Privacy Policy

Last updated: May 3, 2026

WhamFood ("we", "our", "the service") is a recipe-management and meal-planning assistant that runs as a Telegram bot. This policy describes what information we collect, how we use it, and the choices you have.

Information we collect

Telegram identity

When you start a conversation with our bot, Telegram provides us your numeric user ID, first name, and (if you've set one) username and language preference. We use the numeric user ID as the account key. We do not receive your phone number, email address, or contact list.

Content you send

The messages you send to the bot — text, photos, links, voice notes — are processed to provide the service. This includes:

• Recipe links you share (URLs, captions, page text we fetch)
• Photos you upload (we extract recipe text and ingredients)
• Video links from Instagram, TikTok, or YouTube (we fetch transcripts and captions)
• Free-form text describing recipes, requests, or feedback

Data we generate on your behalf

To provide the service we store:

• Your saved recipes (title, ingredients, instructions, source link, tags)
• Your meal plans (which recipe is assigned to which day)
• Your grocery lists (items, quantities, aisle category, checked state)
• Recent conversation history with the bot (last 10 messages, capped at 7 days, used to maintain context across replies)

How we use your information

• Service delivery. Save your recipes, generate meal plans, build shopping lists, respond to your messages.
• Personalization. Avoid suggesting recipes you've recently cooked; balance cuisines and proteins across the week.
• Improvement. Aggregate, anonymized signal about which features are used helps us prioritize what to build next. We do not use your message contents for AI model training.

Third parties we use

• Telegram — the messaging platform. Subject to Telegram's privacy policy.
• Anthropic (Claude) — for natural-language understanding (recipe extraction, meal-plan generation, grocery list consolidation). Message content you send is forwarded to Anthropic's API for the immediate response and is not retained for training. See Anthropic's Privacy Policy.
• Tavily — to fetch and clean recipe webpages you share. Only the URL you send is forwarded.
• Supadata — to fetch transcripts from video links you share. Only the URL is forwarded.
• Prismism — to host shareable HTML pages (your saved recipes, meal plans, grocery lists). Pages are accessible to anyone with the unique link; we do not publicly index them.
• Railway — hosting infrastructure. Encrypted in transit and at rest.
• Instacart (forthcoming) — once enabled, items from your grocery list may be sent to Instacart at your explicit direction to enable delivery. We share only the items you've selected to send.

How long we keep data

• Recipes, meal plans, and grocery lists: as long as you use the service, until you delete them or request account deletion.
• Conversation history: 7 days rolling window.
• Logs: up to 30 days for operational debugging.

Your rights

You can:

• Export your data. Email hello@whamfood.com and we'll send your saved recipes, plans, and lists in JSON.
• Delete your account. Email us; we permanently remove your data within 7 days.
• Stop using the bot. Block @WhamFoodBot in Telegram. Your data stops being touched. Email us if you want full deletion.

Children

WhamFood is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe we have, contact us and we'll delete it.

Security

Data is encrypted in transit (HTTPS) and at rest. Access to backend systems is restricted to the operator. We do not sell your data. We do not run advertising.

Changes to this policy

If we materially change this policy we'll update the "last updated" date at the top and, where required, notify you via the bot.

Contact

Questions about this policy or your data: hello@whamfood.com.