1. Agreement and acceptance
These Terms of Service ("Terms") govern access to and use of mealRoaster, a service operated by 180GIG Limited ("180GIG", "we", "us" or "our").
These Terms include the Data Processing Agreement in Section 20, which applies where an organisation uses mealRoaster and 180GIG processes personal data on that organisation's behalf.
By creating an account, creating or joining an organisation, purchasing a subscription, or otherwise using mealRoaster, you agree to these Terms.
2. The mealRoaster service
mealRoaster is a digital nutrition monitoring platform that enables individuals and authorised professionals to capture, structure and review nutrition information over time.
Depending on the service and configuration, mealRoaster may provide:
- meal capture through the mealRoaster application
- meal capture and interaction through WhatsApp where enabled
- AI-assisted analysis of meal photographs
- structured nutrition estimates
- longitudinal nutrition records
- weight and progress tracking
- professional and enterprise dashboards
- reports and nutrition trends
- supported wearable and health-data integrations; and
- other nutrition monitoring and engagement features
Features may vary between Free, Pro, Enterprise and other service plans.
3. Individuals and organisations
You may use mealRoaster as an individual or through an organisation that provides mealRoaster to you.
Organisations may include healthcare providers, dietetic services, nutrition services, care providers, care homes, wellness services and other organisations using mealRoaster for nutrition-related services.
If you create an account or accept these Terms on behalf of an organisation, you confirm that you have authority to accept these Terms on behalf of that organisation.
If you do not have that authority, you must not create an organisation account or accept these Terms on its behalf.
By registering for or using mealRoaster, you agree to these Terms and our Privacy Policy.
Where you create or administer an organisation account, your acceptance also includes the Data Processing Agreement in Section 20.
Electronic acceptance of these Terms has the same effect as agreeing to them in writing.
We may maintain records of acceptance, including the account or organisation accepting the Terms, the person accepting them, the date and time of acceptance and the version accepted.
An Enterprise customer may enter into a separate written agreement with 180GIG. Where that agreement expressly replaces or modifies provisions of these Terms, the separate agreement will take precedence.
4. Purpose and professional responsibility
mealRoaster is intended to capture, structure, store and present nutrition-related information and longitudinal nutrition records.
mealRoaster may help individuals and authorised professionals review nutrition information and trends over time.
mealRoaster does not independently diagnose medical conditions, determine clinical risk, prescribe treatment or make autonomous clinical decisions.
Where mealRoaster is used by a healthcare, dietetic, nutrition or care professional, that professional remains responsible for interpreting the information provided and making any professional or clinical decisions.
mealRoaster is not a substitute for professional medical advice, diagnosis or treatment.
If you have concerns about your health or require medical advice, you should contact an appropriately qualified healthcare professional.
5. AI-assisted nutrition estimates
mealRoaster uses artificial intelligence and other software to analyse submitted meal photographs and generate structured nutritional estimates.
Depending on the service, estimates may include calories, protein, carbohydrates, fats and other nutritional information.
Nutrition estimates are inherently approximate and may contain errors or omissions.
Accuracy may be affected by factors including:
- image quality
- portion size
- hidden ingredients
- preparation and cooking methods
- mixed or unfamiliar dishes
- incomplete information; and
- differences between visually similar foods
Users and professionals should take these limitations into account when interpreting information generated by mealRoaster.
AI-generated information should not be treated as independently verified clinical information.
Where mealRoaster is used professionally, the relevant professional remains responsible for determining how information should be interpreted and whether further information or assessment is required.
Customer and patient data is not used to train the underlying foundation AI models.
6. Accounts and security
Some mealRoaster features require an account.
You agree to provide information that is reasonably accurate and to keep relevant account information up to date.
You are responsible for protecting your account credentials and must not knowingly allow unauthorised persons to access your account.
You must notify us promptly if you become aware of or reasonably suspect:
- unauthorised access to your account
- loss or compromise of login credentials
- inappropriate access to personal information; or
- another security issue affecting mealRoaster
Organisations are responsible for managing their authorised users and removing access when it is no longer required.
