Privacy Policy

Account information

Your email address (which is how you sign in — we email you a one-time sign-in code or link), your name, and records of your sign-in sessions. We also count recent sign-in attempts for each email address to block repeated guessing of sign-in codes.

Contact and delivery information

Your mobile phone number, which we ask for at checkout and which you can edit on your account page; your delivery addresses, including the recipient’s name and phone number and any delivery notes; and a copy of the delivery address saved with each order. When we drop off an order, our driver may take a photo as proof of delivery, which can show your door or address.

Dietary, allergy and household information

If you choose to tell us, your allergies and allergy notes, diet, spice preference, foods you dislike, wellness goals, age, gender, activity level and household size, and the names and relationships of household members you add. We collect this through our sign-up questions, your account pages, an allergy check before you first add meals to your cart, and allergy survey links we email you. We use it only to plan and label your meals, never to sell. Allergies are a safety setting and are never tied to rewards.

Order and subscription information

The meals you order, prices, discounts, delivery fees and taxes, delivery dates, your subscription status, the meals you confirm each week, and any rewards or referral codes you use. When you agree to automatic weekly charges, we keep a record of that consent: the date and time, the version of the wording you agreed to, and your IP address and browser type. If you verify a work email address for our discount for military, first responders and other community heroes, we keep that work email address and the date it was verified.

Payment information

Payments are processed by Stripe. Your card number is entered on Stripe’s secure checkout page and is never received or stored by us. We keep only Stripe’s reference numbers for your customer record and saved payment method, so your confirmed weekly orders can be charged. Stripe shares your name, email address, phone number and billing address with us when you check out.

Messages you send us

Emails you send us, and messages you type into the chat on our website. If you ask the chat to reach a person, the email address you give and the conversation are sent to our support inbox.

Website usage information

Pages you visit and actions you take on our website (for example, viewing a dish or adding it to your cart), whether you use a phone or a computer, the website that sent you (domain only), campaign tags, and a random identifier for your browser. Our own analytics does not record your IP address or full browser details. We also use Vercel Web Analytics, which receives page-view information when you browse our site.

Other

If you join our waitlist, your email address and ZIP code. If you opt in to text messages, your consent record (see Text messages (SMS)).

• To prepare, label and deliver your orders — including printing allergens on your bag labels and giving our kitchen and drivers the name, address, phone number and delivery notes they need.
• To run your subscription: show your weekly price, charge for each week’s box after the weekly order deadline, and handle skips, pauses, cancellations and payment problems.
• To recommend meals, warn you about allergen conflicts, and leave out dishes that conflict with your allergies when we plan a box for you.
• To send you emails about your account and orders, such as sign-in codes, order confirmations, reminders before a weekly charge, payment problems and delivery notices. If you opt in, to send you text messages about the same topics.
• To answer your questions and resolve problems with an order.
• To keep our website secure — for example, using IP addresses to temporarily limit repeated requests — and to prevent fraud and abuse.
• To understand how our website is used so we can fix confusing pages.
• To keep records we need for legal, tax and accounting purposes, to resolve payment disputes, and to show the consents you gave.

We do not sell your personal information, and we do not use advertising cookies or third-party advertising pixels on our website.

Meal recommendations. To write your meal suggestions, we send OpenAI a summary that replaces names with labels such as “you” or “partner” and includes details like age, gender, goals, allergies, diet and dislikes, plus nutrition information for our dishes. We do not send your name, email address, phone number or address for this.

Website chat. Messages you type into our website chat are processed by an AI model provider through OpenRouter to generate replies. Please don’t share sensitive personal or health information in the chat.

Recommendations and other wellness information on our site are general information, not medical advice.

