Last updated 31 August 2026
The short version: Mash has no accounts and no sign-up. Your meal plans, preferences, budget, shop choice and grocery lists are stored only on your device. We operate no user database, we run no analytics or tracking, and we never see what you plan or cook.
Mash is published by MyFitTrack (eenmanszaak, KVK 72366095), the data controller for the limited processing described below. You can reach us at support@myfittrack.net.
Everything you enter into Mash is written to your phone's own app storage (UserDefaults on iOS, DataStore on Android). It is not transmitted to us and we have no way to read it:
Deleting the app removes all of it. Because none of it ever leaves your device, there is no server-side copy for us to keep, export or delete.
Mash makes only two kinds of outbound request, and neither one carries anything about you.
| Request | Purpose | What is sent |
|---|---|---|
| Recipe photos and the recipe catalogue | Showing recipe images and delivering catalogue updates without a full app update | An ordinary anonymous web request for a public file. No identifier, no account, no plan data. |
| App Store / Google Play purchases | Selling and restoring a Mash Pro subscription | Handled entirely by Apple or Google. Mash receives only whether a subscription is active. |
The recipe files are hosted on Supabase Storage in the European Union (eu-west-1). As with any web server, the hosting provider's logs record the IP address and timestamp of a request as a technical necessity of delivering the file. We do not use those logs to build profiles and cannot link them to a person, because Mash sends no identifier alongside the request.
Mash Pro is sold through the App Store and Google Play. Your payment details are handled by Apple or Google under their own privacy policies and are never seen by, or transmitted to, us. We receive only a signed confirmation from the store that an entitlement is active. Manage or cancel a subscription in your App Store or Google Play account settings.
Item prices shown in Mash are estimates held in the app's own recipe catalogue. Mash does not connect to any supermarket account, loyalty card or payment method, and it cannot see your purchases.
Mash is a general-audience cooking app and is not directed at children under 13. Because it collects no personal data from anyone, it collects none from children.
Under the GDPR you have the right to access, correct, erase, restrict and port your personal data, and to object to its processing. In Mash's case these rights are satisfied by design rather than by request: we hold no personal data about you, so there is nothing for us to retrieve or erase. The data on your device is yours, and uninstalling the app deletes it. If you believe we hold data about you, write to support@myfittrack.net and we will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority — in the Netherlands, the Autoriteit Persoonsgegevens.
If Mash ever begins collecting personal data, this policy will be updated and the change described here before the feature ships. The date at the top always reflects the current version.
Questions about this policy: support@myfittrack.net.