Privacy policy

Last updated 29 September 2026

Menuday is operated by RapidRoute Transport LTD, a company registered in Cyprus (“we”, “us”). This policy explains what we collect when you use Menuday, why, and the choices you have. We follow the Australian Privacy Principles (Privacy Act 1988) for people in Australia and the GDPR for people in the EU.

What we collect

• Account: your e-mail address and the name you give us. We sign you in with a link sent to your e-mail; we never store a password.
• Your plan: what you tell us in the app — goal, eating style, foods you avoid, allergens, how often you eat out, the city and time zone you choose, meal choices, shopping lists, what you confirm you ate and drank, and reminder settings.
• Location: only if you turn it on, your approximate position is used to find restaurants near you. It is sent to OpenStreetMap (Nominatim) and Google Maps links open in your own maps app. You can turn it off at any time.
• Notifications: if you enable them, a push subscription token for your device.
• Payments: handled by Stripe. We store your Stripe customer and subscription identifiers and status — never your card number.
• Technical: standard server logs (IP address, browser, time) kept by our hosting provider, Cloudflare, for security and reliability.

Menuday is a meal-organisation tool, not a medical service. We do not ask for, and you should not enter, medical test results, diagnoses or medication in the standard version of the app.

Why we use it

• To build and show your daily plan, shopping list and restaurant suggestions.
• To send you the sign-in link, reminders you switched on, and essential service messages.
• To take payment for your subscription and issue receipts.
• To keep the service secure and fix problems.

We do not sell your data, and we do not use it for advertising. If you were invited by a nutritionist or coach (a “practice”), that practitioner can see whether you confirmed your meals and water each week — never your personal notes, allergens or health details.

Who we share it with

Only providers that run the service for us: Cloudflare (hosting and database, with data stored in Cloudflare’s global network), Stripe (payments), Resend (e-mail delivery), OpenStreetMap/Nominatim (place lookups when you use location). Each processes data only on our instructions. Some of these providers are outside Australia; we rely on their standard safeguards.

How long we keep it

For as long as you have an account. Delete your account from the Phone tab in the app and everything is removed immediately, except invoices we must keep for tax law (7 years) and short-lived server logs.

Your rights

You can download all your data (Phone tab → Download my data), correct it in the app, or delete your account at any time. You can also e-mail us at hello@menuday.app to access, correct or erase your data, or to complain. If you are in Australia and are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (oaic.gov.au); in the EU, your local data-protection authority.

Cookies

We use one strictly necessary cookie to keep you signed in. No tracking or advertising cookies.

Children

Menuday is for adults. We do not knowingly collect data from anyone under 18.

Changes

If we change this policy in a way that matters, we will tell you in the app or by e-mail before it takes effect.