Privacy.

MealStack is made by Mission Built, which is Mike Nichols, in Pittsburgh, Pennsylvania. For the purposes of privacy law, Mission Built is the controller of whatever this page says leaves your phone. There is no parent company, no subsidiary and no partner with access to your data. The source of the app is published under GPL-3.0 once it launches, so the code that does what this page describes can be read.

MealStack has no sign-up, no login and no password. Nothing you do in the app is tied to your name, email address or phone number, because the app never asks for them. The only identity the server ever sees is a key your phone creates in its secure hardware, which proves a request came from a real copy of MealStack and nothing more.

Your plan, every day's log, the foods you add, the meals you save, your Coach conversation, and the details you give Coach for a target: bodyweight, height, age, sex if you chose to say, how you train, and your goal. All of it lives in files inside the app's own container on your iPhone, written under the phone's encryption and protected until the first unlock after a restart. Those files are included in your iCloud or computer backup the way any app's data is; Mission Built has no access to your backups.

If you turn on the Health connection, the app writes four numbers for each meal you log into Apple Health, at the time you ate: protein, carbohydrates, fat and calories. Correct or un-log the meal and the app takes those entries back out. MealStack never reads anything from Health. Nothing from Health is used for marketing, advertising or anything but the entries themselves, and nothing from Health is stored anywhere but Health.

This section also serves as the consumer health data notice some states require. The health data involved: the four nutrition figures the app writes to Health with your permission, and the body measurements you type in for Coach. Source: you. Purpose: the log and the target. Shared with: nobody, except that the measurements go to Coach when you ask Coach for a target, as described next.

Settings → Privacy → What the server holds about this install asks the server, live, for everything it keeps for your install and shows it to you, with a share button. The request is signed by your phone's key, so the server can only ever answer for the install that asked.

Settings → Privacy → Delete all MealStack data does the whole job in one tap: it tells the server to delete the install's record, its allowance counters and the hashed analytics person, then removes every file on the phone, the entries this app wrote to Health, your answer to the usage question, and the install's key. If the phone is offline at that moment, the phone is still wiped, the key is never used again, and the server's counters expire within the month. Turning off Send usage data in Settings withdraws that consent from then on; turning off Coach in Settings stops Coach from sending anything.

The one case a button cannot cover is an app that was deleted before asking: with the key gone, nothing on the server can be matched to you, which also means nothing on the server can identify you. If you want to ask anyway, or ask anything else about your data, email [email protected]. Mission Built will confirm within ten days and finish within thirty.

The routes behind those two buttons are tested for isolation on every change to the server (an install can never read or delete another's) and probed every hour in production by two synthetic installs; if a probe ever fails, both routes close until a person has looked.

You can ask what Mission Built holds that relates to your install, ask for it to be corrected or deleted, ask for a copy, object to or restrict its use, and withdraw any consent you gave, all at the address above, and you will not be treated differently for asking. Under the GDPR, the legal bases are your consent (Coach terms, the usage-data question) and Mission Built's legitimate interest in running the Coach allowance and keeping the service from being abused. If you are in the EU, the EEA or the UK you may also complain to your supervisory authority. Under California law, Mission Built does not sell or share personal information and has not done so in the past twelve months.

Mission Built operates from the United States and the companies above process data there, so anything that leaves your phone leaves your country if you are outside the US. Cloudflare, Anthropic and PostHog each rely on recognised transfer mechanisms such as standard contractual clauses or the EU–US Data Privacy Framework for that.

If what the app collects or shares changes, this page changes first, with a new effective date at the top, and the app's About screen points here. A change that widens what leaves your phone will be asked about in the app before it applies to you. Effective September 12, 2026.