Legal
Privacy Policy
This Privacy Policy explains how MealSecretary — Institutional Meal & Catering Management (“MealSecretary”, “we”, “us”) collects, uses, shares and protects personal information when you use our website and the MealSecretary platform.
Who is responsible
For your own account and personal records, MealSecretary is the controller. When an organization (for example your employer, school or hospital) manages your membership, meals, charges or payroll records, that organization is the controller of those institutional records and MealSecretary processes them on its behalf. See our Data Processing page.
Information we collect
- Account information: name, email address and/or mobile number, country, username, password (stored only as a one-way hash) and preferences.
- Membership information: organizations you belong to, Employee, Student or Patient IDs, departments, locations, roles and cards, provided by you or your organization.
- Meal information: Meal Program enrollment, meal status, pauses, orders, serving records, corrections and related charges and payroll deductions.
- Security information: sign-in sessions, devices, verification attempts and audit records of important actions.
- Website information: messages you send through our contact form and basic technical data needed to operate and secure the site.
How we use information
- To provide MealSecretary: manage meals, serving, charges, payroll records and notifications.
- To verify identity, keep accounts secure and prevent misuse.
- To link existing records to your account when you claim them, without creating duplicates.
- To bill organizations for subscriptions.
- To answer your questions and improve our services.
Sharing
Institutional records are visible to people your organization authorizes. Personal nutrition records are private unless you choose to share them. We use service providers for hosting, email and SMS delivery under contracts that protect your data. We do not sell personal information.
Retention
We keep information while your account or membership is active and as long as needed for the purposes above, including legal, payroll and audit obligations. Audit records are kept so that past serving, charges and approvals remain verifiable.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain processing. Requests about institutional records may be passed to the organization responsible for them. Contact us at shahid.javir@gmail.com.
Security
We use verified sign-in identifiers, hashed passwords, rate limiting, scoped roles and permissions, session controls and an append-only audit history. Read more on our Security page.
Changes
We may update this policy. The date at the top shows the latest version. Significant changes will be announced in MealSecretary.