Privacy Notice

We collect account details such as your name, email address and login information; meal-profile details you choose to provide, such as region, dietary preferences, food habits and wellness goals; sugar-log entries and food photos you submit; support messages; and technical information such as IP address, device identifiers, browser type, usage events and security logs.

Paddle, our Merchant of Record, collects and processes payment details under its own privacy terms. We receive transaction, product and purchase-status information needed to provide your order, but we do not receive your full card or UPI credentials.

We use account and meal-profile information to create and save your requested meal plans, provide purchased features and downloads, and support your account. We use communications to answer support requests. We use technical and usage information to keep ThaliSmart secure, prevent fraud, diagnose problems and improve the service.

Our legal bases are performance of our contract when we provide an account or purchased service; our legitimate interests in operating, securing and improving ThaliSmart; consent where the law requires it; and compliance with legal obligations.

We share only what is necessary with service providers that support hosting, authentication, storage, analytics, communications and customer support; with Paddle for product sales, subscription or order management, payments, taxes, refunds and invoicing; with legal, accounting and other professional advisers; and with public authorities when the law requires it.

Some providers may process information outside your country. Where required, we use recognised safeguards such as contractual protections or adequacy decisions.

We keep personal data only for as long as needed to provide the service, maintain security, resolve disputes and meet tax, accounting and legal duties. We then delete or anonymise it. Retention periods vary by record type and applicable law.

Depending on where you live, you may ask to access, correct, delete, restrict or receive a copy of your personal data, object to certain uses, or withdraw consent. You may also complain to your local data-protection authority. We respond within the period required by applicable law.

To make a privacy request, use the member support form or email hello@thalismart.com. We may need to verify your identity before completing the request.

We use appropriate technical and organisational safeguards, including access controls, encryption in transit and restricted storage access. No online service can guarantee absolute security.

ThaliSmart uses essential cookies or local storage for sign-in, security, language and service operation. If analytics or marketing technologies are enabled, we will request consent where required and provide a way to manage non-essential preferences. Browser controls can also block or remove cookies, though essential features may stop working.

We may update this notice when the service or law changes. The latest version and update date will remain on this page. Questions and privacy requests can be sent through the member support form or to hello@thalismart.com.