Last updated September 2026
This page details exactly what the Meal Planner Android app collects, why, and what stays on your device. It mirrors the Google Play Data Safety declaration. The app works fully without an account; the "account & backup" section applies only if you choose to sign in with Google.
Your grocery lists and the in-app health tracker — food log, weight history and sleep entries — live in local storage on your phone and are never uploaded. Signed out, everything else (meal plans, preferences, allergies, body profile, saved dishes, pantry) stays local too. Uninstalling the app or clearing its data removes local data.
With Google Sign-In we collect your personal info (name, email address, profile photo URL) to operate the account, and your device uploads a backup snapshot so your data can be restored and synced: preferences (diet, allergens, favourite cuisines, household size, units, theme), health & fitness profile values (height, weight, age, sex, activity level, goal), week plans including cooked-meal history, saved dish ratings, and pantry items. One snapshot per account, replaced by newer uploads, encrypted in transit, retained until you delete your account.
When you use AI features (Ask AI, dish generation), your relevant preferences — diet, allergies, country, household size, body goal, favourite cuisines and current plan context — are sent with the request so results are personalised and allergen-aware, processed by our AI provider, and not stored with the request. Our logs keep only outcome, model and token counts with a hashed network identifier for abuse prevention — never message content.
With your consent where required: device or other identifiers (advertising ID, app set ID), IP address, app interactions, and diagnostics — used by Google Firebase Analytics and Google AdMob. Analytics consent defaults to denied until you choose; a premium purchase removes ads. We never send your name, email, contacts, precise location, or health values to analytics or ad services.
Recipe videos are played via the official YouTube embedded player; YouTube's own terms and privacy policy apply during playback (Google Privacy Policy). Dish photos are served from our servers (sourced from Pexels). Sharing a dish stores a copy of that dish's content (no personal data) on our servers to power the link.
In-app: Profile → Account → Delete account immediately deletes your account, sign-in tokens and backup snapshot from our servers; local data is removed by clearing the app's data or uninstalling. No longer have the app? Use the web deletion request form — requests are queued and processed manually, usually within 30 days. To clear your data but keep the account, see deleting your data. For anything else, email support@kivons.com.
The app is not directed at children, and we do not knowingly collect personal data from children.