to send you MedMenu recipe emails, and every one of these emails includes an unsubscribe link.

You may opt out of promotional and educational communications at any time by using the unsubscribe link in any email or by contacting us at medmenu.app@gmail.com. Service-related communications (such as account notifications, security alerts, and subscription confirmations) are not subject to opt-out and will continue for the duration of your account.

4. Health Information

5. Information Sharing

We may share your information with:

• Service Providers: Third-party vendors who help us operate our service, listed in section 10 (e.g., payment processors, hosting providers)
• Legal Requirements: When required by law, subpoena, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

6. Data Security

We implement reasonable security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS)
• Secure storage of credentials
• Regular security assessments
• Limited access to personal data

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. You can delete your account and its data at any time from your Account page, or by contacting us.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to or restrict processing of your information
• Data portability
• Withdraw consent

To exercise these rights, please contact us at medmenu.app@gmail.com. We respond within 45 days.

9. Cookies and Tracking Technologies

MedMenu uses cookies and similar technologies solely for functional and performance purposes. Specifically:

Strictly Necessary Cookies

These cookies are essential to the operation of the Service. They enable core functionality including user authentication, session management, security protections (such as CSRF tokens), and preference storage. The Service cannot function properly without these cookies. These cookies do not collect personally identifiable information for marketing or advertising purposes.

Performance and Analytics Cookies

We use analytics tools (Google Analytics and PostHog) to understand how people use the Service and to improve its performance and features. Google Analytics receives page visits and is not linked to your account. PostHog receives usage events (such as pages viewed, features used, and recipes opened) linked to a random account number, plus your plan type. Neither receives your email address or the conditions you pick.

No Marketing or Advertising Cookies

MedMenu does not use cookies for marketing, advertising, behavioral targeting, or retargeting purposes. We do not deploy third-party advertising cookies or tracking pixels.

Your Selections and Personal Information

Your condition selections, cuisine preferences, dietary exclusions, email address, and any other personally identifiable information you provide are never sold, shared with, or disclosed to third-party advertisers, data brokers, or marketing services. This information is used exclusively to provide and improve the Service as described in this Privacy Policy.

You may control or disable cookies through your browser settings. However, disabling strictly necessary cookies may impair or prevent access to certain features of the Service.

10. Third-Party Services

Our service integrates with third-party services including:

• Google OAuth: For authentication
• Stripe: For payment processing
• Replit: For hosting the application
• Neon: For database storage
• Resend: For sending email
• Google Gemini API: For analyzing recipes, ingredients and photos you submit
• PostHog and Google Analytics: For product analytics, as described in section 9

These services have their own privacy policies, and we encourage you to review them.

11. Children's Privacy

MedMenu is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make a material change, we will update the "Last updated" date and ask you to review and accept the updated policy the next time you sign in.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

MedMenu
Email: medmenu.app@gmail.com