The short version
- ✓ We collect only what we need to run the service
- ✓ We never sell your personal data
- ✓ We use a third-party AI provider (Anthropic) to generate your plans — we ask your permission first
- ✓ You can delete your account and data at any time
- ✓ We take security seriously with encryption in transit and at rest
- ✓ California residents have additional rights under CCPA/CPRA
- ✓ EU, UK & Swiss users have full GDPR rights, including erasure and portability
1. Information We Collect
Information You Provide
When you create an account or use Enibla, you may provide: name, email address, age, biological sex, height, weight, health and fitness goals, dietary preferences and restrictions, food allergies and intolerances, and pantry inventory data you choose to enter.
Information We Collect Automatically
When you use our app, we automatically collect: device identifiers (such as device ID and advertising ID), operating system and version, app usage data and feature interactions, crash reports and performance data, IP address and general location (country/region), and in-app purchase history.
Health and Nutrition Data
Enibla collects nutrition-related information such as calorie intake, macronutrient tracking, meal logs, and dietary goals. This data is used solely to provide and improve our meal planning services. We do not treat this data as protected health information under HIPAA, as Enibla is not a covered healthcare entity. However, we apply strict security standards to all personal data.
2. How We Use Your Information
Core Service
We use your information to generate personalized meal plans, build your grocery lists, power AI coaching conversations, and improve your nutrition recommendations over time.
Communications
With your consent, we may send you push notifications, email updates about your meal plans, product announcements, and promotional content. You may opt out of marketing communications at any time via your account settings or by using the unsubscribe link in any email.
Analytics and Improvement
We use aggregated and de-identified data to understand how users interact with the app, identify bugs, and improve our AI models and product features. This data cannot be used to identify you individually.
Legal Obligations
We may use or disclose your information when required by applicable law, legal process, or governmental authority, or to protect the rights, property, or safety of Enibla, our users, or the public.
3. How We Share Your Information
We Do Not Sell Your Data
Enibla does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes.
Service Providers
We share data with trusted third-party vendors who assist in delivering our service, including cloud infrastructure providers, analytics platforms, payment processors, and our third-party AI provider (see "Third-Party AI Processing" below). These vendors are contractually obligated to use your data only to perform services on our behalf and are prohibited from using it for any other purpose.
Third-Party AI Processing
To generate your personalized meal plans, grocery lists, and AI coach responses, Enibla sends the nutrition information you provide — including your dietary goals, food preferences, allergies and intolerances, the biometric details used to personalize your plan (age, height, and weight), budget and cooking-time preferences, pantry items, and the messages you send to the AI coach — to our third-party AI provider, Anthropic, PBC, which operates the Claude AI models. This information is transmitted securely through our backend to Anthropic's API solely to produce the results you request. Anthropic processes this data as our service provider under its commercial terms, does not use it to train its models, and is contractually required to protect it at a level consistent with this Privacy Policy. We ask for your permission inside the app before this information is sent to the AI provider for the first time. Because Enibla's core features depend on this processing, declining will prevent AI-powered features — such as meal-plan generation and the AI coach — from working.
Business Transfers
If Enibla is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or in-app notice before your data is transferred and subject to a different privacy policy.
Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (such as a court or government agency).
4. California Privacy Rights (CCPA / CPRA)
Your Rights as a California Resident
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to: (1) Know what personal information we collect, use, disclose, or sell; (2) Delete personal information we have collected, subject to certain exceptions; (3) Correct inaccurate personal information; (4) Opt out of the sale or sharing of personal information; (5) Limit the use of sensitive personal information; (6) Non-discrimination for exercising any of these rights.
How to Exercise Your Rights
To submit a rights request, contact us at privacy@enibla.app. We will verify your identity before fulfilling your request. We will respond within 45 days. If we need more time, we will inform you of the reason and extension period.
Authorized Agents
California residents may designate an authorized agent to submit requests on their behalf. We may require written proof of the agent's permission and verify the identity of the consumer directly.
5. European Privacy Rights (GDPR & UK GDPR)
Who This Applies To
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following rights and disclosures apply to you under the EU General Data Protection Regulation (GDPR), the UK GDPR, and equivalent laws. For the purposes of these laws, Enibla is the "data controller" of the personal data described in this policy.
Legal Bases for Processing
We process your personal data on the following legal bases: (1) performance of our contract with you, to provide the meal-planning, grocery, and coaching features you request; (2) your consent, for optional processing such as marketing communications, which you may withdraw at any time; (3) our legitimate interests, such as securing, analyzing, and improving the Service, where those interests are not overridden by your rights; and (4) compliance with our legal obligations.
Your Rights
Subject to applicable law, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data (the "right to be forgotten"); restrict or object to our processing; request portability of your data in a structured, machine-readable format; and withdraw consent at any time without affecting processing carried out before withdrawal. To exercise any of these rights, contact us at privacy@enibla.app. We will respond within the timeframe required by applicable law.
Right to Lodge a Complaint
You have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data infringes applicable law. We would, however, appreciate the opportunity to address your concerns directly before you approach the authority.
International Data Transfers
Enibla is operated from the United States, so your personal data will be transferred to and processed in the United States and other countries that may not offer the same level of data protection as your home country. Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (together with the UK International Data Transfer Addendum) to protect your data.
6. Children's and Teens' Privacy
Age Requirement
Enibla requires all users to be at least 16 years old, consistent with our Terms of Use. Enibla is not directed to children, and we do not knowingly collect personal information from anyone under the age of 16. If you are a parent or guardian and believe a child under 16 has provided us with personal information, please contact us immediately at privacy@enibla.app and we will delete that information from our systems.
Teen Users (16–17)
Users who are 16 or 17 years old should review this Privacy Policy and our Terms of Use together with a parent or legal guardian. By using the app, users in this age range represent that they have their parent or guardian's permission to do so.
7. Data Retention
Retention Period
We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or de-identify your personal information within 30 days, except where we are required to retain it for legal, tax, or accounting purposes.
Meal and Nutrition Logs
Meal logs and nutrition data are retained for the current calendar year plus one prior year to support trend analysis and personalization. You may delete your logs at any time from within the app.
8. Data Security
Security Measures
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS) and at rest, access controls, regular security reviews, and secure development practices.
No Absolute Guarantee
No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.
9. Third-Party Links and Services
External Links
The app may contain links to third-party websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.
10. International Users
Data Transfers
Enibla is operated in the United States. If you access our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our services, you consent to your information being transferred to and processed in the United States.
11. Changes to This Policy
Policy Updates
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy in the app and updating the 'Last Updated' date at the top of this page. For significant changes, we will provide more prominent notice, such as an in-app notification or email. Your continued use of Enibla after changes take effect constitutes your acceptance of the revised policy.
12. Contact Us
Privacy Inquiries
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: Enibla Email: privacy@enibla.app Support: enibla.app/support