Privacy — Wanda's Meal Plan

This page explains what Wanda's Meal Plan collects, why, who helps us run it, and what you can ask of us.

Who we are

Wanda's Meal Plan is a meal-planning service run from the Netherlands. We decide how your personal data is used, so we are its controller under the GDPR. Write to us at [email protected] about anything on this page.

What we collect

Your account: your email address, your name if you give one, and a scrambled form of your password. We never store the password itself. We also note when you accepted our Terms, and whether you asked for news by email.
Your household: how many adults, your kids' age groups, portions, cooking times, region and time zone. Also your diet, proteins and dislikes, and allergies if you choose to save them.
Your recipes: the links and text you import, the pages we fetch for them, and their images.
Your plans: the dinners you plan, cook, skip and rate, and your grocery list.
How you found us: whether you signed up after visiting our Mealime page.
Technical data: our servers see your IP address while you use the site. We use it to block abuse and slow down repeated sign-in attempts. We don't store it with your account.

Why we use it

To run the service you signed up for: your account, household settings, recipes, plans and grocery list. The legal basis is our contract with you.
To send account email: sign-up codes, password resets and notices about your account. The basis is our contract with you.
To send news about Wanda, if you ask for it: new features and offers. We send it only if you tick the box at sign-up, and every news email has an unsubscribe link. The basis is your consent.
To keep Wanda safe and working: rate limits, bot checks, error reports and backups. The basis is our legitimate interest in a secure, reliable service.
To understand our audience: visit counts without cookies, and how people find us. The basis is our legitimate interest in improving Wanda.
To leave out recipes with your allergies. The basis is your explicit consent. The next section explains it.

We don't sell your data, show ads or share your data for advertising.

Automated decisions

Our planner suggests dinners from your settings, and you can change any of them. We make no automated decisions about you that have legal or similarly significant effects.

Allergies and health data

Allergies are health data under the GDPR. Washington State's My Health My Data Act calls them consumer health data. This section is our consumer health data privacy policy.

What we collect: the allergies you tick, such as peanut-free or gluten-free. We treat your diet and dislikes with the same care.
Where it comes from: only from you, during sign-up or in Settings → Diet & allergies.
Why: to leave out recipes that contain them. We use it for nothing else.
Consent: we save allergies only after you tick the box that agrees to it. That consent is separate from our Terms.
Who sees it: it stays in our database, hosted by DigitalOcean in Amsterdam, and in our backups at Cloudflare. We never send it to an AI model, never share it with any other company, and never sell it.
Withdrawing consent: clear your allergies in Settings → Diet & allergies. We delete them at once, and from our backups within about 45 days.
Your rights: you can ask to see or delete your health data at any time, as described below. If we refuse a request, reply to our answer to appeal. If we refuse again, Washington residents can complain to the Washington State Attorney General.

Who helps us run Wanda

These companies process data for us. Each one gets only what its job needs.

DigitalOcean hosts the site, the database and recipe images on servers in Amsterdam. Recipe images sit at web addresses that are hard to guess but not secret.
Cloudflare sits in front of the site and blocks bots. It runs the Turnstile check on sign-up and password reset, and stores our database backups.
Postmark sends our account email.
Zoho hosts our email inbox, so it holds the emails you send us.
Sentry receives an error report when something breaks. We set it to leave out cookies and passwords.
Anthropic runs the AI models that read the recipes you import, to tag them and tidy ingredient names. It gets recipe text only, never your allergies, diet or household. Anthropic doesn't train its models on this data.
Scrapfly fetches recipe pages from sites that block us. It receives the link only.
Simple Analytics counts page visits without cookies or personal data.

Each company works under a data processing agreement. Some are based outside the EU, most of them in the USA. Data reaches them under the EU–US Data Privacy Framework or the EU's standard contractual clauses.

Cookies

We use only the cookies the site needs to work, so we don't ask for consent in a banner.

Session: keeps you signed in, for up to 60 days. It also remembers if you visited our Mealime page before signing up, so we can count those sign-ups.
Security: one cookie protects our forms against forged requests. Cloudflare may set a short-lived cookie to tell people from bots.
Messages: carries a one-time note, such as "Saved", to the next page.
Region: if you pick a region on the homepage, we remember it for a year.

Our analytics set no cookies.

How long we keep it

Your account and everything in it: until you delete your account.
After you delete it: we remove it from our database within 30 days, and our backups expire within about 45 days after that.
Error reports and email delivery logs: Sentry and Postmark delete them after their own retention periods.

Your rights

You can ask us to:

show you the data we hold about you;
correct it;
delete your account and your household's data;
send you a copy of your recipes and data;
limit how we use it, or object to it;
withdraw any consent you gave, such as for allergies or news emails.

Email [email protected] from the address on your account. There is no delete button yet, so deletion also starts with an email. We answer within a month.

If you think we handle your data wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens. You can also complain to the authority where you live.

Data about other people

Your household settings describe the people you cook for. We store how many adults there are and your kids' age groups, not their names or birthdays. Only add allergies that the people concerned are happy for you to share.

Children

Wanda is for adults. Children appear only as the age groups a parent adds, never by name. If you think a child has signed up, email us and we delete the account.

Changes to this page

If we change this page in a way that matters to you, we tell you by email before the change takes effect.