We share personal information with service providers that help us run GlowBowl, only as needed for them to provide their service to us:

• Stripe — payment processing and saved payment methods.
• Resend — delivering our emails, including sign-in codes.
• Vercel — website hosting, and Vercel Web Analytics for page views (we remove sign-in tokens and email addresses from page addresses before they are sent).
• Supabase — database hosting.
• OpenAI — generating meal recommendations from the de-identified summary described above.
• OpenRouter and the AI model providers it routes to — replying to messages in our website chat.
• Google Maps — our drivers’ turn-by-turn navigation, which uses your delivery address.
• Twilio — sending our text messages on our behalf, if you opt in.
• Push notification services (Bark and ntfy) — new-order alerts to our team’s phones, containing the order number, total, number of meals, city and delivery date, but no names, email addresses, phone numbers or street addresses.

Our own team, including our kitchen staff and delivery drivers, can see the order and delivery details they need to do their jobs. We may also disclose information when required by law, to protect the rights, property or safety of our customers, our team or others, or as part of a merger, sale or transfer of our business.

Referrals (Captain Program). If you place your first order through another customer’s referral link, that customer can see your first name and last initial, the month you joined, and the total points they earn from orders in their referral group. They can’t see your email address, phone number, address or the details of your orders. If someone you referred refers another customer, you see only how many customers they referred.

All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.

If you choose to receive GlowBowl text messages, we collect your mobile phone number and a record of your consent: the date and time, where you opted in (for example, your account page), the version of the wording you agreed to, and the IP address and browser type you used. We also keep a record when you opt out. We use this information only to send the account and order notifications you asked for, to keep a record of your consent, and to honor opt-out requests.

Text message consent is optional and is never a condition of purchase. Giving us your phone number at checkout or for a delivery address does not sign you up for text messages; you are signed up only if you check the text message box on your account page.

Message frequency varies (about 2–5 messages per week). Message and data rates may apply.

You can opt out at any time by replying STOP to any message, by selecting “Turn off text updates” on your account page, or by emailing support@glowbowlatelier.com. See the text message section of our Terms of Service for program details.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Information sharing with subcontractors that support our services, such as our SMS delivery provider acting on our behalf, is permitted only to deliver the messages you requested.

All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.

We use a cookie to keep you signed in, and a short-lived cookie that helps fill in your email address on the sign-in page. Our own analytics may set a cookie with a random browser identifier. If your browser sends a Do Not Track or Global Privacy Control signal, our own analytics does not record your visit or set that cookie.

Your browser’s local storage also holds things like your cart, your allergy confirmation, and the referral or campaign code you arrived with, so the site works the way you left it. You can clear these at any time in your browser settings.

• Account, order, payment and delivery records are kept while your account is open and afterward for as long as we need them for legal, tax, accounting and payment-dispute purposes.
• Consent records — for automatic weekly charges and for text messages, including the IP address and browser type captured at that moment — are kept for as long as we need to show that you gave consent.
• Our own website analytics events are deleted after about 13 months.
• IP addresses used to limit repeated requests are held briefly in server memory and are not saved to our database.
• Unfinished checkout drafts saved to your email address expire after 2 hours.

• You can update your name, mobile number, delivery addresses, household members and dietary information on your account pages, and delete saved addresses and household members there.
• You can skip, pause or cancel your subscription in Account → Subscription.
• You can turn text messages off at any time, as described above.
• To ask for a copy of your information, to correct it, or to delete it, email support@glowbowlatelier.com from the email address on your account. We may need to confirm your identity first.

When you ask us to delete your information, we will delete or de-identify your personal information, except for records we must keep for legal, tax, payment and dispute purposes, such as orders, payments, charge authorizations and text message consent records.

We use encrypted connections (HTTPS), one-time sign-in codes that expire, limits on repeated sign-in attempts, and access controls on our team’s tools. Card details stay with Stripe. No method of storage or transmission is completely secure, so we can’t guarantee absolute security.

GlowBowl is not directed to children under 13, and we do not knowingly collect personal information from children under 13. A parent or guardian may add a child’s dietary details to a household profile so we can plan the family’s meals.

We may update this policy from time to time. We will post the new version on this page and change the effective date at the top. If we make material changes, we will take reasonable steps to let you know, such as emailing you or posting a notice on our website.

Questions about this policy or your information: email hello@glowbowlatelier.com or support@glowbowlatelier.com. See also our Terms of Service.

Company: GLOWBOWL ATELIER INC.