What we shipped this week.
Every meaningful change to Mealward, in plain language. New entries land here as we deploy them. If something here matters to your facility and you would like a walkthrough, grab a 30-minute slot.
June 2026
- Shipped
Family portal 2.0#
Families get onboarding, meal likes and dislikes, push notification opt-in, live Updates feed, satisfaction ratings, and an Account page for email/push/SMS preferences.
Family portal - Shipped
Two-way in-app helpdesk#
Support tickets now have a conversation thread. Staff submit from Help or Support; Mealward replies in-app and staff can follow up on the same ticket. Your notification bell lights up when we reply.
Report an issue - Shipped
Family portal — messaging, notifications, and tasks#
Invite family members to a private portal. They message care staff, set notification preferences, and see tasks assigned to them. Staff reply from the Family tab; the bell notifies you on new family messages.
Family tab - Improved
External viewer onboarding#
Inviting an external viewer (dietitian, auditor, GP) now sends a Supabase invite email so they can set their own password. First login lands on Reports with a short welcome tour.
Staff settings - Improved
In-app What's new feed#
The sidebar What's new link now opens inside the app with a timeline of recent updates — no more jumping to the marketing site. The teal badge clears when you visit the page.
What's new - Shipped
Privacy controls and data governance#
Residents now have an AI processing consent toggle. Facility admins can configure data retention periods, export resident data, and download audit logs as CSV from Settings → Privacy.
Privacy settings - Shipped
Webhook event bus for external integrations#
Connect Mealward to Salesforce, HubSpot, or any custom endpoint. Configure signed outbound webhooks from Settings → Integrations, with a delivery log for every event.
Integrations - Shipped
External viewer role for auditors and clinicians#
Invite external stakeholders (dietitians, GPs, auditors) as read-only members. They can view reports without accessing kitchen or order workflows.
- Improved
Facility branding, plan tiers, and role-specific onboarding#
Upload your facility logo, set your timezone, and choose the page staff land on after login. Organisation plans (Pilot / Growth / Enterprise) now gate advanced features. First login shows a tour tailored to your role.
Branding settings - Improved
Contextual help on every page#
Tap the ? button on any page for page-specific tips. New help content covers integrations, API keys, privacy, branding, and the audit log.
- Operations
Webhook retry, backup verification, and data retention automation#
Failed webhook deliveries now retry automatically with exponential backoff. Monthly database backup restore verification runs in CI. Discharged resident data is anonymised on schedule per your retention setting.
May 2026
- Shipped
Ask Mealward: instant answers from live facility data#
The Ask page now shows four KPI chips at the top (minced/purée residents, dietary updates, today's orders, AI spend) and answers starter questions instantly from your facility data — no AI tokens, no quota risk. Free-text questions still use Gemini when configured. Snapshots refresh every 30 minutes once your admin applies the latest database migration.
Open Ask - Operations
Security hardening: API auth gates and content security policy#
Every customer API route now requires authentication — unauthenticated requests return 401 instead of reaching the database. A Content-Security-Policy header is live on production. Full audit report at docs/FULL-AUDIT-2026-05-28.md.
Trust page - Operations
Mealward is now at mealward.com.au#
Australian software, Australian domain. Mealward's marketing site, customer login, demo sandbox, and V2 preview all serve from mealward.com.au going forward. The mealward.com domain remains live and 301-redirects through to .com.au, so existing bookmarks and email links keep working without a click. Email addresses ([email protected] etc.) are unchanged.
- Improved
Mobile + iPad polish: smooth on every screen#
We audited eight public marketing routes at phone (390px), iPad (820px), and desktop widths. A decorative hero orb was causing horizontal scroll on every page — we clipped overflow on the marketing shell and re-ran the audit. Result: zero horizontal-overflow issues across all routes and viewports.
- Operations
Auto-deploy: every push to main lands in production in under 90 seconds#
We replaced a flaky Vercel GitHub webhook with a deterministic GitHub Actions workflow that fires the Vercel deploy hook on every push to main. Production deploys now complete in under 90 seconds with a full run history in Actions — no more manual `vercel deploy --prod` after merges.
- Shipped
Daily AI anomaly scan, Sunday digest autopilot, AI shopping list, founder status board#
The disruptor lands. Every morning at 6am AEST, Claude Haiku reads the past 24 hours of signals across every facility (food intake, HACCP, malnutrition flags, satisfaction, dietitian sign-offs, certificate expiries, kitchen orders) and posts attention_items straight to the org managers. No competitor in Australian aged-care food software does this. The weekly digest is now on full autopilot - Sunday 7am AEST every facility manager gets a Claude-Sonnet-written week-in-review email. POST /api/ai/shopping-list consolidates this week's recipe ingredients into a supermarket-section-grouped shopping list. And /luke.html is a tickable status board for the founder.
Open status board - Shipped
Workforce compliance, 24-hour intake, AI weekly digest, refreshed demo hub#
Pillar 5 (workforce) goes from 10 to 45 percent: /workforce tracks Food Safety Supervisor and allergen-awareness certificates plus completed training modules. Pillar 1 + 4 gets the Royal Commission Recommendation 38 24-hour food and fluid intake grid at /intake with auto-flagging when food drops below 25 percent or fluid below 800mL. Pillar 8 (AI) gets a weekly facility digest generator at /api/ai/weekly-digest that summarises the past 7 days through Claude Sonnet, queues an email to your inbox, and falls back to a computed summary if AI is unavailable. The demo hub at /internal/demo-hub now has a numbered 10-step demo trail.