7. Organisation responsibilities
Organisations may use mealRoaster to provide nutrition-related services to their patients, clients, residents or other service users.
The organisation remains responsible for the professional service it provides.
This includes responsibility for:
- determining whether mealRoaster is appropriate for its intended workflow
- determining who should have access
- maintaining appropriate lawful bases for processing personal information
- providing appropriate privacy information to its service users
- obtaining any permissions or consents required for its own activities
- ensuring appropriately qualified personnel make professional or clinical decisions; and
- complying with legal, professional and regulatory requirements applicable to the organisation
mealRoaster provides information and technology to support nutrition monitoring. It does not assume responsibility for the professional relationship between an organisation and its service users.
8. WhatsApp
Where enabled, mealRoaster may allow users to submit meals, receive responses or interact with mealRoaster through WhatsApp.
WhatsApp is a third-party service operated separately from mealRoaster. Use of WhatsApp is also subject to the terms, privacy arrangements and technical operation of WhatsApp/Meta.
Organisations using mealRoaster may choose whether WhatsApp functionality is enabled for their deployment.
Where an organisation chooses to use WhatsApp, it is responsible for determining whether that communication channel is appropriate for its users and intended use.
9. Connected services
mealRoaster may integrate with supported wearable, health or other third-party services.
Users choose whether to authorise supported integrations.
Where an integration is authorised, mealRoaster may access information made available through that connection for the purpose of providing the relevant feature.
Users may disconnect supported integrations.
Third-party services are governed by their own terms and privacy arrangements. We cannot guarantee the continued availability or accuracy of information provided by third-party services.
10. Acceptable use
You must use mealRoaster lawfully and responsibly.
You must not:
- attempt to gain unauthorised access to mealRoaster, another user's account or information
- interfere with or attempt to compromise the security or availability of the service
- introduce malicious software or code
- use mealRoaster for unlawful, fraudulent or abusive purposes
- misrepresent your identity or authority
- attempt to circumvent access controls or usage restrictions
- systematically extract information from mealRoaster without authorisation; or
- use the service in a manner that infringes the rights of another person
We may restrict or suspend access where reasonably necessary to protect mealRoaster, its users or other organisations.
11. Data protection roles
180GIG processes personal information in accordance with applicable data protection law and the mealRoaster Privacy Policy.
Depending on how mealRoaster is used, 180GIG may act as a data controller or a data processor.
Where an organisation determines the purposes and means of processing personal data through mealRoaster and 180GIG processes that information on its behalf, the organisation is the Controller and 180GIG is the Processor.
The Data Processing Agreement in Section 20 applies to that processing.
We maintain supporting data protection and governance documentation including appropriate retention, subprocessor, data-flow and information-security documentation.
12. Retention
Personal information is retained in accordance with the mealRoaster Privacy Policy, applicable organisation settings, contractual requirements and our Data Retention Schedule.
Current standard retention arrangements may differ between service plans.
Ending a subscription, closing an account or disconnecting an integration does not necessarily result in the immediate deletion of every record.
Information may remain temporarily where necessary for:
- normal backup cycles
- security and audit records
- legal obligations
- contractual requirements
- dispute resolution; or
- an organisation's applicable retention requirements
Where an organisation acts as Controller, its instructions and applicable retention requirements may determine when personal information is deleted.
13. Security
180GIG maintains technical and organisational measures designed to protect mealRoaster and information processed through the service.
These may include, where appropriate:
- encryption in transit
- controlled and private storage
- authentication and access controls
- secure session management
- logging and monitoring
- vulnerability management
- backup and recovery procedures
- supplier and subprocessor controls; and
- security incident management
No internet-based system can guarantee absolute security.
Organisations and users are also responsible for maintaining appropriate security over their own devices, accounts, credentials and authorised users.
