Privacy notice
This notice explains what personal data Mealstone uses, why, who can see it and what you can do about it. It covers the Mealstone app for iPhone and Android, the coaches' web app and our web pages.
The short version
- Mealstone is a tool you and your coach use together. It gives no advice of its own: your coach advises you and is responsible for it.
- Your coach sees your health information so they can coach you. Nobody else does, apart from the cases under Who can see your data.
- Your health information, photos and messages are stored in the EU, in the Netherlands.
- AI helps your coach. What it drafts reaches you only after your coach has checked it, apart from the few things under AI assistance, such as pictures of your plan's meals. Progress photos never go to AI, and the AI provider may not use your data to train its models.
- We don't sell your data, show ads or track you across other apps. The phone app sends crash reports so we can fix problems, and anonymous usage statistics only if you say yes.
- You can change your consents, ask for a copy of your data and delete your account in the app at any time.
1. What Mealstone is
Mealstone is a tool that nutrition coaches and their clients use together, for the questionnaire, check-ins, plans, meals and messages between them.
- Mealstone gives no advice of its own. Your plan, your feedback and everything else you're advised comes from your coach, an independent professional who is responsible for it. Mealstone isn't a medical service.
- You decide what you add, and you're responsible for it. Clients decide what they share about themselves; coaches are responsible for what they write, publish and upload.
- AI helps coaches. What it drafts reaches a client only after their coach has checked it, apart from the few things described under AI assistance.
Our terms of service explain who is responsible for what. This notice explains what happens to your personal data.
2. Who we are
Mealstone is made by MJK APPS SRL, a company registered in Romania (“we”, “us”). Our registered office is at Str. Islazului 24, 435100 Baia Sprie, Maramureș, Romania; trade register J2019000866242, CUI RO40832934.
For anything about your data, write to support@fluttech.com.
3. Who is responsible for your data
Mealstone connects nutrition coaches with their clients. Each coach runs their own practice, so under the EU's General Data Protection Regulation (GDPR) the responsibility is split:
| Data | Who is responsible (the “controller”) |
|---|---|
| Coaching data: a client's questionnaire and health profile, check-ins, weight and measurements, progress photos, meals, habits, daily ratings, wellbeing and victories, messages, consultations, plans and program, and what the coach writes about the client | The client's coach. We process this data for the coach and only on their instructions, under a data processing agreement every coach accepts when registering. |
| A client's data after coaching ends | Us: the coach loses access at once, and we keep the data for the client until they delete their account. The coach keeps a former-client entry with the client's name, the dates and how coaching ended. What the coach wrote only for themselves about the client stays stored where nobody can read it, and the coach sees it again only if the client comes back to them (see How long we keep data). |
| Accounts and sign-in, consent records, the coach directory, coaches' subscriptions, feedback about the app, requests to be contacted, and what we use to keep Mealstone secure | Us |
This notice describes both, so you can read in one place how Mealstone handles your data. Your coach's name is in the app, and if they have a collaboration agreement, the version you accepted is in More → Privacy.
If you're a coach: you're responsible for having a lawful basis to coach your clients and for answering their requests about their data. Clients can do most of what they might ask for themselves in the app, and we help you with the rest.
4. What data we use
Everyone with an account
- Account: your name, email address, how you sign in (with Google or Apple) and whether you're a coach or a client. If you sign in with Apple and hide your email, we get Apple's relay address instead.
- Settings: your language, time zone and country (from your phone's settings, to show the right emergency numbers), notification choices and quiet hours, and display choices such as blurring photos.
- Devices: a notification token for each phone you use, with the app version, the platform, and the phone's language and time zone.
- Consent records: every consent decision, with what it was about, the version of the text you saw, your choice, the date and time, the app version and the language.
- Feedback: the rating and comment you choose to send us from the app, with whether you're a coach or a client, the app version, the platform and the language.
Clients
- How you joined: your coach's invitation, with the name and, if your coach added them, the email address or phone number they typed; or your request to a coach from the directory, with your name and what you wrote.