Open demo hub - Shipped
Five new surfaces: Kitchen mode, Ask AI, Signage, Demo hub, Family portal foundation#
A big build night. Kitchen mode (/kitchen-mode) is a dark, large-font station view that auto-refreshes every 60s and highlights recent resident changes. Ask AI (/ask) is a read-only chat assistant scoped to your facility - it can count residents by dietary tag, list recent dietary changes, summarise today’s orders, and report this month’s AI spend. Resident dining signage (/signage/[facilityId]?token=...) is a public, token-gated full-screen menu display that cycles through services with very large fonts. A new Signage tokens admin page lets a facility admin mint and revoke tokens per display. Demo hub (/internal/demo-hub) gives one-click access to every surface Luke needs during a live demo. And the family portal foundation is in: a flagged-off /family route with a hardened SECURITY DEFINER summary function that exposes only the safe fields.
See changelog - Improved
Mealward AI: one-click "add to catalog" + per-decision audit log#
Two follow-ups to the Mealward AI beta from earlier today. First, when the AI menu planner proposes dishes that aren’t yet in your facility catalog, a new "Add N dishes to catalog" button creates them in one click — with sensible category defaults inferred from the meal section — and immediately wires them into the proposal so you can apply the cycle without leaving the page. Second, every AI menu plan and every AI dietary check now writes an entry to the facility activity log with token counts, the AI’s rationale, and the human’s decision. This makes the AI a proper evidence source for Aged Care Quality Standard 6 audits, not a black box.
- Shipped
HELF revenue simulator now interactive on the pricing page#
The HELF (Higher Everyday Living Fee) revenue simulator on mealward.com/pricing is now a live calculator. Move the bed-count, uptake, and category sliders and the projected annual HELF revenue updates in real time. There’s an option to email the resulting scenario to yourself for the next CFO conversation. Sized for boutique-to-mid operators and based on the same pricing tables used in our customer onboarding pack.
Try the simulator - Shipped
New "Order completion" report for facility leaders#
A new Order completion report (Reports → Order completion in the sidebar) shows what percentage of orders were taken in Mealward for each meal service, against the active resident count net of absences. Daily breakdown with a sparkline trend and the 80% pilot-success line. Useful for facility admins running a Mealward rollout to see week-on-week adoption without a spreadsheet.
- Shipped
Cal.com bookings now auto-create HubSpot deals#
Every demo booked via cal.com/mealward now creates a HubSpot deal at the "Demo booked" stage and associates it with the booker contact. This lets us watch every prospect move through demo -> pilot -> paying without manual data entry. The webhook is idempotent - booking again from the same email won’t double-create.
- Operations
Audit log isolation hardened#
Row-level security around our activity and audit log tables has been tightened so authenticated users can only write entries scoped to a facility they are a member of. The change closes a class of cross-tenant injection where a fabricated entry could otherwise be planted in another facility’s audit trail. Documented in our internal RLS audit alongside the rest of the multi-tenant isolation posture.
How we isolate tenant data - Shipped
Subscribe to our changelog via RSS#
You can now follow Mealward updates in any RSS reader. The feed lists everything we have shipped, fixed, or improved, with a category pill on each item. Useful for procurement teams who want to track release velocity without checking the page manually.
Open the RSS feed - Operations
Off-site nightly database backups#
Every night at 03:00 AEST, an encrypted copy of the production database is uploaded to a Cloudflare R2 bucket in a different region than the primary database. Round-trip decryption is verified inside the workflow before the upload completes. Restore runbook is documented for our team to execute within a 4-hour RTO. This is on top of the 7-day point-in-time recovery that ships with Supabase Pro.
Read our trust + security page - Operations
Branded transactional emails#
Account confirmation, password reset, magic link, and invite emails now send from [email protected] over Google Workspace SMTP, signed with our DKIM. Recipients see Mealward in headers and our logo in the body. Deliverability is monitored via Google Postmaster Tools.
- Operations
Live service status page#
A public status page now shows the real-time health of every component (app, API, database, auth, file storage). It pulls from external uptime checks and auto-pings our on-call channel whenever anything degrades. SLA commitments are spelled out alongside.
See live status - Improved
Refreshed visual identity across the app#
Sidebar, branding, and accent colours updated to deep teal across the authenticated app and marketing site. Per-facility theming (so each home can configure their own brand colour) was rebuilt to feel genuinely native to each customer rather than a tinted skin over a generic UI.
View brand guide - Shipped
Mobile-first marketing experience#
Full hamburger navigation drawer on phones, a real iPhone screenshot in the hero, and properly-sized images everywhere. Significantly improves first impressions for customers and prospects browsing on tablet or phone.
- Shipped
Standard 6 (Resident Rights) compliance baked into the data model#
Dislikes are now first-class concepts (separate from allergies). IDDSI is per-resident with full audit trail. Photo-led ordering supports resident choice at the point of order. Every action is timestamped and attributable. Standard 6 evidence is one PDF export away.
NACA compliance brief - Improved
Live demo - no signup, no friction#
Anyone can try a full working facility instance in under 10 seconds. Two-resident scenarios, kitchen + dining views, reporting, the lot. Demo resets nightly so you can poke without worrying about state.
Try the demo - Operations
Real-time error monitoring and on-call alerting#
Every error in production is captured with full context (URL, browser, user state) and a redacted view of the action that triggered it. Critical errors page our on-call channel within 30 seconds of happening. We see and fix issues before customers report them.
See it for yourself.
The live demo has every feature you see in this changelog, running against a sample facility that resets nightly.