Privacy Policy
What we collect, why we use it, and how to contact us about your information.
Effective date: October 18, 2026
Who operates the service
Meal Management at mealmanagement.online is operated by Abrar Labib. For privacy questions or requests, contact support.mealmanagement@gmail.com.
Information we collect
When you sign in with Google, we receive your name, email address, and Google account identifier. We store these to identify your account. Google handles your password; Meal Management does not receive it.
We store household names, memberships, roles, linked member profiles, meal entries, deposits, grocery expenses, and archived monthly records that users enter. Member profiles can include people who have not created a Google account.
We also process login sessions, temporary sign-in verification records, invite-code records, and security rate limits. Our hosting provider may process IP addresses, request information, and diagnostic logs to deliver and secure the service. IP addresses used by the app for sign-in rate limits are hashed.
How we use information
We use information to sign you in, control household access, calculate meal rates and balances, synchronize records, maintain archives, prevent abuse, and investigate support or technical issues.
Our Google sign-in requests only basic identity permissions: openid, email, and profile. It does not request access to Gmail messages, Google Drive files, contacts, or calendars. We do not sell Google account information or household records, use them for advertising, or use them to train AI models.
Who can see household information
Accounts with access to your household can view its shared records. Spectator access is read-only; it does not make each member's financial information private from other household accounts. Household administrators can manage operations, and the Main Admin can manage roles, profile links, invite codes, and account access.
Households are separated through application access controls. Service operation and support may require the operator to access records. The restricted platform dashboard lets the operator review accounts and households, record access bans and administrative actions, and generate encrypted database backups. Household administrators do not receive access to that dashboard. Do not enter information that you are not authorized to share with your household.
Service providers
Google provides authentication. Cloudflare hosts the application, database, and operational services. These providers process information as needed to provide their services, and processing may occur outside your country. Their own privacy notices also apply: Google Privacy Policy and Cloudflare Privacy Policy.
Information may also be disclosed when required by law or when necessary to investigate misuse or protect the service and its users.
Cookies and security
The app uses essential cookies for secure sign-in and login sessions. The normal login session expires after seven days, and sign-out invalidates that session. The app does not use advertising cookies.
We use HTTPS, protected session cookies, role checks, and household access controls. These measures reduce risk, but no online service can guarantee absolute security. Keep your Google account and household invite codes secure.
Retention, corrections, and deletion
Household records and monthly archives are retained to provide ongoing accounting history. There is currently no automatic deletion schedule for account or household records. Session expiry prevents access even if an expired technical record remains stored.
Contact your household administrator to correct shared meal and financial entries. For an account-data request, access request, or deletion request, email the operator from the email address associated with your account. We may need to verify your identity and clarify the records involved. Removing household access or signing out does not itself delete your account or shared financial history.
Deletion requests are reviewed alongside the interests of other household members and any applicable obligations. Shared records may need to be retained or have identifying details removed. Backup copies may remain until those copies are replaced or deleted; a backup is not the live application database.
You can also remove the app's access through your Google Account settings. This does not by itself delete previously stored household records.
Changes and contact
We may update this policy as the service changes. The effective date above identifies this version. For questions or requests, email support.mealmanagement@gmail.com.