Privacy Policy — ChefNotes

ChefNotes (“we”, “our”, or “us”) is a personal recipe management app. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. We keep this simple because we're a small app with a simple promise: your recipes are yours.

1. Information We Collect

We collect only what is necessary to provide the service:

Account information — your email address, used to create and access your account. We do not collect your name, phone number, or payment details.
Recipe data — recipes, ingredients, instructions, personal notes, ratings, tags, and images you save to ChefNotes.
Shopping lists — lists you generate or create manually within the app.
AI chat messages — messages you send to the AI chef assistant. These are sent to OpenAI's API to generate responses and are not stored beyond your current session unless you explicitly save a recipe created during the conversation.
Product analytics — event data about how key parts of ChefNotes are used, such as landing-page visits, signups, recipe saves, meal-planning actions, shopping-list actions, billing events, and attribution information like referral and UTM parameters. We use this to understand activation, retention, and customer acquisition.
Performance analytics — anonymous, aggregated page and performance data collected by Vercel Analytics and Speed Insights.

2. How We Use Your Information

To provide, operate, and improve the ChefNotes service
To authenticate your account and keep it secure
To power the AI chef assistant with context from your personal recipe collection
To generate shopping lists based on your selected recipes
To measure activation, retention, conversion, and acquisition performance

We do not use your data for advertising, profiling, or any purpose beyond operating the app.

3. How Your Data Is Stored

Your account and recipe data is stored in Supabase, a managed database platform with encryption at rest and in transit. Authentication is handled by Supabase Auth. The app is hosted on Vercel. All data is transmitted over HTTPS.

4. Third-Party Services

ChefNotes uses the following third-party services:

Supabase — database and authentication. supabase.com/privacy
OpenAI — AI chat responses. Messages you send to the assistant are processed by OpenAI's API under their usage policies. openai.com/privacy
Vercel — hosting and anonymous analytics. vercel.com/legal/privacy-policy

We do not sell, rent, or share your personal data with any other third parties.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, your recipes, shopping lists, and account information are permanently deleted from our database. Product analytics linked to your account are deleted with the account where practical. Anonymous analytics data may be retained in aggregated form.

6. Your Rights

You have the right to:

Access the data we hold about you
Correct inaccurate data
Request deletion of your account and all associated data
Export your recipe data

To exercise any of these rights, contact us at the email address below. We will respond within 30 days.

7. Children's Privacy

ChefNotes is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact us at: privacy@chefnotes.app