What we collect, why, and what we don't do.
Plain English. No dark patterns. A full policy goes live alongside accounts at launch.
What we collect today
When you join the founder list we store the email address you submit, the page or section you submitted from, and a timestamp — so we can send a single onboarding email when access opens.
If you arrive from a marketing link (UTM parameters or a Facebook click ID), we attach those values to your signup so we can understand which channels work. This attribution is stored in localStorage in your browser and on our servers alongside your email.
Server-side, we capture your user-agent string and (when present) HTTP referer at the moment of submission. We don't log IP addresses with signups.
If Plausible analytics is enabled on this site, we collect anonymous, aggregate pageview and conversion event data. Plausible does not use cookies and does not track you across other sites.
What we don't do
- We do not sell your data.
- We do not share it with advertisers.
- We do not pre-tick subscription boxes.
- We do not invent users, testimonials, or activity counts.
- We do not store health, body, or medical information on the waitlist.
How to reach us
Email hello@onemealaday.com to ask what we have on file or to remove yourself from the list.
When this page updates
The full policy — vendor list, retention windows, GDPR/CCPA addresses, the works — will go live when accounts and payments open. We'll note the update here.
Last updated · prelaunch · 2026