Last updated: 23 March 2026
Short version: Guide data is stored on your device and optionally synced to your Google account. Passenger meal choices are encoded in the URL and never stored on our servers. We don't sell data to anyone.
TourMeals ("we", "our", "the service") is a meal coordination tool for tour guides, operated by Lyrd.io. Our contact address is privacy@tourmeals.app.
When you authenticate via Google Sign-In (powered by Firebase Auth), we receive:
This data is used solely to identify your account and associate your meal data with it. We do not access your Google contacts, calendar, drive, or any other Google services.
All meal setup data (venue names, cities, menus, passenger lists, responses) is stored locally on your device using IndexedDB. On the Pro and Unlimited tiers, this data is also synced to your Firebase account for cross-device access. We do not analyse, share, or monetise this data.
Passenger meal choices are encoded directly into the share URL as a base64 string. When a passenger opens the link and submits their choices, that data is sent back to the guide's device via our relay service and stored locally. Passenger names and choices are never stored on TourMeals servers beyond the brief time required for relay transmission.
Passengers are not required to create an account. We collect no personally identifiable information from passengers beyond what the guide enters into their manifest (first name, last name).
We collect minimal, anonymous usage analytics (page views, feature usage counts) via Firebase Analytics. No personally identifiable information is included. You can opt out by using your browser's Do Not Track setting.
We do not use your data for advertising. We do not sell data to third parties. We do not use data to train AI models.
Local data is stored in your browser's IndexedDB. Cloud-synced data is stored in Firebase Firestore (Google Cloud), encrypted at rest, in EU data centres. Payment processing is handled by Stripe — we never see or store your card details.
TourMeals uses only technically necessary cookies required for Firebase Authentication (session tokens). We do not use advertising cookies or third-party tracking cookies.
If you are in the European Economic Area, you have the right to:
To exercise any of these rights, email privacy@tourmeals.app. We respond within 30 days.
To delete your account and all associated data: sign in to the guide dashboard → Settings → Delete account. This permanently removes your Firebase account and all cloud-synced meal data. Local device data must be cleared separately via your browser settings.
TourMeals is not intended for use by anyone under the age of 16. We do not knowingly collect data from children.
We may update this policy from time to time. Material changes will be communicated via email to registered users at least 14 days before taking effect. The current version is always at tourmeals.app/privacy.
Questions about this policy: privacy@tourmeals.app