Privacy Policy

Magic Meal for iOS and Android · Last updated 30 September 2026

This policy explains what Magic Meal does with your information. It covers the Magic Meal mobile app published by Hbrothers L.L.C. (doing business as Hbro Studio) and nothing else.

The short version. Magic Meal has no sign-up, no ads, no tracking and no analytics SDK. We never ask for your name, email address or phone number. To plan your week, the app keeps your answers (household, cooking days, budget, tastes, diet, allergies, kitchen equipment), your weekly plan, your grocery list and your favourites on your phone, and saves a copy in our Google Firebase database under a random anonymous identifier. When you ask for a new plan, a short summary of your tastes is sent to Google’s Gemini AI to pick recipes; your diet, allergies and anything that identifies you are not part of that request. Magic Meal is a subscription app with a free trial: Apple or Google take the payment, and our subscription provider RevenueCat receives your anonymous identifier and your purchase history, never your card details. You can delete everything, on the phone and on our servers, from Réglages → “Supprimer mes données” (the icon at the top right of the home screen).

Who we are

Magic Meal is published by Hbrothers L.L.C., trading as Hbro Studio. The app is identified on the App Store as Magic Meal (App Store ID 6816634569, bundle identifier com.hbrothers.magicmeal) and on Google Play under the package name com.hbrothers.magicmeal.

Hbrothers L.L.C. is the data controller for the information described in this policy. Questions go to info@hbro-studio.com. Our website is https://www.hbro-studio.com. This page is published at https://www.hbro-studio.com/magic-meal-policy.

What we do not do

• We do not ask you to create an account, sign in, or give us your name, email address, phone number or date of birth.
• We do not show advertising and we do not work with advertising networks.
• We do not track you across other apps or websites. The app contains no analytics, advertising, crash-reporting or attribution software, and it does not use the Identifier for Advertisers (IDFA) or the Android advertising ID.
• We do not ask for access to your location, contacts, photos, camera, microphone, calendar or Apple Health / Health Connect.
• We do not sell or rent personal information, and we never have. We do not “share” personal information for cross-context behavioural advertising as that term is used in the CCPA/CPRA.
• We never use your diet or allergy answers for advertising, marketing or profiling, and we never disclose them to anyone except the service providers listed below that run the app for us.
• We do not send push notifications from a server. The only notification is an optional reminder, scheduled on your phone, shortly before your free trial ends.

The information the app uses

Magic Meal only works with what you tell it during onboarding and in Préférences, plus what you do in the app:

• Your answers. Preferred supermarket, household size, whether children eat with you, the days you cook, your weekly budget, cooking styles, proteins you like, foods you added yourself, and the kitchen appliances you have.
• Diet and allergies. Diets such as vegetarian, vegan, gluten-free, lactose-free, low-carb, “adapté SOPK” (PCOS) or “adapté diabète”, and food allergies such as peanuts, nuts, dairy, eggs, gluten, soy, fish, shellfish or sesame. Some of these can reveal information about your health. Giving them is optional: choose “Sans restriction” / “Aucune” if you prefer not to. They are used for one purpose: to keep recipes that do not fit out of your plan.
• Your plan and lists. The recipes planned for each day, portions, meals you locked, skipped or moved, your favourites and the recipes you said you do not like, and your grocery list (items ticked, items you already have, items you added, substitutions).
• App settings. Whether you finished onboarding and whether vibrations (haptics) are on.
• Subscription. Whether your subscription or free trial is active, and, if you chose one, when to remind you before the trial ends (1 or 2 days before).

What stays on your phone

All of the information above is stored on your device in storage readable only by this app (iOS UserDefaults / Android SharedPreferences). That is what the app reads first, so it keeps working offline. Recipes, photos and prices are bundled inside the app; opening a recipe does not contact us.

If iCloud Backup or Android backup is turned on, Apple or Google may include this app’s local storage in the backup of your device. That is their backup of your phone, not collection by us.

What we store on our servers

When you first open the app, it signs in to Google Firebase anonymously. Firebase creates a random identifier for this installation of the app. It contains no name, email or phone number, and it is not linked to your Apple ID or Google account.

Under that anonymous identifier, the app saves in our Cloud Firestore database:

• a copy of your answers, including diet and allergies, and your favourites;
• your current weekly plan;
• the state of your grocery list;
• each plan request the app makes (the answers and options it was made with, its progress and the resulting plan).

