SpinMeals // Privacy
/
SpinMeals // Privacy

Privacy Policy

SpinMeals is developed and published by Basalt Works. This policy explains the local app data and the purchase, rewarded-ad, calendar, notification, and website services used by the current app.

Last updated: July 30, 2026

Data Controller
Basalt Works
Core Data Handling
Meal plans, preferences, and statistics are stored locally on your device. RevenueCat manages Pro purchases, and Google AdMob serves optional rewarded ads in the free version.
01 // Privacy Policy

Introduction

This Privacy Policy explains how Basalt Works ("we", "us", or "our") handles information when you use the SpinMeals mobile application (the "App").

This policy applies worldwide. Privacy rights and our obligations may differ depending on where you live, including under the GDPR in the European Economic Area and the CCPA/CPRA in California.

02 // Privacy Policy

Data Controller Information

Data Controller: Basalt Works

Email: contact@basaltworks.com

Basalt Works is responsible for the information it receives and controls as described here. RevenueCat, Apple, Google, and AdMob also process information under their own roles and privacy terms.

03 // Privacy Policy

Information We Collect — Local Data Storage

The App stores your meal options, meal plans (daily, weekly and monthly), ingredients, dietary tags, custom templates, saved plans, energy balance, settings, and statistics locally on your device using AsyncStorage. This data remains on your device.

The export feature creates a local JSON file that you can save to your device or share through your device’s native sharing options. We do not upload your meal data to our servers. The App has no account or cloud-sync feature.

04 // Privacy Policy

Device and Advertising Information

The App itself does not directly read hardware identifiers or mobile network information. When you watch an optional rewarded ad in the free version, Google AdMob may process device and app information, including the Android Advertising ID where permitted, IP address and IP-derived approximate location, ad interactions, and diagnostics, under Google’s policies and applicable platform settings.

The App does not currently implement a separate advertising consent flow; ad requests use the Google Mobile Ads SDK default settings.

05 // Privacy Policy

Usage Data

The App contains no analytics or crash-reporting SDK. Google Play Console (Android) and App Store Connect (iOS) may provide crash and diagnostic reports according to platform policies and user or device settings.

06 // Privacy Policy

Payment Information

When you purchase the Pro version, payment processing is handled by the Apple App Store or Google Play Store and entitlement management is handled by RevenueCat. We do not collect or store your payment card details. We receive purchase status, entitlement status, and transaction identifiers needed to unlock Pro features.

07 // Privacy Policy

Calendar Access

If you choose to export a meal plan to your calendar, the App lists your calendars to let you choose a destination and writes meal events to it using the permissions you grant. Calendar data is used only for this export and remains on your device. We do not collect, store, or transmit your calendar data. Events already written to your calendar are not removed by the App.

08 // Privacy Policy

Notifications

The App can schedule local reminders (for example, daily or streak reminders) after you enable them and grant notification permission. Notifications are scheduled locally on your device; the App does not register a remote push token or use a push-notification backend.

09 // Privacy Policy

Product and Support Website

When you select English or Spanish on the Basalt Works website, the website stores that choice in your browser’s localStorage under basalt-lang. If no choice is stored, it reads your browser language and uses Spanish when it begins with "es"; otherwise it uses English. The preference remains until you change it or clear the website’s local storage.

The support form sends your email address, issue type and message, plus any optional device model, operating-system version and app version you enter, along with the app name and source page. Formspree processes these fields so Basalt Works can receive and answer support requests.

The SpinMeals pages are hosted on Vercel. Its infrastructure may process request metadata needed to serve and protect the pages, such as IP address, request date and time, requested URL, request headers, and browser or device information.

10 // Privacy Policy

How We Use Your Information

We use information as needed to provide requested App features and services:

  • To provide and maintain App functionality, including generating and saving meal plans.
  • To process your Pro version purchases and restore purchases through RevenueCat and Apple or Google.
  • To serve optional rewarded ads in the free version after you choose to watch one and grant the in-app reward.
  • To schedule local reminders after you enable them and grant notification permission.
  • To export meal plans you request to a calendar or shared file.
  • To respond to enquiries sent to contact@basaltworks.com, support@basaltworks.com, or through the support form.
11 // Privacy Policy

Legal Basis for Processing (GDPR)

For users in the European Union, we process personal data based on the following legal grounds:

