Privacy Policy

MealPoll (“we”, “us”, “our”) is operated by MealPoll, based in India. This policy explains what data we collect, why we collect it, and the choices you have.

• Account data: email address, full name, role (owner or customer), and a hashed password. Collected when you sign up.
• Mess membership: which mess you joined, when you joined, and whether your membership is active.
• Mess operations data (owners): mess name, address, meal prices, invite code, polling settings, and menu items.
• Meal responses: your daily yes/no votes, guest counts, and item customizations.
• Billing data: bills generated from your meal responses, payment records, and payment status.
• Device data: push notification tokens (to send you reminders), app version, and operating system. We do not collect device location or contact lists.
• Diagnostics: crash reports provided by the app stores (Google Play Console / Apple TestFlight), used solely to fix bugs.

• To provide the core service: meal polling, billing, notifications.
• To send transactional emails (sign-up, password reset, important account changes).
• To send push notifications about polls, menus, and bills.
• To improve and debug the app.
• To comply with legal obligations.

We do not sell your data, do not use it for advertising, and do not share it with third parties except as described below.

We rely on the following processors. Each handles a specific function and is contractually obligated to protect your data:

• Supabase — authentication, database, and file storage.
• Expo — push notification delivery.
• Razorpay — payment processing (when you make in-app payments).

When you join a mess, the mess owner can see your name, email, meal responses, guest counts, customizations, and billing status — because this is necessary to run the mess. They cannot see your password, data from other messes, or your activity outside their mess.

We keep your account data while your account is active. If you delete your account, we permanently delete your data within 30 days, except where retention is required by law (for example, tax records relating to payments may be retained for up to 8 years as required by Indian tax authorities).

You can, at any time:

• Access and export your data via Profile → Export My Data (JSON or CSV).
• Correct your name in the Profile screen.
• Leave a mess via Profile → Leave Mess.
• Delete your account via Profile → Delete Account. This is permanent and irreversible.
• Contact us at support@mealpoll.com for any other request.

MealPoll is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with information, contact us so we can delete it.

We use industry-standard practices: TLS encryption in transit, encrypted database at rest, hashed passwords, and row-level security to isolate each mess's data. No system is 100% secure — if we ever experience a breach affecting your data, we will notify you promptly.

Our servers are operated by Supabase and may store data in regions outside India. We rely on standard contractual clauses and our service providers' compliance with international data protection standards.

We may update this policy from time to time. Material changes will be announced in-app or via email. Continuing to use MealPoll after an update means you accept the revised policy.

Questions about this policy? Email support@mealpoll.com.