- Questionnaire and health profile: date of birth, sex (optional), height, weight and units; your goals and motivation; your experience with nutritionists; your lifestyle (activity, exercise, sleep, work pattern, stress, alcohol, smoking); your eating pattern and preferences, including any religious or cultural fasting you mention; allergies and intolerances; diagnosed conditions, medications, pregnancy or breastfeeding and recent surgery; a five-question eating-disorder screening (SCOFF); and your answers to your coach's own questions. Each change is kept as a dated version.
- Progress: check-ins and your answers, weight and body measurements, wellbeing, non-scale victories, daily ratings, habits and badges.
- Photos: progress photos (only with your photo consent), meal photos and notes, and your profile photo.
- Messages: your chat with your coach, including photos, videos and voice messages. AI also writes down a client's voice messages for the coach (see AI assistance).
- Your coaching: your program and its steps, your nutrition plans with pictures of their meals, your shopping lists, consultations (date, time, type, meeting link and what your coach publishes afterwards), the library items your coach shares with you, and your acceptance of your coach's collaboration agreement.
- What your coach keeps about you: their private notes, drafts, AI summaries and suggested replies, and risk and safety flags (see Safety checks). You don't see these in the app, but while you're connected you can ask your coach for them.
- After coaching ends: your coach keeps your name, the dates you worked together and how coaching ended, for 3 years, unless they remove them sooner. This stays even if you delete your account. What your coach wrote only for themselves about you stays stored where nobody can read it, until you delete your account or your coach deletes theirs; your coach sees it again only if you go back to them.
Much of this is health data, which the GDPR protects as a special category. It's used only with your explicit consent (see Health data).
Coaches
- Profile and brand: your name, title, specialties and photo, and your brand name, logo and colour, which your clients see.
- Directory listing, if you ask to be listed: your presentation texts, photos and video or YouTube link, and your phone number if you give one.
- Your practice: your collaboration agreement, program, plan and habit templates, sample plans (AI reads an uploaded PDF to import it, and the PDF is deleted afterwards), meal pictures you add, library items and frequent questions, saved replies and scheduled messages, your consultation availability and the invitations you send.
- Subscription: the store, your tier, its dates and status, and the store's transaction and order IDs. Apple and Google take the payment; we never see your card details.
- Registration: the registration code you used. The coach who gave it to you can see that it was used.
People choosing a coach
If you browse the coach directory, we keep the requests you send to coaches (your name and what you wrote) and any report you make about a coach's presentation (the reason and your note). When you reveal a coach's phone number, we count it, to limit how many numbers one person can reveal in a day; the coach isn't told who revealed it.
People who ask to be contacted
If you'd like to coach on Mealstone and ask us to contact you, we get your name, phone number, email address (if you give one) and what you'd offer, with the app's language, the platform and the app version. No account is created.
Technical and security data
- App checks: to make sure requests come from the genuine app, Mealstone uses Firebase App Check with Apple's and Google's device checks and, in the coaches' web app, Google reCAPTCHA Enterprise. These look at your device and the app, not at your coaching data.
- Network address: our servers' logs include your device's IP address. For the few things that work without signing in, such as checking an invitation code, we limit how often one network can try by keeping a scrambled form of its address, never the address itself.
- AI usage records: which AI feature was used, for which coach and client, with which model and how much text went in and out, but never the content.
Crash reports and usage statistics
We use these to fix problems and to see which parts of Mealstone help people and which don't. Neither ever contains your name, your account, your health information, your messages, your photos or anything you typed.
- Crash reports: when the iPhone or Android app crashes or meets an unexpected error, it sends a report through Google's Firebase Crashlytics: the kind of error and where in the app's code it happened, the device model, its system and the app's version, the last screens opened, named by their kind (such as "a client's page", never which client), and whether the app is used as a coach or a client, in which language, and whether a member of our team was viewing it (see Who can see your data). Crashlytics gives the app on the device a random identifier that isn't your account. The coaches' web app sends no crash reports.