  • Consent: When you grant optional device permissions such as notifications or calendar access, or where consent is required for advertising-related processing.
  • Contract: When processing is needed to provide requested App features or manage a purchase.
  • Legitimate Interests: Where applicable, to operate support, prevent abuse, and keep the service secure, after considering your rights.
  • Legal Obligation: When required to comply with applicable laws.
12 // Privacy Policy

Data Retention

Local data stored on your device remains until you delete it with the in-App delete-data action, clear app data, or uninstall the App, subject to device backup and restore behavior. The delete-data action removes the App’s local stores and cancels scheduled notifications, but it does not remove calendar events already written, exported or shared copies, or purchase records held by Apple, Google, or RevenueCat. Your Pro status is retained after deleting data.

The App does not configure a retention period for information processed by AdMob, RevenueCat, Apple, or Google; those providers retain information under their own policies and legal obligations. Basalt Works does not store server-side data from the App, so there is no server retention to apply. Support messages are kept only as long as reasonably needed to respond and maintain support records.

13 // Privacy Policy

Your Rights

Depending on your location and subject to legal conditions and exceptions, you may have the following rights for personal information Basalt Works controls:

  • Access and Rectification: Request access to or correction of eligible personal data.
  • Erasure: Request deletion where the applicable law provides that right.
  • Restriction or Objection: Ask to restrict processing or object to certain processing where applicable.
  • Data Portability: Request eligible data in a structured format.
  • Withdraw Consent: Withdraw consent for future processing where consent is the basis, without affecting earlier lawful processing.
  • California residents may also have the Right to Know, the Right to Delete, the Right to Opt Out of a sale or sharing where applicable, and the Right to Non-Discrimination. Basalt Works does not sell personal information.
14 // Privacy Policy

CCPA Disclosure: Do Not Sell My Personal Information

Basalt Works does not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration.

We disclose limited information to the Apple App Store, Google Play Store, and RevenueCat to provide purchases and restores, and to Google AdMob when you watch an optional rewarded ad. These providers may process information under their own terms. Contact us if you have a request under a law that treats a disclosure as a "sale" or "sharing".

15 // Privacy Policy

Third-Party Services

The App and its website pages use the following third-party services:

  • RevenueCat: Manages Pro purchase entitlements, purchases, and restores, and processes product, transaction or receipt, purchase-history, and entitlement information.
  • Apple App Store: Distributes the iOS App and processes iOS purchases, payment authorization, transaction records, and eligible platform diagnostics.
  • Google Play Store: Distributes the Android App and processes Android purchases, payment authorization, transaction records, and eligible platform diagnostics.
  • Google AdMob: Serves optional rewarded video ads in the free version. May process device and app information, including the Android Advertising ID where permitted, IP address and derived approximate location, ad interactions, and diagnostics under Google’s policies.
  • Formspree: Processes support form submissions, including the contact details and troubleshooting information you choose to provide, so Basalt Works can receive and answer your request.
  • Vercel: Hosts the SpinMeals pages and may process request metadata needed to serve and protect the website.
  • Expo: Application framework and EAS build tooling. Expo over-the-air updates are not currently configured in the App.
  • Platform diagnostics: Google Play Console and App Store Connect may provide crash and diagnostic reports according to platform policies. The App itself contains no analytics or crash-reporting SDK.
16 // Privacy Policy

Children’s Privacy

The App is not intended for children under the age of 13, and Basalt Works does not knowingly collect personal information from children under 13. If you are a parent or guardian and believe a child has provided personal information, contact us at contact@basaltworks.com.

If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete it promptly where required.

17 // Privacy Policy

Data Security

We apply reasonable technical and organizational measures appropriate to the information we handle. No method of transmission or electronic storage is completely secure, and no online service can guarantee absolute security.

18 // Privacy Policy

International Data Transfers

RevenueCat, Apple, Google, AdMob, Formspree, and Vercel may process information in countries other than where you live, whose privacy laws may differ. Where transfer safeguards are required, processing is subject to the mechanisms and contractual terms made available by the relevant provider and applicable law. Contact us for more information about a transfer involving data Basalt Works controls.

19 // Privacy Policy

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last Updated" date, and provide additional notice when required by applicable law.

20 // Privacy Policy

Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us:

Email: contact@basaltworks.com

For app support, email support@basaltworks.com or use the SpinMeals support page.