Law 25 — Your rights

Last updated: April 12, 2026

Plan Repas is committed to complying with Quebec's Law 25 (Act to modernize legislative provisions as regards the protection of personal information, in full force since September 2023). This page details the rights you have and how to exercise them.

Privacy officer

Nicolas Mailloux — Micronick
Email: [email protected]

1. Right of access

You may request at any time a full copy of the personal information we hold about you. The request is free and processed within a maximum of 30 days. An automated export (JSON/CSV) is also available from your Settings → My data page.

2. Right to rectification

If any information is inaccurate, incomplete, or ambiguous, you may request its correction. Most fields (family profile, preferences, recipes) can be edited directly from the interface.

3. Right to portability

You can obtain your data in a structured, commonly used, machine-readable format, in order to transfer it to another service. The export is provided in JSON and CSV formats.

4. Right to withdraw consent

Consent for analytics and marketing cookies can be withdrawn at any time via the consent banner (re-opened from Settings → Privacy) or by writing to [email protected]. Withdrawal does not affect the lawfulness of prior processing.

5. Right to deletion (right to be forgotten)

You may request the complete deletion of your account and personal information. The procedure has two steps (email confirmation) to avoid accidental deletion. Once confirmed:

• Immediately: your account is marked as deleted (soft delete) and is no longer accessible.
• Within a maximum of 30 days: full physical purge by an automated process (worker-purge), except for data strictly necessary to comply with legal obligations (billing: 6-year retention).

6. Right to de-indexation and cessation of distribution

If you have shared a recipe in the community library, you may request its de-indexation. Copies (snapshots) already added by other users to their personal libraries remain their property but will be dissociated from your identifier.

7. Automated decisions

Meal plans are generated automatically from your information by an automated processing system provided by a contractually bound sub-processor. This generation is strictly informational: no decision producing legal effects or significantly affecting a person is taken in an automated manner. You can at any time refuse, modify, or regenerate a proposed plan.

8. Transparency of purposes

Before any collection, we inform you of:

• the purposes of the processing;
• the means by which data is collected;
• the rights of access and rectification;
• your right to withdraw consent;
• the existence and names of sub-processors and transfers outside Quebec.

9. Privacy impact assessment (PIA)

Any new feature involving the collection, use, or communication of personal information is subject to an internal PIA, in accordance with Article 3.3 of Law 25. PIAs are archived internally and can be provided upon reasoned request.

10. Privacy incident

In the event of a privacy incident presenting a risk of serious harm, Plan Repas commits to:

• notify the Commission d'accès à l'information (CAI) as soon as possible;
• notify affected individuals in accordance with the procedures set out by law;
• maintain an internal incident log compliant with Article 3.8.

11. Terminology

In line with our commitments, we systematically use the term "dietary restrictions" rather than "allergies" or "medical conditions", so as not to collect or infer sensitive health data.

12. Recourse

If you are dissatisfied with our handling of your personal information, you can file a complaint with the Commission d'accès à l'information du Québec: