Privacy Policy

SexyMeals (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and the choices you have. By using our website and services (“Service”), you agree to the practices described here.

Information you provide directly

• Account information: name, email address, and password when you register.
• Order information: delivery address, phone number, and payment details (card numbers are processed by our payment provider and never stored on our servers).
• Dietary preferences: allergies, diet preferences, spice tolerance, and any notes you save in your account.
• Reviews and ratings: content, star ratings, and photos you submit for dishes.
• Communications: messages you send to our support team.

Information collected automatically

• Usage data: pages visited, features used, time spent, and navigation paths within the Service.
• Device and browser information: IP address, browser type, operating system, and device identifiers.
• Cookies and similar technologies: session tokens and preference cookies that keep you signed in and remember your language setting. We do not use third-party advertising cookies.

• Order fulfillment: processing, preparing, and delivering your meals; communicating order status updates.
• Account management: authenticating your identity, maintaining your preferences, and providing account support.
• Personalization: filtering and highlighting menu items based on your dietary preferences and allergy flags.
• Email communications: sending transactional emails (order confirmation, delivery updates, account activation). We do not send marketing emails without your explicit consent.
• SMS notifications: if you provide your phone number and opt in, we send SMS messages for order status updates, shipment notifications, and special updates you have subscribed to (such as new menu releases or launch alerts). Standard message and data rates apply. You can opt out at any time by replying STOP.
• Safety and fraud prevention: detecting and preventing fraudulent orders, unauthorized account access, and other harmful activity.
• Service improvement: understanding how the Service is used to fix bugs, improve features, and develop new offerings.
• Legal compliance: meeting our obligations under applicable law, responding to lawful requests from authorities, and enforcing our Terms of Service.

We never sell, rent, or trade your personal information — ever. Below is the complete list of third-party providers who may receive your data in order to deliver the Service. We believe in full transparency: you deserve to know exactly who handles your information and why. Every provider on this list is contractually bound to use your data only as directed by SexyMeals and to protect it with appropriate security measures.

• Delivery partners. We share your name, delivery address, and phone number with drivers or third-party delivery services solely to complete your delivery.
• Payment processor. Payment card data is transmitted directly to our PCI-compliant payment processor. We receive only a masked card reference and transaction confirmation.
• Infrastructure and hosting providers. We use cloud infrastructure (including Supabase for database/authentication and DigitalOcean for hosting) that may process your data on our behalf under data processing agreements.
• Email service provider. We use Brevo (Sendinblue) to send transactional emails. Your email address is shared only for the purpose of delivering those emails.
• SMS service provider. We use Twilio to send SMS notifications. Your phone number is shared with Twilio solely to deliver messages you have opted in to receive. Twilio’s privacy policy is available at twilio.com/legal/privacy.
• Legal and safety disclosures. We may disclose information if required by law, court order, or government request, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of SexyMeals, our users, or the public.
• Business transfers. If SexyMeals is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Service before such a transfer occurs.

We retain your account information and order history for as long as your account is active or as needed to provide the Service. Dietary preference logs are retained for up to 365 days per entry to allow you to review your change history. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., financial records).

We send SMS messages only to customers who have explicitly opted in. You may opt in by:

• Checkout: checking the SMS consent box during checkout on sexymeals.com, which reads: “I agree to receive SMS order updates and notifications from SexyMeals. Message & data rates may apply. Reply STOP to opt out.”
• Notification signup: submitting your phone number at sexymeals.com/notify to receive launch alerts, new menu announcements, and special subscriber updates.

Message types include order confirmations, shipment and delivery status updates, and special notifications for menu releases or events that you have subscribed to. Message frequency varies based on your order activity and subscribed preferences. Message and data rates may apply.

To opt out: reply STOP to any SMS from us at any time. You will receive one confirmation message and no further texts. Reply HELP for assistance or email [email protected]. You can also manage your SMS preferences in Account Settings on the website.

Opting out of SMS does not affect transactional email communications related to your account.

We use essential cookies to maintain your login session and remember your language preference (English/Thai). These cookies are strictly necessary for the Service to function and cannot be disabled without breaking core functionality. We do not use advertising or analytics cookies from third parties.

You can clear cookies at any time through your browser settings, but doing so will sign you out of your account.

• Access and correction. You can view and update your dietary preferences and profile information directly in your account settings at any time.
• Account deletion. You may request deletion of your account and associated personal data by emailing [email protected]. We will process your request within 30 days.
• Data portability. You may request a copy of the personal data we hold about you by contacting us at [email protected].
• Opt-out of email communications. Transactional emails (order updates, account notices) are required for use of the Service and cannot be opted out of while your account is active. If we ever send promotional emails, each will include an unsubscribe link.
• Opt-out of SMS. Reply STOP to any text from us to unsubscribe immediately. You can also update your SMS preferences in Account Settings at sexymeals.com.

Residents of California, Illinois, or other US states with privacy laws may have additional rights. Contact us at [email protected] to exercise those rights.

The Service is not directed to children under 13 and we do not knowingly collect personal information from anyone under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child has provided us with their information, please contact [email protected].

We use industry-standard security measures including HTTPS encryption in transit, encrypted database storage, and role-based access controls to protect your personal information. No method of transmission or storage is 100% secure; while we strive to protect your data, we cannot guarantee absolute security.

The Service may contain links to third-party websites. This Privacy Policy does not apply to those sites and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on the Service at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

For questions, requests, or concerns about this Privacy Policy or how we handle your data, please contact us at:

SexyMeals
Email: [email protected]