Privacy Policy

Last updated: October 6, 2026

Who handles your data

Pro Meal Plan LLC, a Delaware company in the United States, operates Promealplan. Contact hello@promealplan.com for privacy questions. We determine how account, billing, support and website data are used. For client information uploaded by a coach or coaching company, that organization determines the purpose of its coaching and we process the information to provide the service. Clients can contact their coach about those records or contact us for help identifying the appropriate contact.

Information we collect

Account and business information includes names, email addresses, login information, company details, preferences and subscription records. Coaches and clients may provide questionnaires, dietary preferences, goals, body measurements, notes, food and progress photos, meal plans, training records, files and videos. Optional fields can include health conditions and eating disorders. Technical information includes device and browser details, IP addresses, activity, diagnostic logs and, where applicable, advertising identifiers. Stripe processes payment details; we receive billing and subscription information.

Purposes and legal bases

We use information to provide accounts, coaching tools, client access, billing and support, and to maintain service security. Processing needed to deliver a contracted service relies on that contract. Legal obligations can require billing records. Security, service administration and defending claims may rely on legitimate interests, subject to applicable rights. Where consent is required for optional analytics, advertising or another use, that use requires the applicable consent. Accepting these terms or providing an email address is not consent to every processing activity.

Coaching information and sensitive data

Promealplan is intended for general fitness and nutrition coaching. It is not a medical record system or a service for diagnosing or treating medical conditions. Existing questionnaires and client records can contain health information. Coaches must limit what they collect, inform their clients and establish an appropriate legal basis and, where required, a separate condition for processing sensitive data. This policy does not obtain health-data consent from clients. Do not upload clinical records or information unnecessary for the coaching service.

Service messages and marketing

We send account, security, subscription and coaching-service messages needed to operate the service. Promotional communications are subject to applicable marketing rules and your choices. Use the unsubscribe link in promotional emails or contact hello@promealplan.com. Providing contact details alone does not constitute consent to promotional messages.

Service providers and sharing

We use Supabase for databases, authentication and file storage; Vercel for application and website hosting; Stripe for billing; Customer.io for coach emails and customer communications; Postmark for client transactional emails; PostHog for product analytics; and Sentry for diagnostics. Bunny Stream handles uploaded exercise videos. Website measurement and advertising integrations include Google, Meta and Ahrefs. Depending on the AI feature and configured provider, relevant prompts, text or photos may be sent to Anthropic, OpenAI or Google. Information shared with these services depends on the feature used. Client records are made available to authorized members of the coaching organization and to clients through their access to the service. Some published assets, such as branding and exercise images, use publicly accessible links. We may disclose information when legally required.

Hosting and international transfers

Our production user database and recipe database are hosted by Supabase in North Virginia, United States. The recipe database can also contain coach-created foods, recipes and meal-plan records. Customer.io and PostHog integrations use EU endpoints, but that does not mean all service data stays in Europe. Other providers, support operations and AI processing may involve other countries. We do not offer EU-only processing. Hosting location alone does not establish GDPR compliance. International transfers require an applicable legal mechanism and assessment; contact us for the current provider and transfer documentation.

Data processing agreements

A data processing agreement (DPA) sets out a processor’s duties when handling personal data for a customer. Supabase’s DPA is incorporated into its service terms. That provider agreement is separate from the agreement between Pro Meal Plan LLC and a coaching organization. Our customer processing agreement and transfer documentation are under review. Contact hello@promealplan.com to confirm the documentation available before using the service for processing that requires it. This privacy policy is not a signed customer DPA.

Security and access

We use authentication, role and client access rules, and private storage for selected client files and photos. Authorized coaching-team access depends on roles and client permissions. Publicly shared branding or exercise assets have different access settings. No service can guarantee absolute security. Do not include unnecessary personal or sensitive information in public assets or support messages.

Retention and deletion

Account and coaching records are generally retained while needed to operate the account and coaching service. Retention also depends on the record type, coach instructions and legal obligations. Some temporary logs and expired authentication data have scheduled cleanup; those schedules do not mean all data is deleted after one fixed period. Account deletion may require first deleting or transferring company data. Separate providers, stored files and backups can have their own retention and deletion processes. Billing records and information needed for legal claims may be retained. Contact us for a record-specific retention or deletion request.

Cookies and analytics

Essential cookies support login, security, language and service operation. Other technologies support usage analysis, experiments, advertising measurement and attribution. Cookie controls and defaults depend on region; where the consent banner is displayed, you can accept or customize the offered categories. Advertising integrations can receive identifiers and browsing or conversion activity. Cookie choices are distinct from promotional-email choices and health-data consent. Contact hello@promealplan.com to request assistance with changing or withdrawing a choice.

Access, export and other rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection and portability, and withdraw consent for processing based on consent. Email hello@promealplan.com with the request and the account or coaching organization concerned. We verify authority and scope before disclosing data; do not email passwords or unnecessary health details. A client may need to direct a request to their coach as the controller. We aim to respond within the applicable legal deadline, normally one month for GDPR requests, and will explain any permitted extension. You may complain to your supervisory authority, including the CNIL in France. Existing document exports do not provide a complete account archive. A complete self-service export of all records and files is not currently available; contact support for an access or portability request and confirmation of what can be supplied.

Policy changes

We update this policy when service practices or legal requirements change. The date above identifies the current version. Material changes will be communicated as required by applicable law.

Privacy contact

Email hello@promealplan.com. The operator is Pro Meal Plan LLC, United States. Tell us whether your request concerns your own account or records held by a coaching organization. We may request proportionate identity or authority verification.

California privacy requests

Advertising measurement may involve sharing identifiers and browsing or conversion activity with Google and Meta. Where California privacy law applies, you may request access, correction, deletion or an opt-out of sale or sharing, subject to the law’s conditions and exceptions. Email hello@promealplan.com with the subject “California privacy request.” You can also use the cookie controls offered on this site. We do not charge or discriminate for exercising applicable privacy rights. An opt-out request is separate from canceling a subscription.