14. Plans and payment
mealRoaster may offer Free, Pro, Enterprise or other service plans.
Features, usage limits, retention periods and functionality may differ between plans.
Where a subscription or other charge applies, applicable pricing and billing information will be presented before purchase or agreed separately with the customer.
Unless otherwise stated at purchase, recurring subscriptions may continue until cancelled in accordance with the applicable subscription arrangements.
Customers are responsible for applicable charges associated with their accounts.
Enterprise pricing and payment arrangements may be governed by a separate agreement.
15. Intellectual property
mealRoaster, including its software, branding, designs, interfaces and associated materials, is owned by or licensed to 180GIG Limited.
These Terms give you a limited right to access and use mealRoaster in accordance with the service you have selected.
They do not transfer ownership of mealRoaster or our intellectual property to you.
You retain rights you lawfully hold in information you submit to mealRoaster.
You grant 180GIG the rights necessary to process that information for the purpose of providing, securing and operating the service in accordance with these Terms and our Privacy Policy.
16. Availability and changes
We aim to provide a reliable service but do not guarantee that mealRoaster will always be available without interruption or error.
We may modify, update, replace or discontinue features where reasonably necessary for security, technical, operational, legal or regulatory reasons.
Where a material change significantly affects a paid service, we will provide reasonable notice where practicable.
17. Suspension and termination
You may stop using mealRoaster at any time, subject to any applicable subscription or Enterprise agreement.
We may suspend or terminate access where reasonably necessary because of:
- material breach of these Terms
- non-payment
- unlawful or abusive use
- security risks
- threats to other users or systems
- legal or regulatory requirements; or
- discontinuation of the relevant service
Termination does not remove obligations or rights that by their nature are intended to continue after termination.
Personal information will be handled following termination in accordance with the Privacy Policy, applicable DPA and retention requirements.
18. Liability
Nothing in these Terms excludes or limits liability where doing so would be unlawful.
mealRoaster's nutrition analysis is based on estimates and information submitted by users or received from authorised integrations.
We do not guarantee that every nutrition estimate, meal classification or third-party data point will be complete or exact.
Where mealRoaster is used by a professional or organisation, that professional or organisation remains responsible for professional and clinical decisions and for determining whether additional assessment or verification is required.
To the extent permitted by law, 180GIG is not responsible for losses resulting solely from:
- inaccurate or incomplete information supplied by a user or third-party service
- reliance on AI-generated estimates contrary to the limitations explained in these Terms
- unauthorised use caused by a customer's failure to protect its credentials; or
- third-party services outside 180GIG's reasonable control
Separate Enterprise agreements may contain additional liability provisions.
19. Changes to these Terms
We may update these Terms to reflect changes to mealRoaster, our business, applicable law, regulatory requirements or security requirements.
Where changes are material, we will take reasonable steps to notify affected users or organisations.
The current version will be published on the mealRoaster website with its effective date.
Where appropriate, we may require users or organisations to accept updated Terms before continuing to use the service.
20. Data Processing Agreement
This Data Processing Agreement ("DPA") forms part of these Terms between 180GIG Limited and an organisation using mealRoaster ("Customer") where 180GIG processes personal data on behalf of that Customer.
It is intended to satisfy the contractual requirements applicable to Controller-Processor relationships under UK data protection law.
By creating an organisation account, accepting these Terms on behalf of an organisation or continuing to use mealRoaster as an organisation, the Customer agrees to this DPA.
For this DPA:
Controller, Processor, Personal Data, Processing, Data Subject, Personal Data Breach and Special Category Data have the meanings given to them under applicable data protection law.
Customer Data means Personal Data processed by 180GIG on behalf of the Customer through mealRoaster.
Subprocessor means another processor engaged by 180GIG to process Customer Data on behalf of the Customer.
Where the Customer determines why and how Personal Data relating to its patients, clients, residents or service users is processed through mealRoaster, the Customer acts as Controller and 180GIG acts as Processor.
