Privacy Policy

PepperLime is a food journal, so most of what we store is what you choose to write down: your account details (name, email, and a securely hashed password), profile settings (date of birth, gender, height, units, activity level), and your entries — meals, weights, fasts, workouts, recipes, and custom foods.

If you search the food database, your search terms are sent to the USDA FoodData Central API to look up nutrition data. Matching foods are cached in our database so later searches are faster; your identity is not attached to those cached foods.

Your data exists to power your own journal: daily and weekly summaries, nutrition totals, weight trends, and BMI calculations are computed from what you log, for you. We do not sell your data, show you advertising, or share your information with third parties for marketing.

Sharing on PepperLime is opt-in and explicit. If you hire a coach and they accept, that coach can view your food journal, weight trend, and recent workouts, and can share recipes with you. Ending the coaching relationship ends that access. Nobody else can see your journal.

Recipes you mark as private stay private. Recipes a coach shares with specific clients are visible only to those clients. Public recipes in the library are visible to everyone.

PepperLime staff with super-admin access can manage accounts (including resetting a password at your request or removing an account) and may access an account for support purposes. Support access is deliberate and used only to help you.

Passwords are hashed with bcrypt and never stored in plain text. Sessions use a signed, HTTP-only cookie that scripts on the page cannot read. Data is stored in a managed MongoDB Atlas database.

You can edit or delete any entry at any time. You can update your profile in Settings. If you want your account and all of its data permanently deleted, write to us via the contact page and we will remove it — account deletion cascades through every entry, recipe, and relationship you have on the platform.

Anything unclear? Use the contact page — privacy questions land on the same desk as everything else, and they get read.