We use this only to create your plans, suggest replacement recipes, and keep your data in sync on the device you use. Our database rules let only your installation of the app read that data, and only our servers can write the plan requests. We do not look at it individually, we do not combine it with other data, and we do not use it to build a profile of you.

AI meal planning (Google Gemini)

When you create or regenerate a plan, or ask for alternatives to a recipe, our Cloud Function first removes every recipe that does not respect your diet, allergies and kitchen. It then sends Google’s Gemini API a short request containing:

• the days you cook, your household size, your budget, your cooking styles and the proteins you like, and whether children eat with you;
• options you picked for that request (faster, cheaper, or an ingredient you typed to use up) and the meals you locked;
• the list of candidate recipes (names, cooking time, style).

The request does not include your anonymous identifier, your diet, your allergies, the foods you added yourself, your grocery list or anything that identifies you. Gemini returns recipe choices; our server checks them against the catalogue again before they reach your phone. If Gemini is unavailable, the app builds the plan on your phone instead.

Subscriptions and purchases (RevenueCat)

Magic Meal is unlocked by a subscription, usually starting with a free trial. The purchase itself is made with your Apple ID or Google account and handled by Apple or Google; we never see your name, email, card or billing address. To know whether your subscription is active, the app uses RevenueCat, which receives:

• your anonymous Firebase identifier (so a purchase stays attached to your installation and can be restored);
• your purchase history from the App Store or Google Play: the product, price and currency, dates, trial and renewal status, and the store receipt;
• technical data needed to show the offer: app version, device model and operating system, country of your store account, and the IP address of your device.

We use this only to unlock the app, show the right offer and restore purchases. It is not used for advertising or tracking. You manage or cancel the subscription in your App Store or Google Play settings.

Trial reminder. Before the paywall, you can choose to be reminded 1 or 2 days before your free trial ends. If you allow notifications, the app schedules that single reminder on your phone. It is not sent through a server, and nothing about it is shared with us.

Service providers

We use Google and RevenueCat as our processors to run the app. They handle the data above on our behalf, under their own terms (Google’s terms for Firebase and Google Cloud, and RevenueCat’s data processing terms):

• Firebase Authentication (the anonymous identifier), Cloud Firestore (the data listed above) and Cloud Functions (plan creation and data deletion). Our Cloud Functions run in the European Union (Belgium, europe-west1).
• Gemini API (recipe selection, with the limited request described above).
• RevenueCat, Inc. (subscription status and purchase history, as described above). RevenueCat’s privacy policy: https://www.revenuecat.com/privacy.

Like any internet service, Google receives the IP address of your device when the app connects. Google’s privacy policy: https://policies.google.com/privacy. Firebase privacy and security: https://firebase.google.com/support/privacy.

Permissions we ask for

Notifications, only if you accept, on the trial reminder screen. They are used for the single trial-end reminder described above. You can refuse, or turn them off later in your phone’s settings; the app works the same. Magic Meal requests no other permission. It uses the internet connection to reach Firebase, keeps the screen awake while you follow a recipe step by step in cooking mode, and can vibrate lightly when you tap (you can turn vibrations off in Préférences). None of these requires a permission or sends extra data.

Things you send on purpose

These actions leave the app because you chose them. None is required to use Magic Meal.

• Supermarket search. Tapping a grocery item can open your supermarket’s website or app with a search for that product (for example “lait demi-écrémé”). That is you visiting that retailer; its own privacy policy applies. We do not receive what you do there.
• Share. “Partager à un ami” opens the system share sheet with a short message and the store link. It goes only to the app or person you pick.
• Contact support. “Contacter le support” opens your mail app with a message to info@hbro-studio.com and the app version in the subject. We receive what you write, the address you send from and any attachment. We use it only to answer you, and delete it once the request is handled.
• Rate the app. “Noter Magic Meal” opens the App Store or Google Play. We do not see whether you left a review.

Opening Terms of Use or this Privacy Policy uses your browser. That is you visiting those pages, not the app uploading your data.

Recipes, prices and diets are guidance

Costs shown in the app are estimates based on typical prices at the supermarket you picked; real prices vary by store and over time. Diet and allergy filters rely on the ingredient information in our recipe catalogue. Always check product labels, especially for allergies. Magic Meal is not a medical device and does not give medical or nutritional advice. The “adapté SOPK” and “adapté diabète” options only favour lower-carbohydrate recipes; talk to a doctor or dietitian about the diet that is right for you.