The Customer is responsible for its obligations as Controller.
180GIG is responsible for its obligations as Processor.
For limited processing undertaken by 180GIG for its own legitimate operational or legal purposes, such as managing its direct customer relationship, billing, preventing fraud, maintaining service security or complying with legal obligations, 180GIG may act as an independent Controller.
The Customer instructs 180GIG to process Customer Data as necessary to:
- provide mealRoaster
- provide the features selected or configured by the Customer
- store and structure nutrition information
- perform AI-assisted meal analysis
- generate and display longitudinal records and trends
- provide authorised dashboards and reports
- operate authorised integrations
- provide support
- maintain security and service availability; and
- perform other processing documented by the Customer and agreed by 180GIG
180GIG will process Customer Data only on documented instructions from the Customer unless required to do otherwise by applicable law.
Use of mealRoaster and configuration of its available features constitute documented instructions for the purposes of this DPA.
Subject matter: Provision of mealRoaster and its associated nutrition monitoring, analysis, reporting, communication and integration functionality.
Duration: For the period during which 180GIG provides mealRoaster to the Customer, together with applicable retention, deletion and backup periods.
Nature of processing: Collection, receipt, transmission, storage, organisation, structuring, analysis, retrieval, consultation, display, communication, protection, backup, deletion and other processing necessary to provide mealRoaster.
Purpose: To provide the mealRoaster services selected and configured by the Customer.
Customer Data may include:
- names
- telephone numbers
- email addresses
- account identifiers
- organisation identifiers
- meal photographs
- meal descriptions
- ingredient information
- nutrition estimates and records
- weight and progress records
- dietary preferences
- allergy information
- connected wearable or health information where enabled
- communications
- engagement information
- authentication information
- audit and security information; and
- other information submitted by or on behalf of the Customer
Customer Data may include Special Category Data, including health information.
Data Subjects may include:
- patients
- clients
- residents
- service users
- customers
- healthcare professionals
- dietitians
- nutrition professionals
- care professionals
- Customer employees and contractors; and
- other authorised mealRoaster users
The Customer is responsible for:
- ensuring that its instructions to 180GIG comply with applicable law
- establishing an appropriate Article 6 lawful basis
- establishing an appropriate Article 9 condition where Special Category Data is processed
- providing required privacy information to Data Subjects
- managing its authorised users
- ensuring that only appropriate information is submitted to mealRoaster
- responding to Data Subjects where the Customer is Controller; and
- carrying out any DPIA or other assessment required for its particular use of mealRoaster
180GIG will provide reasonable information necessary to assist the Customer with these obligations where required by applicable law.
180GIG will ensure that persons authorised to process Customer Data are subject to appropriate duties of confidentiality.
Access to Customer Data will be limited to persons and systems requiring access for authorised purposes.
180GIG will implement and maintain appropriate technical and organisational measures designed to provide a level of security appropriate to the risks associated with the processing.
Measures may include, as appropriate:
- encryption of data in transit
- private cloud storage
- authentication and access controls
- role-based or organisation-based access controls
- secure session management
- audit and security logging
- vulnerability management
- backup and recovery procedures
- incident-response procedures
- supplier security management; and
- measures designed to maintain confidentiality, integrity and availability
180GIG maintains internal security policies and supporting assurance documentation relating to these controls.
The Customer provides 180GIG with general written authorisation to engage Subprocessors where reasonably necessary to provide mealRoaster.
180GIG will ensure that Subprocessors processing Customer Data are subject to appropriate contractual data protection obligations.
180GIG will maintain a Subprocessor Register identifying relevant Subprocessors and information concerning their processing activities.
Where required by applicable law or contract, 180GIG will provide reasonable notice of intended material additions or replacements of Subprocessors.
The Customer may raise a reasonable data protection objection to a new Subprocessor. The parties will work in good faith to identify an appropriate solution.
180GIG remains responsible for its applicable processor obligations concerning processing performed by its Subprocessors.