- Usage statistics, only if you say yes: when you join or register, the app asks whether you'd like to help improve Mealstone, unticked; you can change your mind at any time with Share usage data in More, under Privacy. With it on, the app sends Google Analytics for Firebase which screens are opened (by their kind, as above) and which features are used, such as that a meal was logged, with or without a photo, or that a message was sent, never what it says. Google gives the app on your device a random identifier for this, which isn't your account and isn't an advertising identifier. Turning it off stops the statistics and deletes that identifier with what the device kept for them. The choice belongs to the device or browser: elsewhere you're asked again.
- While a member of our team views the app as you, no usage statistics are sent.
What we don't collect: your location (we remove it from photos before they're uploaded), your contacts or advertising identifiers. We don't use advertising or tracking tools, and the app links no advertising frameworks. If you let your phone share diagnostics with app developers, Apple or Google may also send us crash reports that don't identify you.
5. Why we use it, and our legal basis
| What for | Legal basis under the GDPR |
|---|---|
| Providing Mealstone: accounts, connecting coaches and clients, the coaching tools, notifications and reminders | Our contract with you (Art. 6(1)(b)) |
| Coaching with your health data, including AI assistance and safety checks | Your explicit consent (Art. 9(2)(a)), which you give your coach in the app |
| Progress photos | Your explicit consent, which is optional |
| Your coach using your before-and-after comparison on social media | Your separate consent, which is optional (Art. 6(1)(a)) |
| Coaches' subscriptions and billing records | Our contract; our legal obligation to keep accounting records (Art. 6(1)(c)) |
| The coach directory, coaches' phone numbers and reports about presentations | Our contract; our legitimate interest in keeping the directory trustworthy (Art. 6(1)(f)) |
| Requests to be contacted | Steps you ask us to take before a possible contract (Art. 6(1)(b)) |
| Feedback about the app | Our legitimate interest in improving Mealstone (Art. 6(1)(f)) |
| Crash reports | Our legitimate interest in keeping Mealstone working (Art. 6(1)(f)); they hold no health information |
| Usage statistics | Your consent, which is optional and given on each device (Art. 6(1)(a)); you can withdraw it at any time in More, under Privacy |
| Security: app checks, usage limits and server logs | Our legitimate interest in protecting Mealstone and the people who use it from abuse (Art. 6(1)(f)) |
| Records of consents and accepted agreements | Our legal obligation to be able to show what you agreed to (Art. 6(1)(c), with Art. 7(1)) |
Where we rely on a legitimate interest, you can object (see Your rights).
6. Your consents
Before you enter any health information, the app asks you to confirm you're 18 or older and to accept the terms, this notice and the health data consent. Progress photos and sharing on social media are optional and asked separately. You can change any of these at any time in More → Privacy, and each decision is saved with the date and the version of the text you saw.
Sharing usage statistics is a choice of its own, also optional, in More under Privacy. It is kept on your device rather than with your account (see Crash reports and usage statistics).
Health data (needed for coaching)
You agree that your coach can see and use the health information you give in Mealstone (your questionnaire and profile, check-ins, weight and measurements, meals, wellbeing, daily ratings, habits and messages) to coach you. This includes the AI assistance and the safety checks described below. Your data is stored in the EU.
You can withdraw this consent at any time. Your coach can only work with you if they can see your health information, so coaching in the app then ends: you're disconnected from your coach, and progress photos and sharing on social media end with it. Your data stays yours: you can ask for a copy or delete your account. Withdrawing doesn't affect what was done before.
Progress photos (optional)
- Photos can show who you are. Only you and your coach can see them.
- They're never sent to AI, never shown in notifications and never shared through public links. The app shows them only to signed-in people allowed to see them, and keeps them in memory rather than saving them on the device.
- Location and device details are removed before upload. On Android, screenshots are blocked on screens that show them; in the coaches' web app they stay blurred until tapped.