Legal basis (EEA, UK and Switzerland)

Where the GDPR, UK GDPR or Swiss FADP applies:

• Storing and processing your answers, plan and grocery list is necessary to provide the service you ask for (GDPR Article 6(1)(b)).
• Diet and allergy answers that may reveal health information are processed on the basis of your explicit consent (Article 9(2)(a)), which you give by choosing them in the app. They are optional, and you can withdraw consent at any time by changing them in Préférences or by deleting your data.
• Checking your subscription and restoring purchases is necessary to provide the service you pay for (Article 6(1)(b)).
• The trial reminder is sent only if you choose it and allow notifications (consent, Article 6(1)(a)).
• Support email is handled on the basis of our legitimate interest in answering you (Article 6(1)(f)).

There is no automated decision-making that produces legal or similarly significant effects concerning you. The AI only picks recipes from the list your answers allow.

How long we keep information

On your phone, data stays until you change it, delete your data in the app, or delete the app.

On our servers, your answers, plan, grocery list and plan requests are kept while you use the app, and are deleted as soon as you use “Supprimer mes données”. Deleting the app from your phone does not delete the server copy, because we cannot know the app was removed. Use “Supprimer mes données” first, or email us (see below). Support emails are deleted once your request is handled.

Purchase records are kept by Apple or Google, and by RevenueCat for as long as your subscription is active and afterwards as long as billing, tax and accounting laws require.

Deleting your data

Open Magic Meal, tap the icon at the top right of the home screen, then Supprimer mes données and confirm. The app then deletes, permanently:

• your data in our database (answers, diet and allergies, favourites, plan, grocery list and every plan request);
• your anonymous Firebase identifier;
• everything the app stored on your phone, including a scheduled trial reminder.

Deleting your data does not cancel a subscription: cancel it in your App Store or Google Play settings. Purchase records that Apple, Google and RevenueCat must keep for billing and tax are not removed; to ask RevenueCat to delete what it holds under your anonymous identifier, email us.

The app then returns to its first screen. If you already deleted the app, email info@hbro-studio.com. Because we hold no name or email, we may need you to reinstall the app and use the button, since that is the only way to prove which anonymous data is yours.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export, restrict or object to the processing of your personal information, to withdraw consent, and to complain to your data protection authority. California residents have equivalent rights under the CCPA/CPRA, including the right to know, to delete, to correct and not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined there. Residents of Virginia, Colorado, Connecticut, Utah and similar US state laws have comparable rights; the same facts apply.

You can see and correct everything we hold in Préférences and on the home and grocery screens, and delete it all with “Supprimer mes données”. For anything else, write to info@hbro-studio.com; we will reply within the time limits set by applicable law.

In France you can complain to the CNIL (https://www.cnil.fr). In the UK it is the Information Commissioner’s Office (https://ico.org.uk). Elsewhere in the EEA, it is the authority of your country of residence.

Children

Magic Meal is rated 4+ on the App Store and is meant for adults who plan meals for a household. It is not directed at children. We do not knowingly collect personal information from children under 13 (or under 16 where that is the applicable age). The only information about children in the app is whether children eat with you, which is not about any identifiable child. If you believe a child has sent us personal information, write to info@hbro-studio.com and we will delete it.

Security

On your phone, data is protected by the iOS and Android app sandbox, so other apps cannot read it. Between the app and Google, data travels over encrypted HTTPS connections, and Google encrypts stored Firestore data. Access to your server data is restricted by database rules to your anonymous identifier and to our servers. No system is perfectly secure, but we keep the data we hold to what the app needs. Support email is ordinary email; do not send us passwords or identity documents.

International users

Magic Meal is offered through the App Store and Google Play. Our Cloud Functions run in the European Union. Google may process Firebase and Gemini data in other countries where it operates, and RevenueCat processes subscription data in the United States; where that happens, they rely on the safeguards required by law, such as the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.

Changes to this policy

If we change how the app handles information, we will update this page and the date at the top. Material changes will be described here rather than made silently.

Contact

Questions about this policy, or about privacy in Magic Meal, go to info@hbro-studio.com.

Hbrothers L.L.C.
Trading as Hbro Studio
info@hbro-studio.com
https://www.hbro-studio.com

© 2026 Hbrothers L.L.C. All rights reserved. Magic Meal for iOS and Android. Terms of Use are Apple’s standard EULA at https://www.apple.com/legal/internet-services/itunes/dev/stdeula/.

‍