Last updated: 7 September 2026. MealPilot is a meal-planning and grocery-organisation app, not a medical service. We do not sell personal data or use it for targeted advertising.
1. Who is responsible
MealPilot is operated by Four Bros Lab. For privacy questions, contact fourbroslab@gmail.com.
2. Information we handle
Account information
When you protect an account, Firebase Authentication handles an account identifier and the sign-in details you choose, such as email address, display name and sign-in provider. Guest sessions use a Firebase identifier so the app can save a temporary plan.
Planning and food preferences
To create and adjust your plan, MealPilot can store preferences and content you provide, including household size, meals and timings, goals, cuisines, favourite ingredients, dietary rules and exclusions, allergies, equipment, budget, retailers, pantry and shopping data, meal plans, saved weeks, favourites, meal outcomes, feedback, reminders and nutrition-journal entries. Meal recommendations do not use browser cookies, advertising identifiers, data from other apps or third-party advertising profiles.
Nutrition information
If you use the optional nutrition features, the app can store the planning inputs and meal information you enter to show estimates and weekly progress. An adult nutrition profile can include age, sex, height, weight and activity information. These inputs stay in your private profile and are used to calculate a planning target; MealPilot does not use them to diagnose or treat a condition. Nutrition estimates are general planning guides, not medical advice, diagnosis or treatment.
Purchases
Plus purchase and entitlement status is handled through Google Play and our subscription service provider, RevenueCat. MealPilot receives entitlement information needed to unlock Plus. We do not receive or store your full payment-card or bank details.
Device, reliability and usage information
Firebase services may process app version, installation or app-instance identifiers, bounded technical diagnostics, crash reports, performance information and standard product-usage events. These help us keep the app reliable and understand which features are useful. We do not intentionally place your meal text, profile details, tokens or precise location in analytics or crash reports.
Location
When you explicitly choose a nearby-store action, the app can request approximate foreground location to rank supported stores on your device. We do not keep a location history or use location for advertising.
Optional grocery photos
If the optional grocery-vision feature is enabled and you choose to use it, a resized, metadata-free image can be sent for transient analysis. MealPilot does not intentionally store the original image, raw OCR text or unmatched labels. A confirmed canonical grocery result or correction may be saved as part of your pantry data.
3. Why we use this information
- to provide meal planning, shopping, pantry, reminder and account features;
- to keep your plan available across devices when you protect an account;
- to provide and verify Plus entitlements and prevent misuse;
- to improve reliability, performance and product decisions; and
- to respond to support, privacy and account-deletion requests.
4. Service providers
MealPilot uses Firebase Authentication, Firestore, Cloud Functions, App Check, Crashlytics, Performance, Remote Config and Analytics; Google Play for Android distribution and billing; RevenueCat for subscription entitlement infrastructure; and, only for enabled optional features, OpenAI for transient grocery or meal analysis. These providers process information only as needed to provide their services and under their own terms and privacy policies.
5. Storage and retention
Account and planning data is kept while your account is active so that the app can work. We keep only limited records for security, fraud prevention, billing reconciliation, legal obligations or support where necessary. When you delete your account, MealPilot deletes your Firebase Authentication account, your user-scoped Firestore data and the stored entitlement-access record. Transient grocery images are not retained by MealPilot. Device preferences and caches are cleared as part of the app's deletion flow where technically applicable.
To prevent repeated trial allowances after account deletion or purchase transfers, limited usage counters may be associated with a hashed store transaction reference. These counters contain no meal text, grocery photos or payment-card details. Trial counters expire after 400 days; short-lived operational counters use their configured retention period.
6. Delete your account
You can delete your account in the app: You → Account & data → Delete account. You can also use our external account-deletion page. Account deletion does not cancel an active Google Play subscription; cancel that subscription separately in Google Play.
7. Security and your choices
We use Firebase authentication, access rules, server-side checks and encrypted transport to protect the service. No online service can promise absolute security. You can edit your planning data, choose whether to use optional features, deny location access and contact us about your privacy rights or a data request.
8. Children and changes
MealPilot is intended for adults and is not directed to children. We may update this policy when the app or its data practices change. The date above shows when the current version took effect.