1. Introduction

MealStack is operated by Workfile Solutions, a sole proprietorship of Navin Singh, based in Noida, Uttar Pradesh, India ("we", "us", "our"). On the Apple App Store, the MealStack app is listed under the name of its proprietor, Navin Singh. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our nutrition practice management platform, on the web and in the MealStack app. This policy applies to practitioners (dietitians, nutritionists, health professionals) and their clients who interact with the Platform.

2. Data We Collect

Practitioner Data

Account information (name, email, credentials), practice details (clinic name, specializations), billing information, and usage data (features used, login activity).

Client Data (entered by practitioners)

Personal details (name, contact, date of birth, gender), health information (medical conditions, allergies, medications, body measurements), dietary preferences, lifestyle data, and meal plan history. This data is classified as Sensitive Personal Data under applicable Indian law.

Client Data (entered directly by clients)

Through intake forms, the client portal and the MealStack app: personal details, health history, dietary preferences, food diary entries, progress photos, and messages to practitioners.

Your Sign-In (Workfile ID)

You sign in to MealStack with a Workfile ID, the one account Workfile Solutions uses across its products, MealStack and Workfile Store. It holds your name, email address, phone number if you add one, and your password, which is stored only as a secure hash. This policy covers it when you use MealStack; the Workfile privacy policy covers it when you use Workfile Store.

3. The MealStack App

The MealStack app for iPhone and Android is for clients of practices that use MealStack. Besides what you enter yourself, it can use the following, each only after you allow it. You can withdraw any permission at any time in your phone's settings.

Apple Health (iPhone) and Health Connect (Android). The app can read steps, distance, active energy, workouts, weight, body fat, sleep, heart rate, resting heart rate, heart rate variability, blood pressure, blood oxygen, respiratory rate and blood glucose. It can write the meals and water you log and the training sessions you finish. You choose which types to share. What you share is sent to MealStack so that you and your practice see your diet and fitness in one place.
Camera and photos. Used only when you take or choose a photo of a meal, a progress photo, or a document for your practice.
Motion. Used to count your steps during a guided walk, only while the walk is running.
Calendar. The app can add an appointment to your calendar when you ask it to. It cannot read your calendar.
Notifications. If you allow them, we store a push token for your device so that your practice's messages and reminders reach you.

The app keeps your sign-in in your phone's secure storage, and keeps copies of plan images and guide audio on your phone so they work offline.

4. Your Health Data

Health data from Apple Health, Health Connect, or anything you log is used only to provide MealStack to you and your practice. We do not sell it. We do not use it, or allow anyone else to use it, for advertising, marketing, or data mining, or for credit, insurance, or employment decisions. We share it only with the practice you are a client of, and with the sub-processors listed below that run the service for us. We do not store it in iCloud. Data from Health Connect is handled under Google's Health Connect permissions policy, including its Limited Use requirements.

5. How We Use Data

Providing and improving the Platform's nutrition practice management features
Generating meal plans, nutrition calculations, and AI-powered suggestions
Enabling client portal access and communication between practitioners and clients
Processing payments and managing subscriptions
Sending service-related notifications (not marketing)
Maintaining security and preventing fraud

6. AI Features & Data Processing

When AI features are enabled (requires separate consent), we send anonymized client data (age, gender, dietary preferences, nutrient targets, restrictions) to AI service providers for generating meal suggestions. Names, contact information, and identifying details are never sent to AI providers. AI providers do not retain data after processing. You can disable AI features at any time in Settings.

7. Data Storage & Security

Client records are stored in India, in the Mumbai region (AWS ap-south-1), and the application runs from the same region. Data is encrypted in transit and at rest. We use TLS, secure authentication and access controls. Media files are stored on Cloudflare R2 and delivered via its CDN, which caches files at edge locations worldwide. Database backups are encrypted and retained according to our data retention policy.

8. Data Sharing

We do not sell personal data. We share data only with: (a) service providers necessary to operate the Platform (hosting, payment processing, email delivery), (b) AI service providers when AI features are enabled, and (c) as required by law or legal process. We rely on each provider's data processing terms; the providers themselves are listed in the next section so you can assess them directly rather than take our word for it.

