Mealheim Privacy Policy

1. Who We Are

Mealheim is a meal library and dinner planner for iPhone, Android, and the web (app.mealheim.norseventures.co), operated by Norse Ventures LLC ("we", "our", "us"), based in Charleston, SC USA. This notice explains how we collect, use, store, and share your information when you use the Mealheim apps or the web app (together, the "App").

2. What We Collect & Why

Category	What	Why we need it
Account	Your email address Your name, if you choose to set one Sign-in sessions	Sign you in and keep your meals tied to your account
Meal & Recipe Data	Meals and recipes you create or import (title, description, ingredients, instructions, times, source link) Tags and meal photos Meal plans Grocery list items and pantry staples Suggestion preferences Space names	Core meal library and planning features, and keeping your data available on your devices
Shared Spaces	Which spaces you own or have joined Invite links and codes for spaces you share	Let you share a space with other people
Recipe Import	Web addresses you provide for import	Our server fetches the page at that address and extracts the recipe
Reminders (iOS, Mealheim Pro)	If you use Send to Reminders: the titles and check-offs of the reminders in the list you choose	Add your grocery items to that list and keep check-offs the same in both. This is read on your device; nothing from Reminders is sent to our server.
AI Meal Ideas (iOS, Mealheim Pro)	Meal information used to generate ideas	Generate meal ideas with Apple Intelligence. Processing happens on your device or, on newer iOS versions, through Apple's Private Cloud Compute. We do not send your recipes to any other AI provider.
Anonymous Usage Statistics (iPhone and Android apps)	Which features were used, not linked to your account App and OS version, and a random identifier created on your device	See whether people come back and which features they use (see "Service Providers")
Purchases	Your account's user ID and purchase records (handled by RevenueCat and by Apple, Google, or Stripe, depending on where you buy) On the web, your sign-in email address, passed to the checkout	Verify Mealheim Pro purchases and unlock Pro features
Installs from our App Store ads (iOS only)	If you installed Mealheim after tapping one of our App Store ads: the campaign, ad group, and keyword of that ad, which RevenueCat gets from Apple and keeps with your account's user ID	See which ads lead to a Mealheim Pro purchase
Support	Emails you send to support@norseventures.co	Respond to requests, including data-deletion

We never collect payment-card numbers; Apple, Google, or Stripe handles payment, depending on where you buy. Mealheim has no ads, no tracking, and no crash-reporting SDK on iPhone, on Android, or on the web. Its only analytics are the anonymous usage statistics described below, which the web app does not send, and, on iPhone, the ad information above.

3. Accounts and Sign-In

Mealheim requires an account. You sign in with your email address, using either a 6-digit code we email to you or a password.

Sign-in is handled by Clerk (clerk.com), which stores your email address and your sign-in sessions.

4. Shared Spaces

Your meals, tags, and plans live in a "space". You can share a space with other people through an invite link or code.

Members of a space can see and change everything in it.
Members of a space can see each other's name, if set, or email address.
The owner of a space can remove members and turn the invite off.
Members can leave a space at any time.

Only share an invite link or code with people you want to have access to the space.

5. Mealheim in ChatGPT

If you connect Mealheim to ChatGPT, you sign in with your Mealheim account, and ChatGPT can then, when you ask it to:

Save a recipe to your meal library, with its tags and a photo of the dish (an image from your chat or a link you give it).
Find, open, and favorite meals in your library.
Add meals to your plan and read your plan back, including the meals' ingredients for a shopping list.

ChatGPT works in your default space: the space you joined most recently, otherwise your own. What it saves syncs to your devices like any other change. It cannot delete meals or plans.

What ChatGPT receives from Mealheim (recipes, meal titles, tags, and plans) becomes part of your conversation and is handled by OpenAI under its own privacy policy. We receive only what ChatGPT sends to save or look up; we do not receive your other conversations. You can disconnect Mealheim in ChatGPT's settings at any time.

6. Service Providers

Mealheim uses the following service providers:

Cloudflare – Hosts our server and stores your Mealheim data (Workers, D1 database, and R2 object storage for meal photos).
Clerk – Handles sign-in. Stores your email address and sign-in sessions.
PostHog – Receives anonymous usage statistics (see below). Discards IP addresses for Mealheim and builds no profile of you.
RevenueCat – Tracks Mealheim Pro purchases on iPhone, Android, and the web. Receives your account's user ID and purchase records; no payment-card information. On the web, RevenueCat also runs the checkout: it receives your sign-in email address and sends your receipt and subscription emails to it. On iPhone only, when the App first opens, it passes a short-lived token from Apple to RevenueCat; if you installed the App after tapping one of our App Store ads, RevenueCat uses it to ask Apple which campaign, ad group, and keyword that ad belonged to.
Apple (iOS only) – Processes in-app purchases, and provides Apple Intelligence for AI meal ideas, on your device or through Apple's Private Cloud Compute.
Google (Android only) – Processes in-app purchases through Google Play.
Stripe (web only) – Processes the payment for Mealheim Pro bought on the web. Receives the payment details you enter at checkout, your sign-in email address, and your account's user ID.

Recipe import is run by our own server: the web address you provide is sent to it, and it fetches that page to extract the recipe. If you save the imported meal, the source link is saved with it.

The App shows no ads. We advertise Mealheim in App Store search results; the App does not ask for permission to track you and does not read your advertising identifier.

