Privacy Policy

1. Who this policy covers

This Privacy Policy explains how Munch Manager handles personal data when you use the app, website, PWA, and related services.

The administrator or operator of your Munch Manager deployment is the primary contact for privacy questions and requests.

2. Personal data we collect

We collect the data needed to provide a shared meal planning service.

• Account data, such as your name, email address, profile image, Clerk user identifier, approval status, and last seen time.
• Group data, such as group names, invite codes, membership, roles, and active group settings.
• Meal planning content, such as recipes, ingredients, pantry items, shopping lists, weekly slots, ratings, public recipe copies, uploaded images, notes, and ingredient requests.
• Device and app data, such as language, theme, default portions, install state, offline cache state, queued offline changes, and push notification subscription details.
• Technical service data, such as logs, request metadata, rate-limit counters, and security events needed to operate and protect the service. Optional product analytics data, such as pseudonymous user IDs and feature events, is collected only after you accept optional analytics.

3. How we use personal data

We use personal data to operate, secure, improve, and support Munch Manager.

• Authenticate users and verify access through Clerk and Convex.
• Show real-time shared planning data to the right group members.
• Store uploaded recipe and pantry images through Cloudflare R2.
• Generate optional AI features such as recipe imports, pantry scans, translations, and meal suggestions.
• Send push notifications when you opt in.
• Prevent abuse, investigate errors, apply rate limits, and maintain audit logs.
• Measure product usage with PostHog EU Cloud only if you accept optional analytics.
• Process billing, subscriptions, and legally required accounting records when paid plans are enabled.

4. Legal bases

Where the GDPR applies, we process personal data because it is necessary to provide the service you request, because we have legitimate interests in securing the app, because we must comply with legal obligations, or because you have given consent for optional features such as push notifications and product analytics.

5. Service providers

Munch Manager relies on specialist providers to run the service. These providers process data only as needed to provide their services.

• Clerk for authentication and user identity.
• Convex for application data storage, server functions, and real-time sync.
• Cloudflare R2 for image upload and storage.
• Stripe for payment processing, subscription management, tax calculation, and invoices.
• PostHog EU Cloud for optional product analytics events and error tracking after analytics consent.
• Google Gemini or similar AI providers for optional AI-assisted features.
• Web Push services provided by your browser vendor for push notifications.
• Open Food Facts as a source for public ingredient catalogue data.

6. Cookies, local storage, and offline data

Munch Manager uses necessary browser storage for authentication, security, preferences, PWA behavior, offline access, and queued offline changes. The analytics consent choice is also stored locally so the app can remember it.

Optional PostHog analytics is off by default. If you accept it, PostHog uses localStorage for a pseudonymous analytics identity and sends explicit product events and error-tracking data. Automatic interaction capture and session replay are disabled. If you later opt out, Munch Manager stops client analytics, resets the PostHog identity, and clears related PostHog client storage where available.

LocalStorage and similar browser storage are treated like cookies for optional analytics consent purposes. The app does not use advertising cookies.

If you clear browser storage, offline data and local preferences on that device may be removed.

7. Sharing

Your group content is shared with members of the same group. Public recipes you choose to publish may be visible to other users and can be copied into their own groups.

We do not sell personal data. We may disclose data when required by law, to protect the service, or during a business transfer subject to appropriate safeguards.

8. Retention

We keep account and app data for as long as needed to provide Munch Manager, meet legal obligations, resolve disputes, prevent abuse, and maintain backups.

We retain billing and accounting records for 10 years where required by law.

Deleted content may remain in backups or logs for a limited period before it is removed according to normal retention practices.

9. International transfers

Some providers may process data outside your country. Where required, transfers rely on appropriate safeguards such as contractual protections and provider compliance measures.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to processing of your personal data. You may also withdraw consent for optional features such as push notifications and product analytics.

You can download data linked to your account or permanently delete your account from the Account page. For other privacy requests, contact the Munch Manager administrator or support channel made available to you in the app.

11. Children

Munch Manager is intended for general household and group meal planning. It is not directed to children who are too young to consent to online services under applicable law.

12. Changes

We may update this Privacy Policy as the app, providers, or legal requirements change. The latest version will always be available on this page.