This is template content for a demo build. It has not been reviewed by a lawyer and must be examined and adapted by qualified legal counsel before any production or public use.

Privacy Policy

Last updated: 15 July 2026

This Privacy Policy explains what information DoMyMeals (the “Service”) collects, how we use it, and the choices you have. By using the Service you agree to the practices described here.

1. Information we collect

To build and safety-check your weekly plans, we collect:

Account credentials — your email address and a password (stored only in hashed form).
Clinical profile — age, health conditions, medications, allergies, region, household composition and daily routine.
Health metrics — figures you record about yourself that inform your targets and limits.
Plan adherence and feedback — how you engage with the plans generated for you and any feedback you provide.

2. Sensitive health data

Much of the information above is sensitive health data. We collect and process it solely to provide the Service to you — that is, to generate and safety-check your meal plans — and we treat it with correspondingly heightened care.

3. How we use your information

We use your information to generate weekly meal plans, to run them through the automated clinical safety engine that checks for condition- and medication-related concerns, to operate and secure your account, and to maintain and improve the Service. We do not use your health data for advertising.

4. How your information is shared

We do not sell your personal information, and we do not share it with third-party advertisers or data brokers. If you use the Service with a practitioner, your information is shared with the practitioner assigned to you within your clinic, so that they can build and review your plans. We may also disclose information where required by law or to protect the rights, safety and security of users and the Service.

5. How we protect your information

We apply technical safeguards including:

passwords stored using one-way hashing, never in plain text;
temporary account lockout after repeated failed sign-in attempts;
signed session cookies to protect authenticated sessions.

No method of storage or transmission is completely secure, so we cannot guarantee absolute security, but we work to protect your information using reasonable measures.

6. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. When you request deletion, we delete or anonymise your personal information except where we are required to retain it to comply with legal obligations or resolve disputes.

7. Your rights

Subject to applicable law, you may request to access, correct or delete the personal information we hold about you. To exercise these rights, contact us at [contact@example.com]. We may need to verify your identity before acting on a request.

8. Cookies

The Service uses a single essential session cookie to keep you signed in and protect your session. We do not use advertising or third-party tracking cookies.

9. Children

The Service is intended for adults aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us so we can remove it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, provide additional notice.

11. Contact

Questions about this Privacy Policy or your data can be sent to [contact@example.com].