MealieCart is an iPhone, iPad and Mac app made by me, Jess. It links the recipes on your own Mealie server to products at Walmart or Kroger, so you can fill your grocery cart in one step. The short version: MealieCart has no accounts of its own, no ads and no tracking, and I don’t keep or see any of your information.

What MealieCart stores

These are saved on your device:

  • Your Mealie server’s address and your Mealie API token (the token is kept in your device’s Keychain)
  • Copies of your Mealie recipes, shopping lists and meal plan, so the app can show them quickly
  • The Walmart and Kroger products you link to ingredients, how many packs of each, your Cart Review checkmarks and your pantry staples
  • If you shop at Kroger: your Kroger sign-in (kept in your device’s Keychain), the Kroger store you chose, and whether you want pickup or delivery
  • Your settings, such as which shopping list and store you use

I can’t see any of it. If you back up your device, for example with iCloud Backup, this information is included in your own backup like the rest of your device.

Syncing between your devices

Your Walmart and Kroger links, pack counts, Cart Review checkmarks and pantry staples sync between your own iPhone, iPad and Mac through iCloud, using your Apple Account. That storage is Apple’s and is covered by Apple’s privacy policy. I can’t see it. Your Mealie token, Kroger sign-in, recipes and lists don’t sync: each device connects on its own.

What leaves your device

  • Your Mealie server. MealieCart talks straight to the Mealie server you enter, using your token, to read your recipes, shopping lists and meal plan. The only change it ever makes in Mealie is when you tap Done shopping: it checks off those items on your shopping list. You can uncheck them in Mealie.
  • Walmart. Find on Walmart opens walmart.com inside MealieCart, like a browser, and only Walmart’s pages open there. When you tap Use this product, MealieCart reads that page’s product name and link, nothing else. Add to Walmart cart opens Walmart’s own add-to-cart link with the item numbers and pack counts of the products you chose. Walmart sees these visits like any visit to its website, including whether you’re signed in, and Walmart’s privacy policy covers that. Walmart’s cookies are kept on your device, the same as in a browser.
  • Kroger, only if you choose it. You sign in on Kroger’s own page. MealieCart never sees your Kroger password, and Kroger only lets it add items to your cart. Searching for stores and products sends your search words and ZIP code straight to Kroger. Add to Kroger cart sends Kroger the product codes and pack counts of the products you chose, and whether you want pickup or delivery, with your sign-in. Kroger’s privacy policy covers what Kroger does with that.
  • MealieCart’s helper, only for Kroger. Kroger requires a private key that can’t safely live inside an app, so a small helper server I run on Cloudflare holds it. When you sign in to Kroger, the one-time sign-in code passes through the helper so it can get your Kroger sign-in, and later renewals of that sign-in do too. The helper also gives the app a short-lived key for searching Kroger’s product catalog. It passes these along and keeps nothing: it has no storage and no logs, and it never sees your password, your recipes or anything from Mealie. Cloudflare runs the server, like a web host.

Apart from the Kroger helper, nothing goes through me or anyone else.

Ads, analytics and tracking

MealieCart has none. It does not track you across apps or websites.

If you have chosen on your device to share analytics with app developers, Apple may send me anonymous crash reports and usage totals. They do not identify you.

Children

MealieCart is not directed at children under 13 and does not knowingly collect information from them.

Deleting your information

Deleting the app removes what it saved on that device. Your device may keep the Mealie token in its Keychain, so if you stop using MealieCart, also delete the token in Mealie: open your profile, then API Tokens. Links synced through iCloud can stay in your iCloud account and come back if you install MealieCart again. To disconnect Kroger, tap Sign out of Kroger in Settings.

Mealie, Walmart and Kroger

Your recipes and lists live on your own Mealie server, which you (or whoever runs it) control. MealieCart is an independent app. It is not made by, endorsed by or affiliated with Mealie, Walmart or Kroger.

Changes

If this policy changes, the new version will be posted on this page with a new date.

Contact

Questions? Email me at jessicahart94@icloud.com.