Privacy Notice

MealAdjust is the trading name of Niclas Hjelmtvedt, who is the data controller for the personal data described here. This notice explains what we collect, why, and what rights you have.

What we collect and why

Account data — email address, password (stored hashed), or your Google account identifier if you sign in with Google. Used to create and secure your account. Legal basis: performance of our contract with you.
Health and body data — sex, age, height, weight, target weight, activity level and goal. Used solely to calculate your calorie and macronutrient targets. Legal basis: your consent, which you can withdraw by deleting your account.
Plan data — the foods you select, your saved meal plans and pantry. Used to build and store your plans. Foods you add to the shared library are visible to other users without your name attached, so the food database improves over time. Legal basis: contract performance and our legitimate interest in improving the food data.
Subscription data — subscription status, plan, billing period and the identifiers issued by our payment provider. We never see or store your card details. Legal basis: contract performance and legal obligation.
Technical data — IP address, device and browser information, and error logs. Used for security, fraud prevention and fixing bugs. Legal basis: our legitimate interest in a secure, working service.
Support messages — anything you send us. Used to answer you. Legal basis: legitimate interest.

Who we share it with

Paddle, our reseller and Merchant of Record, for the sale of subscriptions, payments, invoicing, subscription management and tax compliance.
Hosting and infrastructure providers who run the application and database on our behalf as processors.
Professional advisers (legal, accounting) and authorities where we are required by law.

We do not sell your personal data and we do not use it for advertising.

International transfers

Some of our providers process data outside the EEA/UK. Where that happens we rely on European Commission adequacy decisions or Standard Contractual Clauses as the safeguard.

How long we keep it

We keep your account, body stats and plans for as long as your account is active. When you delete your account we delete this data. Records we must keep for tax and accounting (held by Paddle as Merchant of Record) are retained for the period required by law. Foods contributed to the shared library remain, without any link to you.

Your rights

You can access, correct, export, restrict or object to the processing of your data, withdraw consent, and request erasure. Most of this is available directly in Settings, including permanent account deletion. Contact us for anything else and we will respond within one month. If you are in the EEA or UK you may also complain to your local supervisory authority — in Norway, Datatilsynet.

Security

Data is encrypted in transit and at rest, access is restricted to what is needed to run the service, and every record is protected by row-level access rules so only you can read your own plans and body stats.

Cookies

We use strictly necessary cookies and local storage to keep you signed in and to remember your preferences. Our payment provider sets cookies needed to run checkout securely. We do not use advertising or tracking cookies. You can clear these at any time in your browser, though signing in will no longer persist.

Last updated: 18 August 2026.