Privacy Policy

Last updated: 4/16/2025

Welcome to keto-meal.com. Your privacy is important to us. This **Privacy Policy** explains how we collect, process, and protect your personal data in accordance with the **General Data Protection Regulation (GDPR) (EU) 2016/679** and other applicable data protection laws.

1. Data Controller

The **Data Controller** responsible for processing your personal data under this policy is:

keto-meal.com

📍 Address: [Your Company Address]

📩 Email: support@keto-meal.com

2. What Personal Data We Collect

We collect and process the following data:

• **Email address** – Required for account creation and meal plan delivery.
• **Dietary preferences & quiz responses** – To generate personalized meal plans.
• **Payment details** – Processed securely by **Stripe** (we do **not** store card details).
• **Technical data** – IP address, browser type, and device info (for security and analytics).
• **User activity data** – Interactions with our platform to improve services.

3. Legal Basis for Data Processing

We process your personal data in compliance with **Article 6 of the GDPR**:

• 📌 **Consent** – When you provide personal data for meal planning.
• 📌 **Contractual necessity** – To deliver requested services.
• 📌 **Legitimate interest** – For fraud prevention, analytics, and app improvements.
• 📌 **Legal obligations** – Compliance with tax, legal, and regulatory requirements.

4. How We Use Your Data

We use your data for the following purposes:

• 📩 Deliver personalized meal plans via email.
• 🔒 Process and verify payments (via **Stripe**).
• 📊 Improve user experience through analytics.
• 🛡️ Maintain app security and fraud prevention.

5. Data Retention

We retain your personal data **only for as long as necessary** to fulfill the purpose of collection or as required by law.

- Payment records are retained for tax & compliance purposes. - Email and meal plan data are retained until you request deletion.

6. Data Security

We implement industry-standard security measures to protect your data:

• 🔒 **Encryption** – All stored data is encrypted.
• 🔐 **Secure Payments** – Handled by **Stripe**.
• 🛡️ **Access Control** – Only authorized personnel can access personal data.

7. Third-Party Data Sharing

We only share data with trusted third-party providers **when necessary** for service functionality:

• **Stripe** – Payment processing.
• **Supabase** – Secure database storage.
• **OpenAI** – Meal plan generation.
• **SendGrid** – Email delivery service.

8. Your Rights Under GDPR

As an EU resident, you have the right to:

• 📥 **Access** your personal data.
• ✏️ **Correct** inaccurate data.
• 🗑️ **Request deletion** ("Right to be forgotten").
• 🔄 **Data portability** (receive your data in a structured format).
• 🚫 **Object** to certain data processing.

9. How to Contact Us

To exercise your rights or for privacy concerns, please contact us:

📩 Email: support@keto-meal.com

📍 Address: [Your Company Address]