Privacy Policy

This Privacy Policy explains how MessMeal ("we", "us", "our") collects, uses and protects your information when you use our website and application at messmeal.com (the "Service"). By using the Service, you agree to the practices described here.

Account information. When you sign up we collect your name, email address and password credentials. Sign-in is handled by Clerk, our authentication provider — your password is stored only by Clerk and never reaches our servers.

Mess data. The content you and your household create: mess names, people, daily meal logs, bazaar costs, fixed costs and contributions. This data exists to run the calculations you asked for — nothing more.

Invite information. If you are invited to a mess, your email address is stored with the invitation until it is accepted or revoked.

• To create and authenticate your account.
• To store and compute your mess's meals, costs and balances.
• To manage team memberships and invitations.
• To respond to support requests you send us by email.

• We do not sell or rent your personal data.
• We do not use your mess data for advertising.
• We do not share your data with third parties except the providers listed below, who process it strictly to run the Service.

Clerk — authentication (account creation, sign-in, password reset emails).

Neon (Serverless Postgres) — database hosting for your mess data.

Vercel — application hosting and content delivery.

Google— if you use "Continue with Google", Google shares your basic profile (name and email) with us for account creation.

Each provider processes data under its own privacy policy, limited to what is necessary to deliver the Service.

You can delete your mess from the dashboard at any time. Deletion removes the mess from all accounts immediately; the underlying data is retained internally for up to 90 days before permanent erasure. During that window you may contact us for a full PDF report of the mess's data.

To request deletion of your account and all associated data, email us at kaziraihan384@gmail.com.

All traffic to and from the Service is encrypted over HTTPS. Access to mess data is scoped server-side to authenticated members of that mess — one household can never read another's data.

We use only the essential cookies required for authentication and keeping you signed in. We do not use tracking or advertising cookies.

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above. Continued use of the Service after changes means you accept the updated policy.

Questions about privacy? Email kaziraihan384@gmail.com.