Privacy Policy
Last Updated: August 1, 2024
Welcome to Preggo Meal AI ("we", "us", or "our"). We are committed to protecting your privacy and handling your data responsibly. This Privacy Policy explains how we collect, use, process, disclose, and safeguard your information when you use our mobile application (the "App"), website (the "Site"), and related services (collectively, the "Services"). Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.
1. Definitions
- Personal Data: Any information relating to an identified or identifiable natural person.
- Processing: Any operation performed on Personal Data, such as collection, recording, organization, storage, adaptation, retrieval, use, disclosure, etc.
- Data Controller: The entity which determines the purposes and means of the Processing of Personal Data. For the purpose of this policy, Preggo Meal AI is the Data Controller.
- Data Subject: Any identified or identifiable natural person whose Personal Data is processed by the Data Controller.
2. Information We Collect
We collect information necessary to provide and improve our services. The types of information we collect include:
Personal Data Provided by You
This includes personally identifiable information you voluntarily provide when you register, create a profile, or use interactive features of the App, such as:
- Contact Information (e.g., name, email address).
- Account Credentials (e.g., username, password).
- Profile Information (e.g., due date, weight, height).
Sensitive Personal Data (Health and Dietary Information)
To provide personalized meal plans, we collect sensitive information related to your health and diet, which you provide voluntarily:
- Pregnancy Information (e.g., trimester, specific health conditions like gestational diabetes, allergies).
- Dietary Preferences & Restrictions (e.g., vegetarian, gluten-free, dislikes).
- Nutritional Goals & Activity Levels.
We process this sensitive data based on your explicit consent, which you provide when setting up your profile and using the personalization features.
Usage Data
Information is automatically collected when you access and use the App and Site:
- Log Information (e.g., IP address, browser type, operating system, access times, pages viewed).
- Interaction Data (e.g., features used, meal selections, saved recipes, search queries).
- Aggregated analytics data on app usage patterns.
Device Data
Information about the mobile device or computer you use to access the Services, such as hardware model, operating system and version, unique device identifiers, mobile network information, and browser configuration.
3. How We Use Your Information (Purpose of Processing)
We process your information for legitimate business purposes, including:
- Providing and Personalizing Services: To create and manage your account, generate personalized meal plans and nutritional guidance, and tailor the App experience to your needs and preferences.
- Improving Services: To monitor and analyze usage trends, understand user behavior, troubleshoot issues, and enhance the functionality and user-friendliness of the App and Site.
- Communication: To send you technical notices, updates, security alerts, support messages, and respond to your comments and questions.
- Account Management: To manage your subscription, process payments (if applicable), and provide customer support.
- Feedback & Research: To request feedback, conduct surveys, and perform research and analysis for product development.
- Security & Compliance: To prevent fraud, monitor against security threats, protect against illegal activity, enforce our terms, and comply with legal obligations.
4. Legal Basis for Processing (for EEA/UK Users)
If you are in the European Economic Area (EEA) or the UK, our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. We normally collect personal information from you only:
- Where we need the personal information to perform a contract with you (e.g., to provide the meal planning service).
- Where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms (e.g., for analytics, security).
- Where we have your explicit consent to do so (e.g., for processing sensitive health and dietary data).
- Where we need to comply with a legal obligation.
5. Disclosure of Your Information
We do not sell your personal information. We may share information we have collected about you in limited circumstances:
- With Consent: We may disclose your information to third parties when we have your explicit consent to do so.
- Service Providers: We share information with third-party vendors and service providers who perform services on our behalf (e.g., cloud hosting with AWS/GCP, analytics providers like Google Analytics, payment processors if applicable). These providers are contractually obligated to protect your data and use it only for the services requested.
- Legal Requirements: If required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
- Business Transfers: In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction, subject to standard confidentiality agreements.
- Aggregated/Anonymized Data: We may share aggregated or anonymized information that does not directly identify you for research, statistical analysis, or industry reporting purposes.
6. International Data Transfers
Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United States and process it there. We will take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy.
7. Security of Your Information
We implement robust administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, use, alteration, and disclosure. These include encryption (both in transit and at rest where appropriate), access controls, regular security assessments, and staff training. However, no system is completely secure, and we cannot guarantee the absolute security of your information.
8. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Sensitive health data may be anonymized or deleted sooner if no longer required for personalization, subject to your preferences and legal requirements. You can request deletion of your account and associated data as described in the "Your Privacy Rights" section.
9. Your Privacy Rights
You have certain rights regarding the personal information we hold about you. Depending on your jurisdiction (e.g., GDPR in Europe, CCPA in California), these may include:
- Right to Access: Request access to the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal information.
- Right to Erasure ('Right to be Forgotten'): Request deletion of your personal information, subject to certain exceptions.
- Right to Restrict Processing: Request restriction of how we process your personal information in certain circumstances.
- Right to Data Portability: Request a copy of your personal information in a machine-readable format to transfer to another service.
- Right to Object: Object to the processing of your personal information based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your information (especially sensitive data).
- Right related to Automated Decision-Making: Rights related to decisions made solely based on automated processing, including profiling.
- Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights (as per CCPA).
To exercise these rights, please contact us using the details below. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.
*(Note: Compliance with regulations like GDPR and CCPA is crucial for applications handling personal data, especially sensitive health information. Ref: websitelegalforms.com)*
10. Policy for Children
Our Services are not intended for individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child without appropriate consent, we will take steps to delete it promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or relevant laws. We will notify you of any material changes by posting the new policy on the Site and App, updating the "Last Updated" date, and potentially through other means like email or in-app notifications. Your continued use of the Services after such changes constitutes your acceptance of the revised policy.
12. Contact Us
If you have questions, comments, or concerns about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact us at: preggomealai@gmail.com
References to legal compliance importance from websitelegalforms.com. Attorney-drafted policies recommended by policies.us.org for full compliance.