Privacy Policy

Last updated 19 July 2026

This explains what personal data la mun la moer (“LMLM”) holds, why, and what you can do about it. The principle is the same one that runs the whole Service: we keep the least we can, we do not sell it, and it stays yours. LMLM is run from Thailand under the Personal Data Protection Act (PDPA); we honour the equivalent rights of visitors in the EU/EEA and UK too.

What we hold, and why

We collect only what running your account needs: your sign-in identity (your email, and your name and picture if you sign in with Google, plus the technical tokens that keep you signed in), the recipes you create, and the essentials of billing if you subscribe (your plan and a customer reference — card details stay with Stripe and never reach us). We also record when you accepted these terms, and keep the ordinary technical records any website keeps — such as your IP address — briefly, to keep the Service secure and working. We use all of this only to run the Service for you: to sign you in, store and show your recipes, handle plans, and keep things secure. We keep it while your account exists.

Who helps us run it

We share data only with the providers we need to run the Service — currently our sign-in provider (Google, if you use it), our payment processor (Stripe), our email provider (for sign-in links), and our host (Vultr). They act on our behalf and may be located outside Thailand; where a provider is outside Thailand or the EEA/UK, we rely on appropriate safeguards for the transfer. We keep this list current and will update this policy if a provider changes, and we may disclose data where the law requires it.

Keeping it safe, and your rights

We take reasonable measures to protect your data. No service can promise perfect security, but if a breach ever affects your personal data we will act quickly and notify you and any regulator where the law requires. You can ask us to access, correct, export, or delete your data, object to or restrict how we use it, or withdraw consent at any time — and where the law needs a legal basis (for EU/EEA and UK visitors), we rely on providing your account and the Service, your consent, and our legitimate interest in keeping it secure. You can also complain to your local data-protection authority (in Thailand, the PDPC). The fastest route is in your hands: the Delete my account and all my data button on your Account page removes your account and the data we hold, immediately. If you have an active paid plan, cancel it first in the billing portal on that page, since the subscription itself is held by Stripe; some billing records may persist with Stripe where the law requires. For anything else, just email us.

What we do not do

We do not sell your personal data, and we do not use it for advertising. We currently use only the cookies needed to keep you signed in and run the Service — no tracking, no advertising cookies, no analytics. If that ever changes, we will update this policy first, and add any consent step the law requires.

Children, changes, and contact

The Service is not for children: you must be at least 18 (or the age of majority where you live), and we do not knowingly collect data from children — tell us if you think we have, and we will delete it. We may update this policy; material changes will show in the date above. For any privacy question, or to exercise your rights: support@lamunlamoer.com.