Your Privacy Choices
Effective: July 1, 2026
Applies to: MealCoach.AI mobile app and website, operated by Morf Engineering Inc. (doing business as MealCoach.ai) ("MealCoach," "we," "us").
Prepared without outside legal review
This page is a good-faith, plain-language description of our actual data practices. It has not yet been reviewed by outside privacy counsel. Items still marked TODO below need confirmation before this page should be treated as final legal advice.
This page explains the privacy choices available to you, including the specific rights of California residents under the California Consumer Privacy Act, as amended by the CPRA (California Privacy Rights Act). It supplements our Privacy Policy.
The short version
- We do not sell your personal information for money.
- We do not share your personal information for cross-context behavioral advertising. We run no ad networks, no advertising IDs (IDFA), and no cross-app tracking.
- The only data uses beyond running the app are optional and off by default — you turn them on (and off) yourself in Settings → Privacy & Data.
Because we don't sell or share for advertising, there is no "sale" to opt out of. The controls below let you manage every optional use of your data and exercise your legal rights.
Categories of personal information we collect
| CCPA category | What it is for MealCoach | Purpose |
|---|---|---|
| Identifiers | Email, name, account/user ID | Account, login, personalization |
| Health & fitness information (sensitive) | Meal logs, nutrition, Kibo scores, body metrics, Apple Health data you choose to connect (read-only) | Core coaching features |
| User content | Meal photos, Coach chat messages | Core coaching features |
| Commercial information | Subscription status & purchase history | Billing, entitlements |
| Geolocation (coarse) | Approximate location, read only when you use "nearby stores" | Show nearby grocery stores |
| Internet/usage activity | In-app product-analytics events | Improve the app |
We do not collect: precise location, financial-account numbers (billing is handled by Apple/Stripe), contacts, browsing history, or advertising identifiers.
Who we disclose data to (service providers)
We share data only with vendors that process it on our behalf under contract, never for their own marketing:
- AWS — hosting, database, photo storage, and our in-account AI (Amazon Bedrock; your data is not used to train models)
- Amplitude — product analytics (event names + user ID only; not your health data or chat content)
- RevenueCat / Apple / Stripe — subscription and payment processing
- Apple / Google — Sign-in (only if you use them)
- OpenStreetMap / Overpass — nearby-store lookups derived from coarse location
Your choices and rights
Everyone can, in the app:
- Manage optional data uses — Settings → Privacy & Data (Analytics, Location, Data Sharing, Marketing) — all default OFF.
- Export your data — Settings → Export My Data (fulfilled within 3–5 business days).
- Delete your account and data — Settings → Delete Account (permanent; completed within our 30-day deletion window).
California residents additionally have the right to:
- Know / access the personal information we've collected about you.
- Delete your personal information.
- Correct inaccurate personal information.
- Opt out of sale/sharing — not applicable, because we do neither; the optional toggles above already put you in control.
- Limit use of sensitive personal information — we use health data only to provide the service you asked for, which is a permitted use.
- Non-discrimination — we will not deny service or charge you differently for exercising these rights.
How to exercise your rights
Use the in-app controls above, or email support@mealcoach.ai (subject: "Privacy Request"). We will verify your request against your account and respond within the timeframe the law requires (generally 45 days for California). You may use an authorized agent; we may ask for proof of authorization. If we decline a request, you may appeal by replying to our response.
Other state privacy laws
Residents of other states with comprehensive privacy laws (for example Colorado, Connecticut, Virginia, and others) generally have similar rights to access, delete, correct, and opt out of the sale/sharing of personal information. The same tools and email address above can be used to exercise those rights.
Questions
Contact us at support@mealcoach.ai with any questions about this page or our privacy practices. See also our full Privacy Policy and Consumer Health Data Privacy Notice.
TODO — to confirm before this page is treated as final
- Registered business address for Morf Engineering Inc.
- Confirmation from counsel that no current or planned vendor relationship constitutes a "sale" or "share" under CPRA (today: none)
- Final rights list and response timeframes, and whether other states require additional disclosures beyond what's summarized above
- "Notice at collection" wording at the point personal information is first gathered (e.g., signup)