Back to home
RizqMeals

Privacy Policy

Last updated: 15 March 2026

What We Collect

When you use RizqMeals, we collect the following information:

  • Your email address (required for account creation)
  • If you ask to hear when the app is in the Play Store and App Store, that email address, with no account. We send one email to confirm it and one when the app is out, and the confirm email has a link that removes it
  • Your name (optional)
  • Dietary preferences and restrictions you set
  • Your answers to our onboarding quiz
  • Meal ratings and feedback you provide
  • Food logging data (meals tracked, portions, timestamps)
  • Usage analytics: anonymous counts only (which pages are opened, which features are used, how long a visit lasts), never tied to your account and never carrying what you eat, log or weigh
  • Campaign tags on the link you first arrived by (for example a poster's code or a partner's name), kept with your account so we can tell which channels work. Never the full link, your IP address or your device

How We Use It

We use your data to provide and improve the RizqMeals experience:

  • Generate personalised meal plans based on your preferences and goals
  • Track your nutrition intake and progress over time
  • Improve our recipes and meal suggestions based on aggregate feedback
  • Send you notifications about your meal plan, reminders, and updates (opt-in only)

AI Features

When you describe a meal or photograph a plate, we send those words or that photo to our AI provider to read the foods and amounts. Nothing is logged until you confirm it, and we keep only the foods you log.

When you speak instead of typing, your browser turns your voice into words. We never receive or store the audio, but your browser's maker may process it on their own service.

Data Storage

Your data is stored securely by our cloud database provider in the EU. All data is encrypted at rest and encrypted in transit using industry-standard TLS. We take reasonable measures to protect your personal information from unauthorised access, alteration, or destruction.

Who Handles Your Data

We use other companies to run RizqMeals. Each one gets only what its job needs. This list was last updated on 19 October 2026.

In the UK

  • Application hosting — Runs the app and its servers; receives every request you make to the app; our servers run in London. The company is based in the US. Protected by the International Data Transfer Agreement or standard contractual clauses.

In the EU

  • Cloud database and authentication — Stores your account and everything you log, and signs you in; receives your account, profile, plans and logs, encrypted at rest and in transit. Covered by the UK's adequacy regulations for the EU.
  • Privacy-focused analytics — Counts which pages are opened; receives anonymous page counts, with no cookies and no personal data. Covered by the UK's adequacy regulations for the EU.
  • Address lookup — Finds the city you type for prayer times; receives the city name you type, sent from our servers with nothing about you. Covered by the UK's adequacy regulations for the EU.
  • Public food database (barcodes) — Looks up a packet you scan; receives the barcode or search word only, sent from our servers with nothing about you. Covered by the UK's adequacy regulations for the EU.

Outside the UK and EU

  • AI model provider — Reads the foods in a photo, label or description you choose to send; receives only the photo, label or words you choose to send, with no name, email or account identifier. Processed in the US. Protected by the International Data Transfer Agreement or standard contractual clauses.
  • Transactional and sign-in email — Sends sign-in links, receipts and the emails you opt into; receives your email address and the email's contents. Processed in the US. Protected by the International Data Transfer Agreement or standard contractual clauses.
  • Payments and merchant of record — Takes payment for Pro and handles tax and refunds; receives your name, email and payment details, given to them directly; we never see or hold card numbers. Processed in the US. Protected by the International Data Transfer Agreement or standard contractual clauses.
  • Error monitoring — Tells us when something breaks; receives crash reports with personal details removed, and never your meals or weight. May be processed in the US. Protected by the International Data Transfer Agreement or standard contractual clauses.
  • Push-notification delivery — Delivers the reminders you turn on; receives a device token your browser makes and the reminder's text. Run by your browser's maker, often in the US. Protected by the International Data Transfer Agreement or standard contractual clauses.
  • Sign-in identity provider — Signs you in with an outside account, if you choose that button; receives your name, email and profile picture from that account, which they send us. Processed in the US. Protected by the International Data Transfer Agreement or standard contractual clauses.
  • Public nutrition database (search) — Finds nutrition values for foods you search; receives the search word only, sent from our servers with nothing about you. No personal data is sent: only the word you search, from our servers.
  • Prayer-time service — Works out prayer and fasting times; receives a city and country name, sent from our servers with nothing about you. No personal data is sent: only a place name, from our servers.
  • Location lookup — Turns your location into a city name, if you tap Use my location; receives your coordinates, once, sent from our servers; we keep only the city. Processed outside the UK and EU. Protected by the International Data Transfer Agreement or standard contractual clauses.
  • Grocery price data — Supplies supermarket prices for the shopping list; receives nothing about you: prices are fetched when we build the app. No personal data is sent: prices are fetched at build time.

A current list of the companies we use is available on request at rizqmealsltd@gmail.com.

Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — ask us to correct any inaccurate information
  • Deletion — ask us to delete your personal data
  • Data portability — receive your data in a structured, machine-readable format
  • Object to processing — opt out of certain data processing activities

You can exercise your right of access and data portability instantly — open Settings → Download my data to export everything we store as a JSON file, free of charge and without waiting.

To exercise any of these rights, email us at rizqmealsltd@gmail.com.

Cookies

We keep cookie usage to a minimum. RizqMeals uses an authentication session cookie to keep you signed in, and, if you arrived by a tagged link, one cookie for 30 days holding that link's campaign tags. We do not use advertising cookies, cross-site tracking cookies, or any third-party cookie-based analytics.

Changes

If we make material changes to this privacy policy, we will notify you via email before the changes take effect. We encourage you to review this page periodically.

Contact

If you have questions about this privacy policy or how we handle your data, reach out to us at rizqmealsltd@gmail.com.