Privacy Policy

What My Sugar Says ("WMS", "we", "our") is an awareness and education platform founded by Nakul Grover. We are committed to protecting your privacy. This policy explains what information we collect, how we use it, and the choices you have.

WMS offers a website, optional user accounts, a community area, a newsletter, an AI awareness assistant, and (when available) digital product purchases. The data we collect varies by which features you use.

**Account information** — If you sign in with a magic link or with Google OAuth, we receive your email address and, where you have provided it, your name and avatar. We store your role, your saved items, and your notification preferences.

**Newsletter and community sign-ups** — If you join the newsletter or post in the community, we store your email and any content you submit.

**Purchases and orders** — If and when paid checkout is enabled, we record the order, the items, the amount, the email and phone you provide at checkout, and a reference to the payment processed by our payment provider. We do not see or store your card details.

**Chat with the WMS Sugar Guide** — When you use the in-site assistant, we log the question, the response, and basic metadata so we can improve quality and safety. Personal medical questions should not be sent.

**Website analytics** — We use Vercel Analytics and Google Analytics 4 to understand aggregate traffic and performance. These do not identify you personally; IP addresses are anonymised where the tool allows.

**Voluntarily submitted information** — If you contact us, we may retain that communication for response and record-keeping.

We do not collect government identity numbers, health records, or financial card data.

We use essential cookies needed for sign-in sessions, your cart, and the chat session. We do not run third-party advertising cookies or cross-site tracking pixels. Analytics services may set first-party cookies for aggregated measurement only.

We use the information we collect only to:

• Operate the website and your account • Process orders, send order confirmations, and provide downloads when those features are enabled • Send newsletter or notification emails you have opted in to • Reply to your messages and community posts • Detect abuse, spam, or unsafe content • Improve the safety and quality of the WMS Sugar Guide assistant

We do not sell your personal information. We do not use your data for advertising on other platforms.

WMS relies on a small number of trusted service providers to operate. They process data on our behalf under their own privacy practices:

• **Supabase** — database, authentication, file storage (hosted) • **Vercel** — hosting, deployment, analytics, speed insights • **Resend** — transactional email (order confirmation, newsletter delivery) when configured • **Google Analytics 4** — aggregate website analytics • **Razorpay** — payment processing when paid checkout is enabled. Card details are entered directly with Razorpay and never reach our servers. • **Google OAuth** — optional sign-in provider • **Google Gemini** — powers the WMS Sugar Guide AI assistant for novel questions

Embedded content from third-party platforms (such as YouTube or Instagram) may be subject to those platforms' own privacy policies.

We keep your data only as long as needed:

• **Account data** — for as long as your account is active. You may request deletion at any time. • **Newsletter subscriptions** — until you unsubscribe. • **Orders and invoices** — retained for tax and accounting purposes for the period required by Indian law. • **Chat logs** — retained for safety review and quality improvement; you may request deletion. • **Analytics** — aggregate only; individual session detail is not retained beyond the analytics provider's standard window.

You may request to:

• Access the personal information we hold about you • Correct inaccurate information • Delete your account and associated data • Export your data in a portable format • Unsubscribe from email communications at any time • Withdraw consent for non-essential processing

To exercise any of these rights, contact us at the email listed on the About page. We will respond within a reasonable time, typically within 30 days.

This website is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted personal information to us, please contact us and we will remove it.

We use reasonable technical and organisational safeguards to protect your information, including transport-layer encryption, row-level security in our database, and access controls. No internet service is ever 100% secure, but we work to keep data protected and notify users in the event of a serious incident.

We may update this privacy policy from time to time. Changes will be posted on this page with a revised date. Continued use of the website after changes constitutes acceptance of the updated policy.

For privacy-related questions or requests, please reach out via the contact details on the About page or through our social channels.