1. What Are Cookies?
Cookies are small text files placed on your device by a website. They are used widely to make websites work, remember your preferences, and provide information to site owners.
Mobile apps do not use browser cookies. Instead, they may store data locally using technologies like secure storage and shared preferences — these serve the same purpose of remembering information between sessions but are only accessible by the app itself.
2. Our Website (mealroots.app)
Our marketing website at mealroots.app is a static site hosted on Vercel. It does not set any first-party cookies, use analytics tracking scripts, or embed advertising pixels.
Vercel (our hosting provider) may log standard server-side request data (IP address, browser type, requested URL) for security and performance purposes. This is not cookie-based tracking. See Vercel's Privacy Policy for details.
Google Fonts are loaded from Google's CDN to render the Inter typeface. Google may log the request (IP address, browser) as part of their CDN operation. No personal data is shared beyond what is inherent in a standard HTTP request.
3. The MealRoots Mobile App
The MealRoots iOS and Android app stores the following data locally on your device:
| What is stored | Type | Purpose | Expires |
|---|---|---|---|
| Access token | EssentialSecure encrypted storage | Keeps you logged in between sessions | 15 minutes (auto-refreshed) |
| Refresh token | EssentialSecure encrypted storage | Silently refreshes your access token so you don't have to log in repeatedly | 30 days, or on logout |
| User ID | EssentialSecure encrypted storage | Links your session to your account | Until logout or app uninstall |
| Onboarding status | FunctionalShared preferences | Remembers whether you've completed onboarding so we don't show it again | Until app uninstall |
| Paywall shown flag | FunctionalShared preferences | Ensures we don't repeatedly show the premium upgrade screen | Until app uninstall |
| Push notification token (FCM) | FunctionalDevice & server | Enables meal reminder notifications at the times you choose. Stored on our server linked to your account. Removed on logout. | Until logout or notification permission revoked |
We do not store any advertising identifiers (IDFA/GAID), analytics tracking IDs, or fingerprinting data on your device.
4. Third-Party SDKs in the App
The following third-party SDKs are included in the MealRoots app and may store data or access device identifiers as part of their operation:
| SDK | Purpose | Data accessed |
|---|---|---|
| Firebase Cloud Messaging (Google) | Push notification delivery | Device push token. Firebase Privacy Policy |
| RevenueCat | Subscription & in-app purchase management | Anonymous user ID, purchase history. RevenueCat Privacy Policy |
Neither SDK is used for advertising or cross-app tracking.
5. No Advertising or Analytics Cookies
MealRoots does not use:
- Google Analytics, Mixpanel, Amplitude, or any behavioural analytics service
- Facebook Pixel, Google Ads remarketing tags, or any advertising tracking
- Session recording tools (e.g. Hotjar, FullStory)
- Any form of cross-site or cross-app tracking
If we introduce any analytics or tracking in the future, we will update this policy, notify you, and — where required by law — ask for your consent.
6. How to Clear App Data
You can remove all locally stored app data at any time:
- iOS: Settings → General → iPhone Storage → MealRoots → Delete App
- Android: Settings → Apps → MealRoots → Storage → Clear Data
Note that clearing app data will log you out. Your account and meal plans remain on our servers and will be available when you log back in.
7. Your Rights
Depending on your location, you may have rights under GDPR, UK GDPR, CCPA, or other privacy laws. See our Privacy Policy for a full description of your rights and how to exercise them.
For questions specific to this Cookie & Tracking Policy, contact us at hello@mealroots.app.
8. Changes to This Policy
We may update this policy as the app evolves — for example, if we add analytics tooling or new SDKs. We will update the "Last updated" date and notify you if the changes are material.
9. Contact
Questions about cookies or tracking?
We're transparent about everything we store. Get in touch and we'll respond within 2 business days.
hello@mealroots.app