ShameKitchen ("ShameKitchen", "we", "our", "us") is operated by 814 Solutions, a sole proprietorship registered in India. This Privacy Policy explains what personal data we collect about you, why we collect it, how we use it, who we share it with, and what rights you have over it.

ShameKitchen is a personal food accountability service delivered through WhatsApp. By using ShameKitchen, you agree to the practices described in this policy. If you do not agree, please do not use the service.

ShameKitchen is for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18.

Who is the data controller

The data controller for personal data processed in connection with ShameKitchen is 814 Solutions, the entity that operates ShameKitchen. References to "ShameKitchen" in this policy refer to this controller.

For all privacy matters, contact us at privacy@shame.kitchen.

What personal data we collect

We collect the following categories of personal data:

Account and contact data

• Your WhatsApp phone number (this is your unique identifier with us)
• The name you choose to share with us during onboarding
• Your age confirmation (you confirm you are 18 or over)
• Your chosen mode (Hard or Real) and intensity preferences
• Your stated goal or felt outcome

Content you send us

• Photographs of meals and food items
• Text messages, voice notes, and other content you send to our WhatsApp number
• Reactions and feedback signals (e.g., "fire", "meh", "stop") you send in response to our messages

Behavioural and pattern data we generate

• Records of meals logged, including dates, times, and timestamps
• Streak counts, rank progression, and cumulative days logged
• Patterns we infer from your meal history, including but not limited to typical timing, frequency, and types of food you log
• Cases we open for you and your progress on those cases
• Memory entries containing facts you have shared or behaviours we have observed, used to personalise future interactions

Payment data (if you subscribe)

• Your subscription tier, status, and billing dates
• Payment confirmation references from our payment processors
• We do not store your full card number, CVV, or bank account details. These are handled by our payment processors.

Technical data

• WhatsApp message metadata provided to us by Twilio (delivery status, timestamps)
• Server logs that may contain your phone number, timestamps, and request data, retained for a limited period for security and debugging
• Country information inferred from your phone number country code, used to surface country-appropriate crisis resources

Safety data

• If our systems detect language that may indicate distress, eating disorder risk, or self-harm, we log the event and our response so we can review and improve our safety behaviour

We do not collect calories, macros, weight, body measurements, or other body metrics by default. We only process such data if you explicitly enable optional features that require it.

Why we collect it and our legal basis

We process your personal data for the following purposes:

You can withdraw consent at any time, but doing so may stop us from providing the service.

Who we share your data with

We share your personal data only with the third parties listed below, and only to the extent needed to deliver ShameKitchen to you. These third parties act as processors on our behalf or as independent controllers for limited purposes (e.g., payment).

Our sub-processors

We do not sell your personal data. We do not share it with advertisers or data brokers.

We may also share personal data:

• With law enforcement, courts, or regulators where legally required
• With professional advisors (lawyers, accountants) under duty of confidentiality
• With a successor entity in the event of a merger, acquisition, or sale of business assets (you will be notified before any such transfer)

International data transfers

We are based in India. Our sub-processors are located in the countries listed above. This means your personal data may be transferred to and processed in jurisdictions outside your home country, including the United States and Singapore.

For users in the European Economic Area, the United Kingdom, or other jurisdictions with cross-border transfer rules:

• Singapore (where our primary database is located) is recognised by the UK as providing an adequate level of data protection
• Transfers to the United States (Twilio, OpenAI, Cloudflare, Railway) are made under contractual safeguards including the European Commission's Standard Contractual Clauses where applicable
• We do not require any sub-processor to access more personal data than is necessary for the service they provide

You can request a copy of the contractual safeguards in place for any specific transfer by emailing privacy@shame.kitchen.

How long we keep your data

We retain personal data only for as long as necessary for the purpose we collected it.

When you ask us to delete your data, we will do so within 30 days, except where law requires us to retain it (such as payment records under tax law). Deletion is irreversible.

Your rights

You have the following rights over your personal data. We will respond to any request within 30 days.

Under the Digital Personal Data Protection Act, 2023 (India), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request erasure of your data
• Nominate another person to exercise these rights in case of your death or incapacity
• Lodge a grievance with us (and, if unresolved, with the Data Protection Board of India)

Under the GDPR (if you are in the EEA), the UK GDPR, or similar regimes, you also have the right to:

• Restrict our processing of your data
• Object to processing based on legitimate interest
• Receive your data in a portable, machine-readable format
• Lodge a complaint with your local supervisory authority

How to exercise your rights

Email privacy@shame.kitchen from the email address associated with your account, or send the message DELETE MY DATA to our WhatsApp number. We will confirm your identity before acting (typically by replying to your WhatsApp number to verify), then complete the request.

For data deletion via WhatsApp, we use a two-step confirmation to prevent accidental loss. After your first request we will ask you to confirm; only after your second confirmation will we proceed.

We do not charge a fee for handling rights requests unless they are manifestly unfounded or excessive.

Security

We take the security of your personal data seriously and apply the following measures:

• All data is transmitted over encrypted connections (HTTPS / TLS)
• Meal photographs are stored in a private bucket and accessed only through short-lived signed URLs
• Database access is restricted to authenticated backend services using least-privilege credentials
• API keys and secrets are stored in production environment variables, never in source code
• Server logs redact personally identifiable information where possible
• We apply rate limiting and abuse detection at the application layer
• Payment information is handled exclusively by PCI-compliant processors; we never see or store your full card details

No system is perfectly secure. In the event of a personal data breach that creates a meaningful risk to you, we will notify you and the appropriate regulator within the timeframes required by applicable law.

Children

ShameKitchen is for adults aged 18 and over only. We require age confirmation during onboarding and do not knowingly process personal data from anyone under 18.

If you believe a person under 18 is using ShameKitchen, please contact privacy@shame.kitchen and we will close the account and delete the associated data.

Cookies and similar technologies

Our website (shame.kitchen) uses only essential cookies needed for the site to function. We do not use third-party analytics, advertising, or tracking cookies.

Our WhatsApp service does not use cookies. WhatsApp's own privacy practices are governed by WhatsApp's Privacy Policy.

Automated decision-making

ShameKitchen uses AI to analyse your meals and generate personalised responses, cases, and check-ins. This processing is automated but is not used to make decisions that produce legal effects or similarly significantly affect you. You always retain the choice to ignore, override, or stop using any feature.

Marketing communications

If you opt in during onboarding, we may send you re-engagement and product update messages through WhatsApp. You can opt out at any time by replying STOP to any such message. Service-related and safety-related messages will continue regardless of marketing preferences, as they are necessary for the service we agreed to provide.

Disclaimers

ShameKitchen is not a medical, nutritional, mental health, or psychological service. We do not diagnose, treat, or prevent any condition. The personalised content we provide is for entertainment and behavioural-accountability purposes only. If you are struggling with food, eating, body image, or mental health, please consult a qualified healthcare professional.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through WhatsApp or by updating the "Last Updated" date at the top of this page. Continued use of ShameKitchen after a material update constitutes acceptance of the updated policy.

How to contact us

For all privacy-related matters, including rights requests, breach notifications, and grievances:

ShameKitchen is operated by 814 Solutions · © 2026 · All rights reserved.