Privacy Policy

owns, llc ("Company," "we," "us," or "our") operates RoloMeal. This policy explains what RoloMeal collects, why we collect it, who we share it with, and what control you have. It covers the RoloMeal iOS app, the rolomeal.com website, and the RoloMeal API.

We do not sell your personal information, and we do not use your meals, recipes or shopping data to serve you advertising.

• Account information: your display name, your email address, and a password, a passkey, or a Sign in with Apple or Sign in with Google identifier. Signing in with Apple or Google may supply your name from that account.
• Household information: the groups you create or join, and who is in them.
• Your food data: meals, recipes, ingredients, the weekly plan, shopping lists, pantry contents, tags and favourites, notes and comments.
• Stores: the grocery stores you save, including the location you pin for each one and the radius used to recognise when you are there.
• Photos and documents: recipe photos, PDFs and URLs you import, ingredient photos you snap, and grocery receipts you scan.
• Barcodes you scan: which of your Pantry or Stock items each barcode belongs to, so scanning it again finds that item. We store the barcode number and the item it points to, not any product details.
• Support requests and anything else you choose to send us.

The app asks for these only when you use the feature that needs them, and you can withdraw any of them in iOS Settings at any time.

• Camera. To photograph a recipe page, an ingredient, or a receipt. Images are sent to our servers and on to an AI provider to extract the text. Also to scan a product's barcode: the barcode is read on your device, and no image leaves it.
• Location while in use. To centre the shopping map on you so you can see which of your saved stores are nearby.
• Location in the background. Used by Shopping Mode to notice when you arrive at a saved store or arrive home with items still on your list. We register geofences around the places you saved and receive only enter and exit events for them. We do not record a continuous location trail.
• Microphone and speech recognition. To dictate meal names, ingredients and recipes. Recognition happens on your device by default.
• Motion. Only if you turn on "Detect unknown stores" in Shopping Mode, to notice when you have been stationary somewhere that looks like a store so we can offer to save it. Off unless you enable it.

• Device and app information: device model, operating system version, app version and build, and language.
• Log data: IP address, request times and endpoints, and error details.
• Crash and performance diagnostics, through Sentry, so we can find and fix crashes and hangs.
• Product analytics, through PostHog, recording which features are used so we can decide what to improve. Events are tied to your account identifier. On the web, analytics only run if you accept them — nothing is loaded until you do, and "Cookie settings" in the footer changes your answer at any time.

Subscriptions and credit packs are bought through the Apple App Store. Apple processes the payment. We never receive your card number or billing address. What reaches us is a signed transaction record from Apple, which we verify against Apple's certificates to work out what you are entitled to, plus the resulting entitlement and credit balance.

RoloMeal uses outside AI services, acting as our processors, to read recipes, receipts and photos, suggest and plan meals, read recipes aloud and draw meal pictures. We ask before any of your content is sent to them: the first time you use an AI feature, RoloMeal shows what is sent where and asks you to allow it. Until you do, nothing is sent and the feature does not run. We record your answer on your account, so it holds in the app and on the web.

Each service receives only what the feature you use needs:

• Anthropic and OpenCode Zen (AI models): The text of recipe pages you import, and the captions of recipe videos; recipe photos and PDFs, receipt photos, and photos of ingredients; text you dictate in the iPhone app (your iPhone turns your voice into text; only the text is sent); your meals' names, ingredients and steps, and pantry and household item names, when a feature works on them.
• OpenAI: A recipe video's audio, only when the video has no captions; recipe steps you play with a standard voice; meal, ingredient and household item names, to match pictures.
• ElevenLabs: Recipe steps you play with a Plus voice.
• fal.ai: Meal, ingredient and household item names, to draw their pictures.
• TypeSafe AI (decision model): Ingredient names, and the names of your meals, pantry and household items, when a feature sorts or matches them; receipt line items and support messages, when a feature sorts them.

Never sent: your name, email address, location or payment details. We do not send your account credentials, and we do not authorise these providers to use your content to train their models.

To place shopping items in store aisles, RoloMeal also asks one of the AI model services above to classify ingredient names. That list is shared by everyone, has duplicates removed, and carries no account or person with it, so it is sent without asking.