- You can delete any photo, and it's removed at once. If you turn this consent off, all your progress photos are deleted once you confirm.
Sharing on social media (optional)
With this consent, your coach can export your before-and-after comparison as an image and use it in their social media posts. It needs progress photos to be on. Your coach publishes the posts and is responsible for them. The app doesn't blur or hide faces, and before each export it reminds your coach that hiding your face is up to them. We record each export.
If you withdraw this consent, your coach can't export new comparisons from that moment, and we tell them to take down posts that use your photos. We can't remove posts from social media ourselves.
7. AI assistance
AI helps your coach. It works from your coach's own points and the information already in Mealstone, and it's instructed not to add advice or facts of its own.
Mealstone uses Google's Gemini models through Google Cloud's Vertex AI, in the EU: Google's EU service keeps the processing inside EU member states. Google's terms forbid it from using this data to train its models.
- Nothing AI writes reaches you until your coach has read it, changed it if needed, and published or sent it. From then on it's your coach's text, and your coach is responsible for it. There are three exceptions:
- library items your coach has saved are translated into your language and labelled “Translated automatically”, with the original one tap away;
- in your shopping list, AI groups the food names of your plan and estimates typical weights, so the app can add up the quantities;
- the meals in your plan can show pictures, made by AI from the dish's name or added by our team, and marked when AI made them. A picture can appear after your coach has published the plan, and your coach can replace it with their own.
- AI never messages you, and progress photos never go to AI.
- Your coach can turn AI off and write everything themselves. AI review summaries are off for profiles that need extra care (see Safety checks). AI doesn't write meal plans: your coach does.
- What AI writes about you is for your coach: summaries and descriptions are stored where only your coach can read them, and transcripts of your voice messages are kept with the messages and shown in the app only to your coach.
| What AI helps your coach with | What it uses |
|---|---|
| Feedback on a check-in | Your coach's points and a summary of the check-in |
| A summary before your first call | Your questionnaire |
| A weekly digest | Your check-ins, trends, habits and meals |
| Food diary summaries and descriptions of what's on a plate | The meals in your food diary: times, notes and meal photos |
| Summaries for your coach's reviews | Your questionnaire, allergies and preferences, your check-ins, daily ratings, meals and messages since the last review, and your current plan |
| A final report at the end of your program | Your starting and final checks, check-ins and daily ratings, never photos |
| Replies and suggested replies | Your recent messages, your current plan and your coach's earlier answers to similar questions |
| Written transcripts of your voice messages, which the app shows only to your coach | Your voice messages to your coach; your coach's voice messages to you aren't written down |
| Warning-sign checks | What you write in check-ins, meal notes, messages and your profile, and the transcripts of your voice messages |
| Your coach's answer memory | Your question and your coach's answer, rewritten without anything that identifies you, so your coach can reuse their own answer for another client |
| Your shopping list | Only the food names in your plan |
| Translations | Only your coach's library items |
| Pictures of your plan's meals | Only the dish's name and its foods, never amounts or anything about you. A dish has the same picture for every coach whose plans include it. |
| Importing a coach's sample plan | Only the plan the coach uploads |
So that the same request isn't sent twice, an AI request and its answer are kept for up to 7 days, and so are suggested replies. Usage records, which hold no content, are kept for 12 months.
Neither AI nor the app's checks make decisions about you on their own: your coach decides.
8. Safety checks
Coaching can touch on difficult things, so the app helps your coach notice when you might need extra support:
- Some answers in your questionnaire, such as pregnancy, certain medications or health conditions, a low BMI or a positive eating-disorder screening, and a fast fall in your weight, show your coach a flag so they can take extra care. For these profiles, AI review summaries are turned off.
- What you write in check-ins, meal notes, messages and your profile, and the transcripts of your voice messages, is checked against word lists, and when those aren't sure, AI classifies what was written. A new flag goes to your coach.
