Privacy Policy

1. Introduction

This Privacy Policy explains how Chefino processes personal data in compliance with GDPR and other applicable laws.

2. Data We Collect

• Account data (e.g. email address, authentication identifiers)
• User preferences (e.g. dietary preferences, allergens)
• Pantry data (ingredients, quantities, expiration dates)
• Shopping lists
• Recipes and recipe interactions (generated and saved recipes)
• Aggregated usage data (e.g. total number of recipe suggestions and full recipes generated per user)
• Household data (shared household membership and related data)
• Profile data (display name, profile picture)
• App settings
• Device data (e.g. push notification tokens, diagnostics)
• Subscription status (via Apple / Google; no raw payment data)

3. Use of Data

• Provide and personalize the service
• Manage subscriptions and accounts
• Analytics and product improvement
• Customer support
• Marketing communications: Users may opt-in to receive marketing emails and can unsubscribe at any time via a link in the email.

4. AI Processing

• User inputs may be processed by third-party AI providers to generate recipes.
• Data is not used to train public models unless explicitly stated.

5. Sharing

Data may be shared with:

• Hosting & database providers
• AI inference providers
• Analytics & crash reporting tools
• Payment platforms

Household members may see shared pantry and shopping data as defined by App settings.

6. International Transfers

Data may be processed outside the EU. Appropriate safeguards such as Standard Contractual Clauses are used.

7. Retention

Account data: Data is retained for the duration of the account’s existence.

After account deletion, personal data will be permanently removed or anonymized within 30 days.

Logs & diagnostics: Technical logs and diagnostic data generated by our backend systems are retained for up to 12 months for security, debugging, and service improvement purposes, and are then deleted or anonymized.

8. Security

All data is stored in a secured database environment with access controls. We rely on our infrastructure providers for encryption, availability, and data protection measures. Access to production data is restricted and logged.

9. User Rights

Users may request access, correction, deletion, or export of their data by contacting our support team at support@chefino.ai.

We will respond to all requests within 30 days and may extend the response period to 60 days if necessary.

10. Children’s Privacy

We do not knowingly collect data from children under 16 years.

11. Changes

Material changes will be communicated via email with 14 days’ notice before changes take effect.

12. Contact

Privacy: privacy@chefino.ai

Address: Kvítkov 52, 470 01 Kvítkov, Czechia