Recipe web search is not AI: the words you search for are sent to Brave Search to find recipe pages, with nothing else about you.

Withdrawing. Turn off "AI data sharing" in the app (You → Account & security → AI data sharing) or on the web (Settings → AI data sharing). From then on nothing more is sent, and AI features ask again before they run. Content already processed, such as recipes already read and pictures already drawn, stays in your account until you delete it.

When you scan a product's barcode, the app sends the barcode number from your device to Open Food Facts, an open, crowd-sourced product database, to look up the product's name. Household, beauty and pet products are held by its sister databases, Open Products Facts, Open Beauty Facts and Open Pet Food Facts; for those, Open Food Facts points the app to the database that holds the product, and your device sends the barcode number there too. The requests go straight from your device, so each database they reach receives your IP address as any website would. No account details are sent with them, and we do not send these databases anything else about you.

RoloMeal stores which of your items a barcode belongs to, as described above. We do not keep the product details these databases return; they only fill in the item you are adding.

Product details shown in the app come from Open Food Facts, © Open Food Facts contributors, or from the sister database that holds the product, © its contributors, all made available under the Open Database License.

• To provide and maintain the Services
• To create and manage your account and your household sharing
• To process purchases and apply entitlements and credits
• To send notifications you have asked for, such as shopping reminders
• To email you RoloMeal tips and news, only if you have opted in (see below)
• To improve the Services, diagnose faults and develop new features
• To detect, prevent and address fraud, abuse and security threats
• To comply with legal obligations

Tips and news email. This is off unless you turn it on, and we send it only with your consent. You can say yes when you create an account, when RoloMeal asks you once (in the app or on the web), or in Settings. You can withdraw at any time, as easily as you gave it: switch it off in the app (You → Account & security) or on the web (Settings → Tips and news), use the unsubscribe link in any tips and news email, or write to privacy@rolomeal.com. Deleting your account or your RoloMeal data also withdraws it: the withdrawal is recorded before your data is removed, and if it does not go through, it is tried again when the deletion is retried. To be able to show what you agreed to, we keep a record of each answer: what you chose, when, the words you were shown, and the IP address and app or browser it came from. Account emails, such as sign-in codes and password resets, are not marketing and are sent either way.

• Household members: meals, plans and lists you share with a group are visible to the other members of that group.
• Service providers: infrastructure, object storage, AI and text-to-speech providers (with your permission, see section 5), recipe search, crash reporting and product analytics, acting on our behalf under contract.
• Apple: for purchases, subscription management and App Store services.
• Open Food Facts and its sister databases (Open Products Facts, Open Beauty Facts, Open Pet Food Facts): the barcode number of a product you scan, sent from your device to look the product up (see section 6).
• Retailers and delivery partners: only when you explicitly send a shopping list to one.
• Legal requirements: when required by law or legal process.
• Business transfers: in connection with a merger, acquisition or sale of assets.
• With your consent: when you give us explicit permission.

We do not sell personal information.

• Encryption of data in transit (TLS)
• Argon2id password hashing
• Passkey and multi-factor authentication support
• Encryption of sensitive data at rest
• Regular security assessments

We keep your personal information for as long as your account is active or as needed to provide the Services. You can delete your account from inside the app, under your profile. On deletion we delete or anonymise your personal information within 30 days, except where the law requires us to keep it.

If another member of your group had one of your meals on their meal plan, in one of their saved menus or on their Shop list, only the meal's name stays there, marked as deleted, for 7 days and is then removed.

Deleting your account does not cancel an Apple subscription. Cancel that in your Apple ID subscription settings.

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of marketing communications
• Restrict processing of your information

California residents have additional rights under the CCPA, including the right to know what is collected, the right to delete, and the right to opt out of sales. We do not sell personal information.

If you are in the EEA, UK or Switzerland, you have rights under the GDPR including access, rectification, erasure, restriction, portability and objection, and you may lodge a complaint with your supervisory authority.

Your information may be transferred to and processed in countries other than your country of residence. We implement appropriate safeguards for international transfers.

The Services are not intended for children under 18, and we do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

We may update this policy from time to time. We will notify you of material changes by posting the updated policy here and updating the date above.

Privacy questions: privacy@rolomeal.com
Data Protection Officer: dpo@rolomeal.com