- Only your coach sees flags, never you, and flags don't decide anything on their own.
- If something you write suggests you might be in crisis, the app shows you at once a message with emergency and helpline numbers for your country. That message is fixed text, never written by AI.
Mealstone isn't a medical service, and nobody watches it around the clock. For urgent medical help, call 112.
9. Who can see your data
- Your coach, only while you're connected. A new coach can't see anything from before you joined them. When coaching ends, your coach loses access at once, and you keep your data.
- Nobody else using Mealstone. Other clients and coaches can't see your data. Signed-in people can see the presentations of listed coaches, with their phone numbers partly hidden until revealed.
- Our team, only when needed to run, support or secure Mealstone, or when the law requires it. To help with a problem you or your coach report, a team member may view the app as you see it, without being able to change anything, for at most 30 minutes; each time is recorded with who viewed whom and why, and the record is deleted after a year.
- Service providers working for us, under contracts that let them use the data only to provide their service:
- Google (Firebase and Google Cloud): database, file storage, server functions, sign-in, notifications, app checks, web hosting, AI through Vertex AI, crash reports (Firebase Crashlytics) and, if you say yes, usage statistics (Google Analytics for Firebase), which we've set up so that Google may not use them for advertising;
- Apple: delivering notifications to iPhones and iPads;
- Companies whose services you choose to use, under their own privacy policies: Apple and Google when you sign in with them or buy a subscription in their stores, and when they check that the app is genuine; YouTube when you play a video a coach has shared (YouTube receives your IP address and details of your device); and WhatsApp, your phone or the video call service your coach uses, when you call, message or join a consultation.
- Authorities, when the law requires it.
We don't sell personal data, and we don't share it for advertising.
10. Where your data is stored
Your profile, coaching data, photos and messages are stored with Google Cloud in the Netherlands (region europe-west4), and AI runs in the EU. A few services work outside the EU:
- Sign-in: Google runs Firebase Authentication from data centres in the United States. It holds your name, email address, how you sign in, and the IP address and device details of your sign-ins, but none of your coaching data.
- Notifications: push notifications go through Google's Firebase Cloud Messaging and, on iPhone, Apple's push notification service, which work worldwide. Our notification texts never include weight, measurements, photos or health terms. Message previews are on unless you turn them off; while they are on, the first 80 characters of each message pass through these services. A notification can also show the sender's profile photo or the coach's logo.
- App checks and web pages: Firebase App Check and Firebase Hosting work worldwide.
- Crash reports and usage statistics: Firebase Crashlytics and Google Analytics for Firebase process them in Google's data centres, which include the United States. They hold none of your coaching data.
These transfers are protected by the EU–U.S. Data Privacy Framework, under which Google is certified, and by the European Commission's Standard Contractual Clauses.
11. How long we keep data
| Data | How long |
|---|---|
| Your account and everything in it | Until you delete your account. Deleting it removes your data from our database and file storage at once, and from our backups within 7 days. The few records below stay for the time they give. |
| A photo you delete | Removed at once |
| Progress photos, when you turn photo consent off | Deleted once you confirm |
| Your data after coaching ends | Your coach loses access at once; you keep it until you delete your account |
| Your name, the dates you worked with a coach and how coaching ended, in that coach's list of former clients | 3 years after coaching ends, unless your coach removes them sooner. They stay if you delete your account. |
| What your coach wrote only for themselves about you, after coaching ends | Until you delete your account or your coach deletes theirs |
| Your requests to coaches in the directory | Until you delete your account |
| Consent records and accepted agreements | Until you delete your account |
| A note that you asked for a copy of your data or for deletion, and when we did it | 3 years after the request |
| Records of a team member viewing the app as you | 1 year |
| Coaches' subscription and purchase records | As long as accounting law requires, also after the account is deleted |
| Subscription events for our team | 90 days |
| Requests to be contacted | 90 days |
| Feedback | Until the account that sent it is deleted |
| AI answers and suggested replies | Up to 7 days |
| AI usage records, which hold no content | 12 months, also after the account is deleted |
| Crash reports | 90 days |
| Usage statistics | 2 months, or until you turn them off on the device |
| Server logs, including IP addresses | About 30 days |
| Scrambled network addresses and counters for usage limits | At most 2 days |
| Notification tokens | Until a token stops working or the account is deleted |
12. Your rights
You have the right to:
- get a copy of your data, in a common, machine-readable format you can take elsewhere;
- have data that's wrong corrected;
- have your data deleted;
- restrict how your data is used, or object to it, in particular where we rely on a legitimate interest;
- withdraw any consent at any time, without affecting what was done before.
