Privacy Policy
Last updated: February 27, 2026
Who We Are and Scope
MePicky is operated by Donovan Searles. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use MePicky, and describes your privacy rights under applicable data protection laws.
Information We Collect
We collect information you provide directly, such as account information made available through our authentication provider and food-related content you create (for example food names, notes, and links). If you enable sharing, we also collect and store your sharing settings and a share-link identifier needed to make your shared page available. We also collect technical and operational information needed to run and secure the service, such as request metadata, device/browser details, and logs. This may include technical data from visitors who access shared pages (for example IP address, device/browser details, and request logs).
How We Use Information
We use personal information to provide and maintain MePicky, authenticate users, store and display your content, secure accounts and infrastructure, troubleshoot and prevent abuse, comply with legal obligations, and communicate important service messages. If we send optional product or marketing emails in the future, we will provide unsubscribe or similar controls where required by law.
Legal Bases (EEA/UK and Similar Jurisdictions)
Where required by law, our legal bases include performance of a contract (providing the service you request), legitimate interests (service security, reliability, and improvement), compliance with legal obligations, and consent when consent is required.
When Personal Information Is Required
Some personal information is required to create and secure an account and provide core functionality. If you do not provide required information, parts of MePicky may not function or may be unavailable.
Service Providers and Data Sharing
We use third-party providers to operate MePicky, including Clerk for authentication, Vercel for hosting and application delivery, and Neon/PostgreSQL for data storage. We may disclose information to these providers to deliver the service, when you direct us to share content (for example by enabling a share link), or when required to comply with law, enforce terms, or protect rights, safety, and security. If you enable sharing, information you choose to share may be accessible to anyone who has the share link, including people you did not intend if the link is forwarded.
Cookies and Similar Technologies
MePicky and our providers may use cookies or similar technologies that are necessary for core functionality, such as authentication, session management, security, and fraud prevention. We do not currently use advertising trackers, and we will update this policy if non-essential tracking is introduced.
Data Visibility and Sharing Controls
Your account content is private to your authenticated account by default. MePicky also offers an optional share-link feature that you can enable to share your food preferences with others. When enabled, anyone with your share link can access your shared page and view the information you have stored in your list (which may include food names, notes, and links). Share links function like a bearer token (similar to a password): anyone who has the link can view the shared content. You can disable sharing to revoke the link for future access, but you understand that recipients may have saved, copied, screenshotted, or otherwise retained shared content before you revoked it.
International Transfers
Your information may be processed in countries other than your own, including through our service providers. Where required, cross-border processing is handled using legally recognized transfer mechanisms and safeguards.
Data Retention
We retain personal information for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. You can delete account content in-product where available, and can request account or data deletion through support.
Your Privacy Rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or port personal information, and to withdraw consent where processing is based on consent. You may also have rights related to automated decision-making and non-discrimination under applicable law. To exercise rights, contact support; we may verify your request before fulfilling it. Where required by law, you may also lodge a complaint with your local data protection or privacy regulator.
California Privacy Notice
For California residents, we describe in this policy the categories of personal information we collect, sources, purposes of use, and categories of third parties that receive data for business purposes (for example authentication, hosting, and data infrastructure providers). We do not sell personal information for money and do not share personal information for cross-context behavioral advertising. California residents may request to know, correct, or delete personal information, subject to legal exceptions and identity verification.
Children and Minors
MePicky is a general-audience service and is not directed to children. If you are a minor, use MePicky only with parent or legal guardian permission and supervision as required by applicable law. If we become aware that personal information was provided by a child in violation of applicable law, we will take steps to delete or de-identify the information as required.
Security
We use reasonable technical and organizational safeguards designed to protect personal information, but no method of transmission or storage is completely secure. You are responsible for safeguarding your account credentials and using strong authentication practices.
Changes to This Policy
We may update this Privacy Policy from time to time. We will update the Last Updated date and provide additional notice when required by law. Continued use after an update means you acknowledge the revised policy.
Contact
For privacy questions, contact us at donovansearles+mepicky@gmail.com.