Privacy Policy

Last updated: February 2, 2026

1. Information We Collect

When you use txtmeal, we collect:

• Phone number — used for authentication and receiving/sending SMS messages
• Meal descriptions — the text messages you send to log meals
• Nutritional data — AI-generated estimates of calories, protein, carbohydrates, and fat for your logged meals
• User preferences — calorie goals, protein goals, timezone, and reply mode settings
• Usage data — timestamps of meals logged, pages visited on the dashboard, and session information

2. How We Use Your Information

We use your information to:

• Provide and operate the Service (meal logging, nutrition tracking, trend analysis)
• Authenticate your identity via SMS magic links
• Send you SMS confirmations and responses to meal logs
• Generate nutritional estimates using third-party AI services
• Improve and maintain the Service

3. Third-Party Services

We use the following third-party services to operate txtmeal:

• Twilio — for sending and receiving SMS messages. Your phone number and message content are transmitted to Twilio. See Twilio's Privacy Policy.
• OpenAI — for parsing meal descriptions and estimating nutritional content. Meal text is sent to OpenAI for processing. See OpenAI's Privacy Policy.

4. Data Retention

We retain your data as follows:

• Meal data — retained for as long as your account is active. Deleted meals are soft-deleted and permanently purged within 30 days.
• Account information — retained for as long as your account is active, plus up to 30 days after account deletion to allow for recovery.
• Session tokens — expire automatically and are removed on a rolling basis.
• Server logs — retained for up to 90 days for debugging and security purposes, then automatically deleted.

5. Data Deletion & Account Wiping

You have the right to request complete deletion of your account and all associated data at any time. To request data deletion:

• Via SMS — text "DELETE MY ACCOUNT" to the txtmeal number
• Via email — send a request to support@txtmeal.com from the email associated with your account, or include your phone number for verification

Upon receiving a valid deletion request, we will permanently delete all your personal data, including meal history, account settings, and any associated records, within 30 days. This action is irreversible. Data that has already been anonymized or aggregated for analytics purposes may be retained, as it can no longer be linked to you.

6. Data Export

You may request a copy of all personal data we hold about you by emailing support@txtmeal.com. We will provide your data in a machine-readable format (JSON) within 30 days of your request.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal data, including encrypted connections (TLS), secure database access controls, and token-based authentication. However, no method of transmission or storage is 100% secure.

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (see Section 5)
• Object to or restrict processing of your data
• Data portability (see Section 6)

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via SMS or by posting a notice on the dashboard. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at support@txtmeal.com.