You can do most of this in the app: More → Privacy has your consents, a request for a copy of your data, which we send you within 30 days, and Delete my account. You can correct your profile yourself. For anything else, write to support@fluttech.com.
Your coach is responsible for your coaching data, so you can also ask them directly. If you ask us, we pass your request on and help them answer it. We reply within one month; if a request is complex, we may take up to two more months and tell you why. We may ask you to confirm it's you.
You can also complain to a data protection authority: in Romania, the ANSPDCP; in Hungary, the NAIH; or the authority where you live or work.
13. Deleting your account
Coaches and clients can delete their account at any time in More → Privacy → Delete my account, or by email. Delete your account explains how, and what is deleted and kept. A coach's clients are disconnected first and keep all of their own data. Coaches who pay for a subscription should cancel it in the App Store or Google Play first: deleting the account doesn't stop the store from charging them.
14. How we protect your data
- Data is encrypted in transit and at rest.
- Access rules on our servers let only you and your connected coach reach your data, and only our server functions can publish to you, record consents or manage subscriptions.
- Progress photos, meal photos and photos in chat are never shared through links: only signed-in people allowed to see them can open them.
- Our notification texts never show health details. Message previews show the start of a message, and you can turn them off.
- App checks block requests that don't come from the genuine app.
- The database is backed up every day, and each backup is kept for 7 days.
- Our team can reach only what their work needs. If a breach puts your data at risk, we act at once and inform the authority, your coach and you, as the law requires.
15. Permissions the app asks for
- Camera and photos: to take or choose progress photos, meal photos, your profile photo or logo, and a coach's presentation photos and video. You decide each time.
- Microphone: only while you record a voice message in the chat, or a coach records their presentation video.
- Notifications: for messages, reminders and updates. You choose which ones in the app, and set quiet hours.
The app doesn't ask for your location or your contacts, and doesn't track you across other apps or websites.
16. Our web pages and the coaches' web app
Our web pages (invitations, account deletion and this notice) set no cookies and use no analytics. Google's Firebase Hosting, which delivers them, processes your IP address to do so and keeps it for a few months.
The coaches' web app keeps your sign-in in your browser's storage, so you stay signed in; it can't work without that. It uses Google reCAPTCHA Enterprise to check that a person, not an automated program, is using it: reCAPTCHA collects information about your device and browser and sends it to Google, under Google's Privacy Policy and Terms of Service. The web app also loads its graphics engine and some fonts from Google's servers, and an image-cropping tool from Cloudflare's; both receive your IP address to deliver them.
The coaches' web app sends no crash reports. If you say yes to usage statistics there (in More, under Privacy), it uses Google Analytics, which then sets its own cookies (_ga and _ga_…) in that browser; without your yes it sets none and sends nothing. The pages it reports are named by their kind, never by their address, which can hold the IDs of your clients.
17. Age
Mealstone is for adults: everyone using it confirms they're 18 or older. If we learn that someone younger has an account, we delete it.
18. Changes to this notice
When we change this notice, we update the date at the top and tell you in the app or by email before the change applies. If a change affects something you consented to, we ask you again.
19. Contact
MJK APPS SRL
Str. Islazului 24, 435100 Baia Sprie, Maramureș, Romania
Trade register J2019000866242 · CUI RO40832934
support@fluttech.com