Privacy Policy

Account data: email, hashed password, display name and any chosen profile preferences.

Billing data: payment is processed by our certified payment processors — currently Stripe, with PayPal and Creem available as alternates. We receive the last four digits of your card, the brand and the country; we never store full card numbers, CVCs or PayPal account passwords.

Content data: text prompts you send to the chat, fridge or spice-rack photos you upload, AI-generated recipes, plating cards and wok-side video reels.

Technical data: IP address, device, browser, language, referrer, cookies and usage logs (page views, clicks, errors).

Communications: support tickets, emails and any feedback you submit.

To provide, secure and improve the service, including generating recipes, plating cards and wok-side video reels you request.

To process payments through our payment processors (Stripe, PayPal, Creem) and manage your subscription.

To detect and prevent fraud, abuse, illegal use and policy violations.

To communicate with you about your account, security alerts and service updates.

With your explicit consent, to send marketing emails about new wok motions and seasonal menus. You can withdraw consent at any time.

To comply with legal obligations, including tax, accounting and law-enforcement requests.

Contract: to deliver the service you subscribed to.

Legitimate interests: security, fraud prevention, product analytics, internal reporting.

Consent: marketing emails, optional analytics and marketing cookies, and any opt-in to internal model training signals.

Legal obligation: tax retention, court orders, regulator requests.

Your content is not used to train third-party foundation models by default.

We may use anonymised and aggregated signals (for example, error rates, prompt categories, generation latency) to improve the Khomkai service.

You can opt out of any internal training use of your content in account settings.

Account data: until you delete your account, then up to 90 days in backups.

Content data: 30 days, unless you save it to your private cookbook or delete it sooner.

Billing records and invoices: 7 years, for tax compliance.

Server and security logs: 90 days.

We share data with processors only as needed to run the service: Stripe, PayPal and Creem (payments and subscription management), Supabase or Clerk (authentication and data storage), our hosting and content-delivery provider, our analytics provider and our email provider. Each processor is bound by its own privacy notice and a data-processing agreement with us.

We do not sell your personal data. We do not share it with advertising networks except with your explicit marketing-cookie consent.

We may disclose data when required by law, to protect rights and safety, or in the event of a corporate restructuring (with reasonable notice).

Data may be processed in the United Kingdom, European Economic Area, United States and other countries where our processors operate. Where transfers leave the UK or EEA, we rely on the UK International Data Transfer Agreement, EU Standard Contractual Clauses or equivalent safeguards.

Access, correct, delete, restrict, port and object to processing of your personal data.

Withdraw consent at any time without affecting the lawfulness of past processing.

Opt out of the sale or sharing of personal information for cross-context behavioural advertising. We do not sell personal data; we honour Global Privacy Control (GPC) as an opt-out signal.

Lodge a complaint with the UK Information Commissioner's Office (ICO) or your local data protection authority.

To exercise these rights, email support@khomkaithaicuisine.com. We respond within 30 days.

The Khomkai service is intended for users aged 13 and older. Users aged 13–17 must have a parent or legal guardian's consent. We do not knowingly collect data from children under 13; if you believe we have, email support@khomkaithaicuisine.com and we will delete it.

We use TLS for transport, hashed passwords, role-scoped access controls, encrypted backups and least-privilege production access. No system is fully secure; please notify us promptly of any suspected breach.

We will notify registered users of material changes at least 14 days before they take effect, by email and in-app.

KHOMKAI THAI CUISINE LTD, 9 Market Street, SK17 6JY, England.

Data queries: support@khomkaithaicuisine.com.