Privacy policy

Effective Date: July 29, 2026

This Privacy Policy describes how Smarteat Inc. ("SmartEat," "we," "us," or "our") collects, uses, shares, and protects personal information in connection with your use of the SmartEat platform, including the websites smarteat.app, subs.smarteat.app, and subs.mealplanform.com, and related products and services (collectively, the "Service").

This Privacy Policy is a binding part of our agreement with you. By using the Service, you acknowledge that you have read and understood this Privacy Policy.

Who We Are
Information We Collect
How We Use Information
How We Share Information
Cookies and Similar Technologies
Children's Privacy
California Privacy Rights (CCPA / CPRA)
Rights of Users in the European Economic Area (GDPR)
Information Security
Data Breach Notification
Third-Party Links
Do Not Track Signals
Email Marketing
Changes to This Privacy Policy
Contact Us

1. Who We Are

Smarteat Inc. is a Delaware corporation with its principal place of business at 447 Sutter St, Ste 405 PMB 77, San Francisco, CA 94108. SmartEat operates the Service. For privacy-related questions, contact us at support@smarteat.app.

2. Information We Collect

2.1. Information You Provide Directly

When you use the Service, you may provide us with the following categories of information:

Identifiers: name, email address, phone number, account username, and account password.
Body metrics: height, weight, age, biological sex.
Fitness self-assessment: fitness goals (such as fat loss, maintenance, or muscle gain), training frequency, fitness level, daily activity level.
Health-related sensitive information: pregnancy and breastfeeding status (none, pregnant, breastfeeding 1–6 months, breastfeeding 7–12 months). This category is treated as sensitive personal information under the California Privacy Rights Act and as special category data under the EU General Data Protection Regulation. We collect this information only to generate an appropriate meal plan.
Food preferences: selections related to carbohydrates, bread, dairy, eggs, nuts, dried fruits, vegetables, treats, protein supplements, snacks, and dishes; meal selection for the upcoming week.
Payment information: payment card information is collected and processed directly by our payment processor, Stripe. SmartEat does not store full card details on its own systems.
Business User account information (if applicable): business name, business type, logo, profile photo, intro text, and Stripe Connect account details.
Communications you send to us: support requests, feedback, and similar messages.

2.2. Information Collected Automatically

When you use the Service, we automatically collect certain information about your device and your interactions, including IP address, browser type and version, operating system, language preferences, the pages of the Service you visit, the time spent on those pages, the content you interact with, access times and dates, and similar usage statistics. This information is collected through cookies, similar technologies, and server logs.

3. How We Use Information

We use the information we collect for the following purposes:

To create and manage your account.
To generate and deliver Meal Plans based on your Online Questionnaire responses.
To process payments, payouts, and refunds through Stripe.
To send transactional and service-related communications (such as confirmation that a questionnaire was received, that a plan is ready, billing notifications, and security messages).
To respond to your inquiries and provide customer support.
To monitor, secure, and improve the Service, including diagnosing technical problems and preventing fraud or abuse.
To send marketing and product communications, including but not limited to promotional offers, product updates, re-engagement messages, win-back communications, and similar outreach. You may opt out of marketing communications at any time, but transactional and service-related communications will continue.
To analyze usage of the Service, understand user behavior, improve product features and content, and conduct session replay analysis. We use product analytics, web analytics, and session replay tools (described in Section 4.2) for these purposes.
To enforce these Terms, comply with legal obligations, and protect our rights and the rights of others.
For other purposes consistent with the Service we provide and your reasonable expectations as a user.

We use sensitive personal information (pregnancy and breastfeeding status) only for generating the Meal Plan and not for any other purpose.

4. How We Share Information

4.1. Sharing with Business Users

If you are a Subscriber, the information you provide in the Online Questionnaire is shared with the Business User you have selected, for the purpose of preparing your Meal Plan. Specifically, the Business User can see your name, email, and full questionnaire responses, including body metrics, fitness self-assessment, food preferences, and pregnancy or breastfeeding status.

The Business User cannot see your full payment card details, which are handled directly by Stripe. Business Users are contractually obligated to use your information only for the purpose of providing the meal planning service to you and may not sell, share, or use it for marketing without your separate consent.

