Privacy Policy

PoppyMeals is an AI-powered meal planning service that delivers personalized dinner ideas, recipes, and shopping lists over SMS and Telegram. This privacy policy explains what information we collect, why we collect it, and how we protect it.

In this policy, “we,” “us,” and “our” refer to PoppyMeals. “You” refers to anyone who signs up for or uses the service.

When you use PoppyMeals, we collect:

• Account information: your email address and name, provided through our authentication partner (Clerk).
• Phone number: required to deliver SMS messages, or a Telegram chat ID if you choose the Telegram channel instead.
• Household and dietary preferences: household size, allergies, dietary preferences, cooking time limits, food adventurousness, collected during onboarding.
• Meal plan history: the meals suggested to you, which you selected, your feedback, and any free-form preferences you've shared (“my partner hates cilantro,” “Wednesdays are takeout nights now,” etc.).
• Usage data: timestamps of message exchanges and basic diagnostics for service reliability.

We collect this information solely to operate the service: delivering meal suggestions, building shopping lists, remembering your preferences, and keeping your account secure. We do not sell your data, we do not rent your data, and we do not share it for advertising purposes.

To operate the service, we use the following sub-processors. Each is bound by their own privacy commitments:

• Clerk: authentication and user management
• Supabase: database hosting (Postgres + pgvector)
• Stripe: billing and subscription management
• Twilio: SMS message delivery
• Telegram: messaging channel (if selected)
• Anthropic: AI model provider (meal suggestions and conversation)
• Resend: transactional email delivery
• Vercel: application hosting
• Inngest: background job orchestration

We keep your account information and preferences as long as your account is active. When you delete your account, we delete your personal information from our systems within 30 days, except where we are legally required to retain it (for example, billing records for tax purposes). Anonymized usage data may be retained indefinitely for service improvement.

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated personal information
• Export your data in a portable format
• Withdraw consent for SMS messaging at any time by replying STOP to any message

To exercise any of these rights, contact us at support@poppymeals.com.

We use cookies only for authentication (set by Clerk to keep you signed in). We do not use third-party advertising cookies or tracking pixels. The only analytics we use is Vercel Web Analytics, which is privacy-preserving and does not use cookies or track users across sites.

PoppyMeals is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will delete it.

We may update this policy from time to time. If we make material changes, we'll notify you by email and/or a prominent notice on our service prior to the change taking effect. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

Questions about this policy? Email support@poppymeals.com.