Privacy Notice

Last updated 28 August 2026

1. Who we are

TheRealMeal is operated by Realm. Realm is the data controller for the personal data described in this notice, which means we decide how and why that data is used. You can reach us through the contact details shown in the app.

2. What we collect and why

Account data — name, email address and login credentials. Used to create and secure your account and to let you sign in. Legal basis: performance of our contract with you.

Service content — the dishes you search for, recipe variations shown to you, your app rating and anything you choose to share. Used to provide the Service and to improve recipe and movement suggestions. Legal basis: contract performance and our legitimate interest in improving the Service.

Support messages — the content of enquiries you send us. Used to answer you and keep a record of the issue. Legal basis: contract performance and legitimate interests.

Usage and device data — IP address, device and browser identifiers, pages viewed, timestamps and error reports. Used for security, fraud prevention, debugging and understanding which features are useful. Legal basis: legitimate interests and, where required, your consent.

Marketing preferences — if you opt in to product emails. Legal basis: consent, which you can withdraw at any time.

Payment card details are collected and processed by Paddle, not by Realm. We never see or store your full card number.

3. Who we share data with

  • Service providers and subprocessors — hosting, database, AI recipe-generation, analytics and support tooling providers who process data on our instructions.
  • Paddle, our Merchant of Record, for the sale of the subscription, subscription management, payments, tax compliance, invoicing and refunds.
  • Social media platforms — only when you actively choose to share content from the app to them.
  • Professional advisers — legal, accounting and audit advisers where needed.
  • Authorities — where we are required to disclose data by law or to protect our legal rights.

We do not sell your personal data.

4. International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. How long we keep it

We keep account and service content for as long as your account is active and for a reasonable period afterwards to handle disputes and legal obligations. Billing records are retained for the period required by tax law. Usage logs are kept for a short operational window. When data is no longer needed we delete or anonymise it.

6. Your rights

Depending on where you live, you have rights to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent at any time. If you are in the UK or EEA you can also complain to your supervisory authority. To exercise a right, contact us — we will respond within one month.

7. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and row-level restrictions so users can only read their own records. No system is perfectly secure, but we work to keep risk low and to notify you where legally required if something goes wrong.

8. Cookies and similar technology

We use essential cookies and local storage to keep you signed in and to remember your preferences. Where we use analytics or marketing cookies we ask for your consent first, and you can change or withdraw it in your browser settings or through any cookie controls we show in the app.

9. Children

TheRealMeal is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

See also our Terms & Conditions and Refund Policy.