4.2. Sharing with Service Providers

We share information with third-party service providers who help us operate the Service. We share only the information necessary for them to perform their function, and they are contractually obligated not to use it for their own purposes. The categories of service providers include:

Payment processing: Stripe, Inc., for payment processing and Stripe Connect payouts.
Cloud hosting and infrastructure: DigitalOcean, LLC, for cloud hosting and computing infrastructure.
Email delivery: Amazon Web Services, Inc. (Amazon Simple Email Service), for sending transactional and service-related emails; and Astrodon Corporation (Loops), for sending marketing and lifecycle emails. Both providers process communications sent to Business Users and Subscribers. Loops does not receive Online Questionnaire responses or sensitive personal information.
Product and web analytics: Google Analytics (Google LLC), Mixpanel, Inc., and Fullstory, Inc., for understanding how users interact with the Service. Fullstory provides session replay technology that records user sessions (such as mouse movements, clicks, scrolling, and form interactions) for product improvement purposes.
Advertising platforms: Meta Platforms, Inc. (Facebook and Instagram, via Meta Pixel), for audience targeting, suppression of existing customers from acquisition campaigns, lookalike audience building, and measurement of advertising effectiveness.
Error tracking and monitoring: Functional Software, Inc. (Sentry), for error tracking and application monitoring.

4.3. Sharing with Advertising Platforms

We may share certain identifiers (such as hashed email addresses) with third-party advertising platforms (such as Meta, Google, and similar) for purposes including but not limited to: building custom audiences, suppressing existing customers from acquisition campaigns, building lookalike audiences for prospecting, and measuring advertising effectiveness.

4.4. Other Sharing

We may also disclose information when we believe in good faith that disclosure is necessary to:

Comply with a subpoena, court order, or other legal process;
Enforce our Terms or investigate potential violations;
Protect the safety, rights, or property of SmartEat, our users, or the public;
Investigate fraud or security issues.

If SmartEat is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4.5. Information We Do Not Sell

SmartEat does not sell personal information for monetary consideration.

5. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Service, remember your preferences, analyze usage, and support advertising. You can control cookies through your browser settings; however, disabling cookies may affect your ability to use certain features of the Service.

6. Children's Privacy

The Service is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child under 13 has provided personal information to us, please contact us at support@smarteat.app.

For users between 13 and 17 years of age, we recommend parental supervision when using the Service. If you are a parent or guardian and become aware that your child has provided us with personal information without your consent, please contact us so that we can take appropriate action.

7. California Privacy Rights (CCPA / CPRA)

This section provides additional disclosures and rights for California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"). This section applies to all California residents and is provided in accordance with our obligations as a California-based business; the rights described here are specific to California residents.

7.1. Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information, as defined under the CCPA:

Identifiers: name, email, phone number, account username, IP address, online identifiers.
Customer records: name, email, phone number, payment information (processed by Stripe).
Internet or network activity: browsing history within the Service, interaction with the Service, device and browser information.
Geolocation data: approximate location derived from IP address (not precise geolocation).
Inferences: inferences drawn from any of the above to create a profile of preferences and characteristics relevant to meal planning.
Sensitive personal information: pregnancy and breastfeeding status; health-related information collected via the Online Questionnaire (body metrics, fitness self-assessment) for the purpose of meal planning.

7.2. Sources of Personal Information

We collect personal information from the following sources:

Directly from you when you create an account, complete the Online Questionnaire, communicate with us, or otherwise interact with the Service.
Automatically from your device and browser when you use the Service (cookies, server logs, similar technologies).
From service providers acting on our behalf (such as Stripe for payment data).

7.3. Business Purposes for Collection

We collect and use personal information for the business purposes described in Section 3 above, including providing the Service, processing payments, supporting users, communicating with users, marketing, analytics, security, and legal compliance.

7.4. Categories of Third Parties

We disclose personal information to the categories of third parties described in Section 4 above, including payment processors, cloud hosting providers, email service providers, analytics providers (including session replay), advertising platforms, and error tracking services.

7.5. Sale and Sharing of Personal Information

"Sale" under the CCPA means disclosing personal information to a third party for monetary or other valuable consideration. "Sharing" under the CCPA means disclosing personal information to a third party for cross-context behavioral advertising.

SmartEat does not sell personal information for monetary consideration. SmartEat may share certain identifiers (such as hashed email addresses) with advertising platforms for cross-context behavioral advertising, as described in Section 4.3.