180GIG will not make a restricted transfer of Customer Data without using an appropriate transfer mechanism or safeguard where one is required by applicable data protection law.
Information concerning relevant processing locations may be maintained in the mealRoaster Subprocessor Register and supporting data-flow documentation.
180GIG maintains documentation describing relevant flows of Personal Data through mealRoaster, including applicable applications, infrastructure, integrations and third-party providers.
This documentation supports privacy, security and regulatory assessments.
Detailed architecture or data-flow information may be provided to Customers where reasonably required for due diligence, subject to appropriate security and confidentiality restrictions.
180GIG maintains a Data Retention Schedule governing retention and disposal of relevant categories of information.
Retention may depend on the Customer's service, configuration, documented instructions and applicable legal requirements.
At the end of the processing relationship, 180GIG will delete or return Customer Data as required by the Customer and applicable law, except where continued retention is legally required.
Information contained in backups may remain until removed through normal backup retention cycles, provided it remains protected and is not used for other purposes.
Taking into account the nature of the processing, 180GIG will provide reasonable assistance to the Customer in responding to requests by Data Subjects exercising applicable rights.
Where 180GIG receives a request relating primarily to Customer Data for which the Customer is Controller, 180GIG may refer the request to the Customer unless legally required to respond directly.
180GIG will notify the Customer without undue delay after becoming aware of a Personal Data Breach affecting Customer Data.
Where available and applicable, the notification will provide information reasonably necessary for the Customer to understand:
- the nature of the breach
- affected categories of information or Data Subjects
- likely consequences
- measures taken or proposed to address the breach; and
- relevant contact information
180GIG will take reasonable steps to contain, investigate and mitigate applicable breaches.
Taking into account the nature of processing and information available to 180GIG, we will provide reasonable assistance where required for:
- Data Protection Impact Assessments
- consultations with relevant supervisory authorities
- Data Subject rights
- Personal Data Breach obligations; and
- other applicable Controller obligations relating directly to mealRoaster processing
180GIG will make available information reasonably necessary to demonstrate compliance with applicable Processor obligations.
Where reasonably required, this may include relevant privacy, security and assurance information.
Customer audits must be reasonable and proportionate, protect the confidentiality and security of other customers and avoid unnecessary disruption to mealRoaster.
Where appropriate, 180GIG may satisfy information requests through existing independent assessments, certifications, reports or assurance documentation.
On termination of the applicable services, 180GIG will, at the Customer's choice and subject to applicable functionality and law, delete or return Customer Data and delete remaining copies when required.
This does not apply where applicable law requires continued storage.
Normal backup retention periods may also apply as described above.
If the Customer enables additional mealRoaster functionality, integrations or communication channels, the processing necessary to provide those features will become part of the Customer's documented instructions.
Material changes affecting the processing of Personal Data will be reflected in applicable documentation where required.
If there is a conflict between this DPA and another part of these Terms concerning 180GIG's processing of Customer Data as Processor, this DPA takes precedence in relation to that processing.
If the Customer and 180GIG subsequently enter into a separately executed Data Processing Agreement or Enterprise agreement that expressly replaces or modifies this DPA, the separately executed agreement takes precedence to the extent of the conflict.
21. General terms
If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions will continue to apply.
A failure by either party to enforce a provision immediately does not waive its right to enforce that provision later.
You may not transfer your contractual rights or obligations under these Terms without our consent where consent is legally permitted to be required.
We may transfer our rights or obligations as part of a corporate restructuring, financing, acquisition or sale of the relevant business, subject to applicable law.
These Terms are governed by the laws of England and Wales, unless mandatory consumer law requires otherwise.
The courts of England and Wales will have jurisdiction, subject to any mandatory rights available to consumers under applicable law.
22. Contact
Questions about these Terms or the incorporated Data Processing Agreement can be sent to:
180GIG Limited / mealRoaster
Email: mealroaster@180gig.com
For privacy and data protection requests, please use the same contact address.