9. Who Processes Data For Us

These are the sub-processors that may handle personal data on our behalf. We publish the list rather than describe it in the abstract, because it is what any practice assessing us actually needs.

Supabase (AWS Mumbai) — primary database. All client records.
Vercel (Mumbai region) — application hosting.
Cloudflare — file storage (R2), content delivery, and bot protection.
OpenAI — powers Sage and other AI features. Content you send to an AI feature is processed here. AI features are opt-in per practice.
Resend — transactional email.
Upstash — caching and rate limiting.
Razorpay (India) and Dodo Payments (other countries) — subscription payments. They receive billing details, not client health records.
Google — sign-in, address lookup, and analytics on our marketing site.
Expo (United States): delivers notifications to the MealStack app. It receives your device's push token and the notification text.
Apple Push Notification service and Google Firebase Cloud Messaging: deliver notifications to iPhone and Android devices.

Every sub-processor we share personal data with is bound to protect it to the same standard as this policy. We update this list when it changes. If a practice needs advance notice of sub-processor changes, ask us and we will arrange it.

10. International Users & Cross-Border Transfers

If you use MealStack from outside India, your data and your clients' data is transferred to and stored in India. Some sub-processors above are established in the United States and process data there — most relevantly OpenAI, which handles the content of AI requests when those features are enabled.

We state this plainly because it is the question a practice outside India should be asking, and because we would rather you decide with the facts than discover them later. If your own regulator or professional body requires data to remain in a particular country, MealStack is not currently able to meet that requirement.

11. Data Controller & Processor Roles

Practitioners are the data controllers for their client data. MealStack acts as a data processor, processing client data on behalf of practitioners according to their instructions. Practitioners are responsible for obtaining appropriate consent from their clients and complying with applicable data protection laws.

12. Your Rights

Under India's Digital Personal Data Protection Act, 2023, you have the right to access your personal data, request correction of inaccurate data, request erasure, withdraw consent, and complain to the Data Protection Board of India.

We extend the same rights to everyone, wherever you are. Access, correction, erasure, export of your data in a portable format, and withdrawal of consent are available on request regardless of which law happens to apply to you — it costs us nothing to honour them uniformly, and we would rather not run two standards.

If you are a client of a practice rather than a practitioner, the practice controls your record and is the right first contact. Write to us if they cannot help and we will assist them in responding.

To exercise any of these, email info@mealstack.io. We aim to respond within 30 days.

13. Deleting Your Account

In the MealStack app, go to You, then Privacy and your data, then Delete your account. On the web, use the same option in your client portal, or email info@mealstack.io from the address on your account. How to delete your account explains each step.

When you delete your account, your access to every practice ends at once, and the app stops reading your health data and sending you notifications. Each of your practices receives a request to erase your records within 72 hours. Your Workfile ID sign-in is deleted, unless it is also used for something else, such as your own practice or a Workfile store, in which case it is kept and you are told why.

Data in Apple Health or Health Connect stays on your phone, under your control. To stop the app reading it, turn its access off in the Health app or in Health Connect.

14. Data Retention

We retain practitioner account data for the duration of the account plus 90 days after deletion. Client data is retained as long as the practitioner's account is active. When a practitioner deletes a client record, the data is permanently removed within 30 days. Consent audit logs are retained for 7 years for compliance purposes.

When a client deletes their account, their clinical records stay with each practice until the practice acts on the erasure request, because the practice is the data controller and may be required by law to keep some records. If a practice does not act on your request, write to us and we will follow it up.

15. Children

Clients under 18 use MealStack only with the consent of a parent or guardian, which their practice records.

16. Cookies & Analytics

We use essential cookies for authentication and session management. We may use analytics tools to understand Platform usage patterns. We do not use advertising cookies or trackers.

17. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform and may require re-acceptance.

18. Contact & Grievances

MealStack is operated by Workfile Solutions, a sole proprietorship of Navin Singh, Noida, Uttar Pradesh, India.

For privacy questions, to exercise your rights, or to raise a grievance under the DPDP Act, write to info@mealstack.io. If you are not satisfied with our response, you may complain to the Data Protection Board of India.