Menuli Consumer Health Data Privacy Policy
Effective date: October 20, 2026 (updated October 28, 2026, and November 11, 2026: the app's name, Menuli)
This policy explains how Menuli handles consumer health data as defined by the Washington My Health My Data Act, Nevada's consumer health data law and similar U.S. state laws. It supplements our Privacy Policy.
Menuli is provided by Juan Francisco Jiménez Martín (juanfrandevs), an independent developer in Spain. Contact: juanfrandevs@gmail.com.
1. Categories of consumer health data we collect, and why
| Category | What it is | Why we collect it |
|---|---|---|
| Food allergies and dietary restrictions | Allergens, "gluten-free", "lactose-free" and ingredients that someone in your household can't eat. They are household rules: they don't say who they belong to | To leave out recipes that contain them when we build your weekly menu, shopping list and batch-cooking session, and (only if you agree) to keep them in your account so they reach your other devices and to count them, aggregated and anonymously (never groups of fewer than 10 accounts), to add recipes that respect them |
| Body data and "My goal" | Year of birth (we ask for your age or date of birth to check you're an adult, but keep only the year), sex used by the formula, height, weight, activity level, goal, pace, a target you set by hand, the resulting calorie and protein targets, how you want logging to look (for example "no numbers" or "I just want to log, no target", never the reason), and the safety review: whether we raised your target and to how much, the pending safety notice (for example that your weight is dropping fast or that what you log is often below the minimum) and its dates | Only with your health consent: to estimate your calorie and protein targets, adjust portion sizes in your menus, and raise your target if your weight drops too fast |
| Food log | What you log that you eat: day, meal, dish, serving, calories and macros, and the time you log it; for "something off the menu", the name you type and, if you enter them, its calories and macros; and the days you mark as complete | Only with your health consent: to show you your day and your week compared with your target, and for the safety notices |
| Weight | Each weigh-in you log (day and kilos) | Only with your health consent: to show you your weight trend and for the safety notices |
We do not collect any other health data and we never use this data for advertising or send it to our analytics or crash-reporting providers. Only if you agree to it separately, what you type to “Work it out with AI” when logging something off the menu goes to OpenAI to estimate its calories (see Processors); nothing else of this data goes to an AI provider. Before estimating, OpenAI's moderation filter and the model check whether that text speaks of self-harm or of not eating, only to show where to find help instead of figures; the result of that check is not kept or shared. We do not diagnose anything. On your phone, the app works out your weight trend and, once a week, checks whether your weight is dropping faster than is prudent or what you log is often below the minimum; then it may raise your target or suggest you talk to your doctor, and it always tells you.
2. Sources
You type this data into the app yourself. We get it from no other source.
3. Consent
- Allergies and restrictions always work on your phone. They are only stored on our servers if you agree, in a separate consent shown when you save them, which you sign electronically («I agree and sign electronically»); we keep the version, the time and a fingerprint of the exact text, and you can see it again in Profile → Privacy and consent.
- They are household rules, without saying whose they are. If any belongs to someone else at home, the consent includes your statement: for someone under 14, you agree as their parent or guardian; someone 14 or older has told you they agree and you have shown them this information. If you can't confirm it, they stay on your phone only. If you are one of those people, you can ask the person who uses the app to remove them or withdraw the consent, or write to us.
- Body data, your food log and your weights are only collected with your health consent, separate from the allergies one, which you sign electronically before you save "My goal" or log for the first time. It lists what the data is used for. Without it nothing is logged, not even on your phone only, and our servers reject that data.
- Notifications (optional reminders, off by default, and app news only if you opt in) never carry health data, and who receives a news item is never chosen by health data.
- Each consent screen says what is collected, why, and how to withdraw it. You can withdraw either consent at any time in Profile → Privacy and consent; withdrawing deletes the data from our servers at once (withdrawing the health consent also deletes your target, body data, food log and weights from all your devices when they sync).
4. Sharing
- We do not sell consumer health data, and we do not share it with third parties or affiliates for their own purposes.
- Processors: the data stored with your consent is held for us, under contract, by Supabase, Inc. (database hosting, stored in the European Union). It is not sent to our analytics or crash-reporting providers. OpenAI, L.L.C. (US) receives, only if you agree to “Work it out with AI” and each time you tap it, the text you typed, the language and the meal, without your identifier; it may keep it for up to 30 days to monitor abuse and doesn't train on it. No other AI provider receives it.
- Legal requests: we would only disclose it if required by law or a court order.
5. Your rights
You have the right to:
- confirm whether we collect, share or sell your consumer health data, and access it, including a list of all third parties and affiliates with which we have shared it;
- withdraw your consent at any time (Profile → Privacy and consent);
- have it deleted, on our servers and in our processors' systems, including backups (backups are overwritten within 30 days). You can delete your whole account at once in Profile → Delete my account and data, delete only the health data by withdrawing the consents above, or delete just your food log or your weights with one tap in Diary → ⚙ How logging looks (also in Profile → My goal);
- get a copy of your food log and your weights as two CSV files (the log and the weights), in the same place.
How to exercise them: in the app as described, or by emailing juanfrandevs@gmail.com. Because accounts have no name or email unless you link one, we may ask you to send the request from the app (Profile → Report a problem) so we can tell which account is yours. We respond within 45 days, which we may extend once by another 45 days when reasonably necessary, telling you why. Exercising these rights is free.
Appeals: if we decline your request, you can appeal by replying to our answer. We will decide within 45 days (60 days for Connecticut residents) and explain our decision. If we deny your appeal, we will tell you how to contact your state Attorney General (in Washington, atg.wa.gov/file-complaint).
6. Changes
If we change this policy, we will update the effective date above and tell you in the app before any material change applies. We will ask for your consent again before using consumer health data in a materially different way.
7. Contact
Juan Francisco Jiménez Martín — juanfrandevs@gmail.com — Avda. Hernán Núñez de Toledo 12, 29018 Málaga, Spain.