Your information at Mealwood

Mealwood is a personal portfolio project maintained by its creator. In this policy, “Mealwood,” “we,” and “us” refer to the project and its creator.

• Account information: your name and email address. Supabase Auth handles your password and authentication records; Mealwood does not store your plain-text password.
• Food and preference information: pantry item names, categories, quantities, best-before dates, staple items, cuisines, meals per day, an optional daily calorie target, dietary preferences, restrictions, and allergy selections you choose to provide.
• Planning information: saved or generated recipes, recipe ingredients and steps, meal plans, meal status, and locked meal choices.
• AI inputs: meal-generation context and assistant messages as described below.
• Technical and security information: session cookies, IP address, request headers, browser/device information available in hosting logs, and rate-limit records that can include an IP address and normalized email address.

Assistant conversation content is held in the current browser page and is not saved to Mealwood’s database. It clears when the page is reloaded or left. Grocery checkmarks, dismissed grocery suggestions, and manually added one-time grocery extras also remain in page memory and reset on reload. Staple items, pantry items, recipes, and meal plans are persisted.

We use information to:

• create and secure your account;
• show your pantry and highlight food to use soon;
• personalize recipes, plans, and grocery suggestions;
• apply your saved dietary restrictions to supported recommendation flows;
• answer food-related assistant requests and generate recipes;
• send transactional account emails such as confirmation and password-reset messages;
• prevent abuse, enforce request limits, troubleshoot failures, and maintain the service.

Mealwood does not currently sell personal information, serve targeted advertising, send marketing email, or process payments.

Mealwood uses NVIDIA’s hosted AI service for recipe generation and the assistant. For meal generation, NVIDIA receives pantry item names, relevant cuisine and dietary preferences, meals per day, and any daily or one-time meal calorie target you choose. For the assistant, NVIDIA receives that food context, your current message, and up to ten recent messages from the conversation. Mealwood does not add your name, email address, password, or Mealwood user ID to these AI prompts.

Assistant replies are returned to your browser and are not saved by Mealwood. Generated recipe titles, cuisines, ingredients, quantities, steps, dietary tags, and estimated calories per serving are validated and then saved to your Mealwood account. NVIDIA processes submitted prompts and responses under its own service terms and privacy practices.

• Supabase: authentication, database storage, session management, and server functions.
• Vercel: website hosting, delivery, and operational request logs.
• NVIDIA: AI recipe and assistant processing using the context described above.
• Resend: delivery of transactional authentication email through the configured Supabase email service.

Mealwood’s Geist and Instrument Serif font files are bundled with the application, so visiting Mealwood does not send a font request to Google. We may also disclose information when reasonably necessary to comply with law, protect users, or protect the service.

Mealwood uses essential Supabase authentication cookies to keep you signed in, refresh your session, and protect account-only pages. The current application does not use browser localStorage or sessionStorage, advertising cookies, tracking pixels, or active analytics software. Because the current cookies are essential to the service, Mealwood does not show an optional-cookie consent banner.

Account information and persisted food-planning data are generally kept while your account is active. You can permanently delete your account from Profile. That operation removes your authentication account and associated Mealwood data from active systems. Limited records may remain temporarily in provider backups, security logs, or where retention is required by law or needed to resolve abuse and security incidents.

Mealwood uses access controls, authenticated sessions, row-level database protections, input validation, rate limits, and encrypted network connections where supported. No internet service can promise absolute security, so we do not guarantee that unauthorized access will never occur.

You can update food preferences from Profile, choose what pantry and dietary information to provide, avoid using AI features, sign out, or delete your account. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, objection, or portability of personal information. Contact us to make a request. We may need to verify your identity before acting on it.

Mealwood and its providers may process information in countries other than the country where you live. Those countries may have different privacy laws. Provider locations and transfer arrangements can change as their infrastructure changes.

Mealwood is intended for a general audience and is not directed to children under 13. Please do not create an account if you are under 13. Mealwood does not collect birthdays or identity documents to verify age. If you believe a child under 13 has provided personal information, contact us so the account and information can be reviewed and deleted where appropriate.

We may update this policy as Mealwood changes. We will update the date above and provide additional notice when a material change reasonably requires it.

Privacy questions and requests: mealwood7@gmail.com. You can also use the Contact page.