Privacy Policy - Mealheim

1. Who We Are

Mealheim is a meal planning and recipe management application operated by Norse Ventures LLC ("we", "our", "us"), based in Charleston, SC USA. This notice explains how we collect, use, store, and share your information when you use the Mealheim app (the "App").

2. What We Collect & Why

Category	What	Why we need it
Meal & Recipe Data	Meals you create (ingredients, instructions, prep/cook times) Tags, cover photos, and metadata Meal plans and calendar assignments	Core meal planning functionality
iCloud Sync	All meal data synced via Apple CloudKit	Sync your meals and plans across your Apple devices
Recipe Import	Recipe URLs you provide for import	Parse and import recipes from websites (URLs are processed transiently and not stored)
On-Device AI	Meal descriptions for AI-powered suggestions	Generate meal ideas and tags using Apple's on-device language models (processed locally, never sent to external servers)
Subscription	Receipt / transaction IDs (handled by RevenueCat)	Verify subscriptions and unlock premium features
Support	Emails you send to [email protected]	Respond to requests, including data-deletion

We never collect payment-card numbers; Apple and RevenueCat handle those. We do not use any analytics or crash reporting services.

3. Third-Party Services

Mealheim uses the following third-party services:

Apple CloudKit – Your meal data is stored in your personal iCloud account and synced across your devices. Apple's privacy practices apply to data stored in iCloud.
RevenueCat – Manages subscription verification. Only transaction identifiers are shared; no personal payment information.
Recipe Import API – Our recipe extraction service (hosted at mealheim.norseventures.co) receives only the recipe URLs you provide. URLs are processed immediately and not stored. No user accounts, no tracking, no cookies.

We do not use Firebase, Crashlytics, Amplitude, or any other analytics or advertising services.

4. Legal Grounds for Processing

Depending on your region, we rely on one or more of the following bases:

Contractual necessity – to provide the App and its features.
Your consent – e.g., iCloud sync or recipe imports (you can disable in Settings).
Legitimate interests – service reliability, security, fraud prevention, product improvement.
Legal obligations – tax, accounting, or regulatory requirements.

5. How We Share Information

We do not sell or rent your personal information. We share it only:

With service providers – Apple (CloudKit for sync) and RevenueCat (subscription management) under strict data-protection terms.
For legal reasons – if required by law or to protect rights.
With your direction – when you export or share content.

6. Storage, Security & Transfers

Your meal data is stored locally on your device and in your personal iCloud account.
Images are stored locally with disk caching for performance.
The Recipe Import API processes URLs transiently in memory; no persistent storage of user data.
Data processed through iCloud may be stored in regions where Apple operates data centers. Apple's data protection practices apply.

7. Your Choices & Rights

Region	Your rights & how to exercise them
European Economic Area, UK, Switzerland	Access, correct, delete, restrict, object to, or export your personal data; withdraw consent at any time; lodge a complaint with your local authority. Email [email protected].
California (CCPA/CPRA)	Right to know/confirm what we collect and how we use it. Right to delete personal information (subject to legal exceptions). Right to correct inaccurate data. Right to opt out of "sale" or "sharing" of personal information (we do not sell or share for cross-context advertising). Right to limit use/disclosure of sensitive personal information (we only use it to provide the App). To exercise, email [email protected] or use in-app controls. You may designate an authorised agent to act on your behalf. We will not discriminate against you for exercising any rights.

Region

Your rights & how to exercise them

European Economic Area, UK, Switzerland

Access, correct, delete, restrict, object to, or export your personal data; withdraw consent at any time; lodge a complaint with your local authority. Email [email protected].

California (CCPA/CPRA)

Right to know/confirm what we collect and how we use it.
Right to delete personal information (subject to legal exceptions).
Right to correct inaccurate data.
Right to opt out of "sale" or "sharing" of personal information (we do not sell or share for cross-context advertising).
Right to limit use/disclosure of sensitive personal information (we only use it to provide the App).

To exercise, email [email protected] or use in-app controls. You may designate an authorised agent to act on your behalf. We will not discriminate against you for exercising any rights.

8. Data Retention

Your meal data remains on your device and in your iCloud account until you delete it. If you request account deletion, we will assist you in removing any data we have access to within 30 days, unless longer retention is legally required.

9. Children

Mealheim is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

10. Changes to This Policy

We may update this notice from time to time. Material changes will be announced in-app or by email. Continued use of Mealheim after the effective date means you accept the revised policy.

11. Contact Us

Norse Ventures LLC
Charleston, South Carolina, USA
Email: [email protected]

Mealheim – Privacy Policy