1. Data controller
The data controller is Shaping Digital Generation FZCO, a Free Zone Company registered in the United Arab Emirates (Trade License No. 63159, issued by the Dubai Integrated Economic Zones Authority, DIEZ), publisher of Mealzy. Registered office: IFZA Properties, Premises DSO-IFZA, Dubai Silicon Oasis, Dubai. Legal contact: [email protected].
2. Data we collect
- Account information: email address, first and last name, language.
- Body and fitness data: sex, year of birth, height, weight and its history, activity level, fitness goal. They are used to calculate your calorie and macro targets.
- Dietary preferences: diet, allergies, intolerances, foods you avoid, favourites.
- Content you create: recipes, photos, grocery lists, meal plans, ratings, notes.
- AI conversations: the requests you send to the AI Chef and its answers.
- Coaching data: if you join a coach, the link with that coach, the targets, programs and meals they set for you, and the notes they keep about your follow-up.
- Payment data: processed by Stripe, Apple or Google. We never store your card details.
- Early access list: the email address and the language you leave on this website.
- Technical data: the session token stored on your device to keep you signed in and, if you turn notifications on, a notification token for your device.
3. How AI processes your data
Your dietary preferences and your requests are sent to a large language model provider ([to be completed before launch: name of the provider]) to generate personalised recipes and answers. The provider processes this data only to return the requested result. We do not sell your personal data.
4. Sharing with a coach
Your data becomes visible to a coach only after you accept their invitation. The coach then sees your profile, your targets, your meal plan and your weight history. You can end the follow-up at any time from the application; the coach loses access immediately.
5. Third parties
Your data is shared with the following third parties, strictly to operate the service:
- Stripe: payments made on the web.
- Apple and Google: purchases made in the application, and RevenueCat to know the status of those purchases.
- Large language model provider: recipe generation and cooking answers.
- Supabase: database, sign-in and file storage ([to be completed before launch: hosting region]).
- Cloudflare: hosting of this website.
No grocery or delivery partner is connected at this time. This section will be updated if that changes.
6. Purposes and legal bases
We process data to provide the service (recipes, planning, grocery lists, programs, coaching), personalise AI suggestions, improve the experience and secure your account. Legal bases: performance of the contract (providing the service), your consent (optional body data, notifications, early access list) and our legitimate interest (security and improvement of the service).
7. Data retention
Your data is kept for as long as you use the service and deleted within 30 days after you ask for your account to be deleted. Anonymised, aggregated data may be kept for statistics. Payment records are kept by the payment providers under their own policies. Addresses on the early access list are deleted after the launch announcement, or earlier if you ask.
8. Your rights
You have the right to access, correct, erase and export your personal data, and to object to its processing. You can exercise these rights from your profile in the application (data export, account deletion) or by contacting us. Account deletion is irreversible.
9. UAE PDPL and GDPR
As a company based in the United Arab Emirates, Shaping Digital Generation FZCO complies with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, “PDPL”). For users in the European Union, this policy is also designed to be compatible with the General Data Protection Regulation (GDPR). Where requirements differ, the higher standard applies.
10. Cookies
This website uses no analytics or advertising cookies and stores nothing on your device while you browse it, which is why it shows no cookie banner. The application stores a session token on your device to keep you signed in. If audience measurement is added later, this policy will be updated and your consent will be asked first.
11. Contact
For any question about your data, write to [email protected].