Privacy Policy

1. Introduction

Cheffl ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered recipe generation platform.

2. Information We Collect

2.1 Information You Provide

• Account information (email, username, password)
• Profile information (preferences, dietary restrictions)
• Recipe generation requests and preferences
• Payment information (processed securely through third-party providers)

2.2 Automatically Collected Information

• Device information (type, operating system, browser)
• Usage data (pages visited, features used, time spent)
• IP address and location data (general area, not precise)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your recipe generation requests
• Manage your account and process payments
• Send you service-related communications
• Personalize your experience and recommendations
• Analyze usage patterns to improve our AI models
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in operating our platform, including:
  • Supabase (authentication and database hosting)
  • OpenAI (AI model services for recipe generation)
  • Replicate (image generation services) - [PLACEHOLDER: Confirm if used]
  • Payment processors (Stripe, PayPal, etc.) - [PLACEHOLDER: Add specific payment providers]
  • Email service providers for transactional emails
• Legal Requirements: When required by law, court order, or governmental authority, or to protect our rights, property, or safety, or that of our users or others
• Business Transfers: In connection with a merger, acquisition, reorganization, bankruptcy, or sale of assets, where your information may be transferred as part of that transaction
• With Your Consent: When you explicitly authorize us to share information, such as when you choose to share a recipe publicly on our feed

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on your location (including if you are in the European Economic Area, United Kingdom, California, or other jurisdictions with data protection laws), you may have the following rights regarding your personal information:

• Right to Access: Request a copy of your personal data that we hold, including what data we have, why we have it, and who we share it with
• Right to Rectification: Update or correct inaccurate or incomplete information in your account
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to certain legal exceptions (e.g., we may need to retain some data for legal compliance)
• Right to Restrict Processing: Request that we limit how we use your personal data in certain circumstances
• Right to Data Portability: Request transfer of your data to another service in a structured, commonly used format
• Right to Object: Object to processing of your personal data for certain purposes, such as direct marketing
• Right to Withdraw Consent: Withdraw consent where we rely on consent as the legal basis for processing
• Opt-out of Marketing: Unsubscribe from marketing communications (you will still receive essential service-related communications)
• Cookie Preferences: Manage cookie settings in your browser or through our cookie consent mechanism

To exercise these rights, please contact us at support@cheffl.com. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

California Residents: Under the California Consumer Privacy Act (CCPA), you have additional rights, including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information (we do not sell personal information). You also have the right not to be discriminated against for exercising your privacy rights.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our platform and store certain information. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service, particularly authentication and session management features.

8. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

9. Data Retention

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. The retention period depends on the type of data:

• Account Data: Retained while your account is active and for a reasonable period after account deletion to comply with legal obligations
• Recipe Data: Retained as long as your account is active, unless you delete specific recipes
• Usage Data: Retained for analytics purposes, typically anonymized after 2 years
• Payment Data: Retained as required by law (typically 7 years for tax and accounting purposes)
• Marketing Data: Retained until you opt-out or request deletion

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

10. AI Training and Data Usage

When you use Cheffl to generate recipes, your recipe generation requests (prompts, ingredients, preferences) may be used to improve our AI models and services. This includes:

• Training and fine-tuning our AI models to better understand recipe preferences and dietary requirements
• Improving recipe quality, accuracy, and personalization
• Analyzing usage patterns to enhance user experience

[PLACEHOLDER: Specify if recipe prompts are shared with third-party AI providers (e.g., OpenAI) for training. If yes, add: "Your recipe generation requests may be shared with our AI service providers (such as OpenAI) and may be used to train their models. You can opt-out of this by contacting us, though this may limit some features."]

We do not use your personal information (name, email, etc.) for AI training purposes. Only anonymized recipe generation data may be used for model improvement.

11. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. Specifically:

• Our servers and service providers may be located in the United States, European Union, or other jurisdictions
• We use Standard Contractual Clauses (SCCs) and other appropriate safeguards to protect your data when transferred internationally
• By using our service, you consent to the transfer of your information to these facilities

If you are located in the EEA, UK, or Switzerland, we ensure that appropriate safeguards are in place for international data transfers in accordance with GDPR requirements.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Data Protection Officer

[PLACEHOLDER: If required by GDPR (for companies with 250+ employees or processing sensitive data on a large scale), add: "We have appointed a Data Protection Officer (DPO). For any questions or concerns about data protection, please contact our DPO at: dpo@cheffl.com"]

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at: