Privacy Policy

This Privacy Policy explains how Chef's Cabinet ("we", "our", or "us") collects, uses, and shares information about you when you use our mobile application (the "App"). By using Chef's Cabinet, you agree to the practices described here.

1. Information We Collect

Information you provide

• Account info: Your name and email address. If you sign up with email, your password is stored hashed and never in plain text. If you use Sign in with Apple or Sign in with Google, we receive your name and email address from them instead of a password — and if you choose Apple's "Hide My Email," we only ever see a private relay address.
• Recipes you save: URLs you share with the App, text you paste for recipe extraction, recipes the App extracts from them, photos, notes, tags, and any edits you make.
• Support communications: If you email us, we keep a copy of your message and our reply.

Information collected automatically

• Device info: Device model, operating system version, and app version.
• Subscription status: Whether you're on the free plan or Pro plan (handled by Apple/Google and RevenueCat).

Information we do NOT collect

• We do not access your contacts, calendar, messages, or photos unless you explicitly grant permission to upload a specific image.
• We do not track your location.
• We do not collect precise advertising identifiers.

2. How We Use Your Information

• To create and manage your account
• To save and display your recipes
• To extract recipe content from URLs you share with us or text you paste
• To process subscriptions and payments (through Apple, Google, and RevenueCat)
• To send you transactional emails (account verification, password resets)
• To fix bugs and improve the App
• To comply with legal obligations

3. How We Share Your Information

We share your information only with third-party services we use to run the App:

• Supabase — hosts our database and authentication. Your account and recipes are stored on their servers.
• Anthropic PBC (AI recipe extraction) — when you share a URL or paste text, that content is sent to Anthropic, a third-party artificial-intelligence (large language model) service, to identify and extract the recipe structure. No account information (name, email, or user ID) is sent with it. This content is not used to train AI models and is retained by the processor only briefly under its standard API data-retention policy.
• RevenueCat — handles subscription management and receives your app user ID (a random account identifier) and subscription status.
• Apple / Google — if you choose Sign in with Apple or Sign in with Google, they authenticate you and share your name and email address (or a private relay address) with us; we never receive your Apple or Google password. They also process subscription payments — we never see your credit card details.

We do not sell, rent, or trade your personal information to advertisers or data brokers. Period.

We may disclose information if required by law, subpoena, or court order, or if necessary to protect the rights, property, or safety of Chef's Cabinet, our users, or others.

4. Data Storage and Security

Your data is stored on servers operated by Supabase, which uses industry-standard encryption at rest and in transit (TLS). Passwords are hashed using bcrypt. We cannot see your password even internally.

No system is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. If a data breach affects your information, we will notify you as required by law.

5. Your Rights

• Access: You can view all your saved recipes inside the App at any time.
• Correction: You can edit your profile and recipes directly in the App.
• Deletion: You can delete your account at any time from the Settings screen (Settings → Delete Account), which immediately and permanently removes your account and all your recipes. For fraud and abuse prevention, we retain only a one-way hashed (irreversible) form of your email address alongside a count of AI recipe imports. This record cannot be used to identify you or recover any of your data — it exists solely to enforce free-tier limits and prevent repeated free-tier abuse.
• Export: Contact us and we'll send you a copy of your data in JSON format within 30 days.
• Opt out: You can cancel your subscription at any time through Apple's or Google's subscription settings.

6. GDPR (European users)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• The right to access your personal data
• The right to rectify inaccurate data
• The right to erasure ("right to be forgotten")
• The right to restrict or object to processing
• The right to data portability
• The right to lodge a complaint with a supervisory authority

Our legal basis for processing your data is the contract between us (the Terms of Service) and your explicit consent where applicable. Contact us to exercise any of these rights.

7. CCPA (California users)

If you are a California resident, you have the right to know what personal information we collect, to delete it, and to opt out of its "sale" (we don't sell data, so this is automatic). Contact us to exercise these rights.

8. Children's Privacy

Chef's Cabinet is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it immediately.

9. International Users

Our servers are located in the United States. If you use Chef's Cabinet from outside the U.S., your information will be transferred to and processed in the U.S. By using the App, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you through the App or by email. The "Last updated" date at the top tells you when the policy was last changed.

11. Contact Us

Questions, concerns, or requests about your privacy?

Email: support@chefscabinet.ca