7.6. Use of Sensitive Personal Information

California residents have the right to limit the use of sensitive personal information to that which is necessary to provide the Service requested. SmartEat collects sensitive personal information (pregnancy and breastfeeding status, and health-related information from the Online Questionnaire) only to provide meal planning services and does not use it for purposes that would be subject to the right to limit (such as inferring characteristics or for advertising). Therefore, no additional limitation request is necessary; however, you may contact us at any time to confirm or object.

7.7. Your California Privacy Rights

As a California resident, you have the following rights:

Right to know: request information about the categories and specific pieces of personal information we have collected, the sources, the purposes for collection, and the categories of third parties to whom we disclose it.
Right to delete: request deletion of personal information we have collected, subject to certain exceptions (such as information needed to complete a transaction, comply with a legal obligation, or detect security incidents).
Right to correct: request correction of inaccurate personal information.
Right to opt out of sale or sharing: request that we not share your personal information for cross-context behavioral advertising.
Right to limit use of sensitive personal information: as described in Section 7.6.
Right to non-discrimination: we will not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us at support@smarteat.app. We may need to verify your identity before responding to your request. We will respond within the time period required by law.

7.8. Retention of Personal Information

We retain personal information for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically:

Account information: retained while your account is active and for a reasonable period after deactivation, to the extent required for tax, accounting, or legal purposes.
Online Questionnaire data: retained while your account is active. After account deactivation, retained only as required by law or for legitimate business purposes.
Payment information: retained by our payment processor, Stripe, in accordance with their retention policies and applicable financial regulations.
Communications: retained for a reasonable period to support continuity of customer service.
Server logs and analytics data: retained for a limited period for security, debugging, and product improvement, then aggregated or deleted.

8. Rights of Users in the European Economic Area (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and similar laws.

8.1. Legal Bases for Processing

We process personal information on the following legal bases:

Performance of a contract: to provide the Service you have requested.
Consent: for processing of sensitive personal information (pregnancy and breastfeeding status under GDPR Article 9(2)(a) — explicit consent), for marketing communications, and for non-essential cookies.
Legitimate interests: for analytics, security, fraud prevention, and improving the Service, where these interests are not overridden by your rights.
Legal obligation: where processing is necessary to comply with applicable law.

8.2. Your Rights

You have the right to:

Access the personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion (the "right to be forgotten").
Restrict processing of your personal information.
Object to processing based on legitimate interests, including direct marketing.
Receive your personal information in a portable format.
Withdraw consent at any time, where processing is based on consent.
Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@smarteat.app.

8.3. International Data Transfers

Your personal information may be transferred to and processed in the United States, where SmartEat is established. The United States may have data protection laws different from those in your country. Where required by law, we rely on appropriate safeguards for international transfers, such as the Standard Contractual Clauses approved by the European Commission.

9. Information Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, and destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Data Breach Notification

In the event of a data breach affecting your personal information, we will take reasonable steps to investigate and address the breach. Where required by law, we will notify affected users and applicable regulators within the time periods required by applicable law.

11. Third-Party Links

The Service may contain links to third-party websites or services that we do not own or control. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use.

12. Do Not Track Signals

Some browsers offer a "Do Not Track" signal. Currently, there is no industry-standard interpretation of this signal, and the Service does not currently respond to Do Not Track signals. As described elsewhere in this Privacy Policy, you may exercise specific privacy rights through the means we provide.

13. Email Marketing

If you receive marketing emails from us, you may unsubscribe at any time using the unsubscribe link included in each email or by contacting us at support@smarteat.app. Even if you unsubscribe from marketing emails, we will continue to send you transactional and service-related emails (such as confirmations, billing notices, and security alerts), as these are necessary for the operation of the Service.

In compliance with the CAN-SPAM Act, every marketing email we send identifies the sender, provides a clear way to opt out, and includes our physical mailing address.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this document. Material changes will apply only to your future use of the Service after the change takes effect. Your continued use of the Service after the Effective Date constitutes your acceptance of the revised Privacy Policy. We will make reasonable efforts to notify you of material changes.

15. Contact Us

If you have any questions about this Privacy Policy or our practices, or if you would like to exercise any of your privacy rights, please contact us:

Smarteat Inc.
447 Sutter St, Ste 405 PMB 77
San Francisco, CA 94108
Email: support@smarteat.app