Anonymous usage statistics. The iPhone and Android apps send a few anonymous events to PostHog so we can see whether people come back and which features they use: the app was opened, you signed in, onboarding was finished, a meal was added (and whether it was typed, imported, or an AI idea), a meal was added to the plan (and from which screen), the Mealheim Pro offer was shown and how a purchase ended, and the app asked the App Store or Google Play to show its rating dialog. Each event carries the app and operating system version, whether the app came from the App Store or Google Play or a test build, and a random identifier created on your device. The events never include your account, email, user ID, meal titles, recipes, web addresses, dates, or any text you enter, and they are not linked to your account. The data is not used for advertising or shared with data brokers, and is kept for up to one year. Deleting the App removes the random identifier. The web app sends no usage statistics.

7. Legal Grounds for Processing

Depending on your region, we rely on one or more of the following bases:

Contractual necessity – to provide the App and its features, including your account and shared spaces.
Your consent – e.g., recipe imports and AI meal ideas you choose to use.
Legitimate interests – service reliability, security, fraud prevention, product improvement.
Legal obligations – tax, accounting, or regulatory requirements.

8. How We Share Information

We do not sell or rent your personal information. We share it only:

With the service providers listed above, so they can provide their part of the service.
With members of spaces you share or join, as described in "Shared Spaces".
With OpenAI, if you connect Mealheim to ChatGPT: the recipes, meals, and plans ChatGPT reads or saves for you, as described in "Mealheim in ChatGPT".
For legal reasons – if required by law or to protect rights.
With your direction – when you export or share content.

9. Where Your Data Is Stored

Your Mealheim data is stored on our server, hosted on Cloudflare, and on your device.
Meal photos are stored in Cloudflare R2 object storage and cached on your device.
Your email address and sign-in sessions are stored by Clerk.
Our service providers may store and process data in countries other than the one you live in, including the United States, where we are based.

If you used the earlier iCloud version: earlier versions of Mealheim stored your meals in your own iCloud account through Apple CloudKit. Those meals stay on your device and move into your Mealheim account when you tap "Migrate My Spaces" after signing in. We do not delete the data in your iCloud; it lives in your own iCloud account, and Apple's privacy practices apply to it.

10. The Android App and the Web App

This policy applies to Mealheim on Android and on the web as well as on iPhone. The Android app and the web app use the same account, server, and shared spaces. Neither includes AI meal ideas.

Android. Mealheim Pro is sold through Google Play, and RevenueCat receives your account's user ID and purchase records, as on iPhone. The App Store ad information described above is collected on iPhone only.

Web. Mealheim Pro is sold through RevenueCat's checkout, and Stripe processes the payment. The checkout is filled in with your sign-in email address. Clerk keeps you signed in with cookies. The web app holds your meals in memory while the page is open instead of storing them in your browser; your browser caches the meal photos it has shown and remembers which space you had open and how your grocery list is laid out.

11. Your Choices & Rights

Region	Your rights & how to exercise them
European Economic Area, UK, Switzerland	Access, correct, delete, restrict, object to, or export your personal data; withdraw consent at any time; lodge a complaint with your local authority. Email support@norseventures.co.
California (CCPA/CPRA)	Right to know/confirm what we collect and how we use it. Right to delete personal information (subject to legal exceptions). Right to correct inaccurate data. Right to opt out of "sale" or "sharing" of personal information (we do not sell or share for cross-context advertising). Right to limit use/disclosure of sensitive personal information (we only use it to provide the App). To exercise, email support@norseventures.co or use in-app controls. You may designate an authorised agent to act on your behalf. We will not discriminate against you for exercising any rights.

Region

Your rights & how to exercise them

European Economic Area, UK, Switzerland

Access, correct, delete, restrict, object to, or export your personal data; withdraw consent at any time; lodge a complaint with your local authority. Email support@norseventures.co.

California (CCPA/CPRA)

Right to know/confirm what we collect and how we use it.
Right to delete personal information (subject to legal exceptions).
Right to correct inaccurate data.
Right to opt out of "sale" or "sharing" of personal information (we do not sell or share for cross-context advertising).
Right to limit use/disclosure of sensitive personal information (we only use it to provide the App).

To exercise, email support@norseventures.co or use in-app controls. You may designate an authorised agent to act on your behalf. We will not discriminate against you for exercising any rights.

12. Account Deletion & Data Retention

We keep your Mealheim data until you delete it or delete your account.

You can delete your account in the App under Settings > Account. Deleting your account:

Permanently deletes the spaces you own, with all meals, plans, tags, and photos in them. Members of those spaces lose access too.
Removes you from spaces other people shared with you. Those spaces are not deleted.
Deletes your sign-in.

The data is deleted immediately from our live database and storage. Deleting your account does not cancel a Mealheim Pro subscription. Cancel it where you bought it: in your Apple Account subscription settings, in your Google Play subscriptions, or, for a subscription bought on the web, with Manage subscription under Settings > Mealheim Pro in the web app, before you delete your account.

If you no longer have the App, you can ask us by email to delete your account. We complete emailed deletion requests within 30 days, unless longer retention is legally required. See the account deletion instructions.

13. Children

Mealheim is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

14. Changes to This Policy

We may update this notice from time to time. Material changes will be announced in-app or by email. Continued use of Mealheim after the effective date means you accept the revised policy.

15. Contact Us

Norse Ventures LLC
Charleston, South Carolina, USA
Email: support@norseventures.co

Mealheim – Privacy Policy