Privacy Policy
Privacy Policy
Last updated: 11 August 2026
Who we are
Cheffin ("we", "us") is a recipe app operated by Fullsuite Agency, 383 George Street, Sydney NSW 2000, Australia. You can reach us at support@cheffin.ai.
The short version
- We collect what we need to run the app: your account, your recipes, your preferences, and your conversations with the AI assistant.
- Your dietary requirements and allergens are health-related data. We treat them as sensitive and explain them separately below.
- We send your recipe requests to third-party AI providers to generate recipes and images.
- We do not sell your data.
- You can delete your account and your data from inside the app.
What we collect
You give us
| Data | Why | Required? |
|---|---|---|
| Email address | To create and secure your account | Yes |
| Password | Authentication (stored hashed, never in plain text) | Yes |
| Name | To personalise the app | Optional |
| Allergens | To exclude unsafe ingredients from recipes | Optional |
| Dietary requirements (incl. halal, vegan, vegetarian) | To tailor recipes | Optional |
| Cuisine preferences, cooking skill, household size, meal goals | To tailor recipes | Optional |
| Measurement system | To display recipes in your units | Optional |
| Recipes you create, import, or save | The core function of the app | — |
| Collections you create | To organise your recipes | — |
| Shopping list items | The shopping list feature | — |
| Messages you send the AI assistant | To answer you and generate recipes | — |
| Photos you upload | To extract a recipe from an image | Optional |
Beta waitlist
If you join the website waitlist, we store your email address, signup time and the version of the consent notice you accepted. We use this to manage beta interest and contact you about beta invitations and launch updates. Joining does not create an app account or a paid subscription. Waitlist addresses are not displayed publicly. You can request removal using the contact details in this policy.
Created as you use the app
- Which recipes you have viewed, and when
- Cooking sessions — which recipe, which step, when
- Recipes generated for you, and the images generated with them
We do not collect
- Location data
- Contacts
- Advertising identifiers
- Analytics on your behaviour outside the app
Sensitive data: allergens and dietary requirements
Allergen and dietary information can reveal health and religious characteristics. Under the Australian Privacy Act this is sensitive information; under UK/EU GDPR, allergen data is special category data (Article 9) and religious dietary requirements such as halal may also be.
Accordingly:
- Providing it is entirely optional — the app works without it.
- We use it for one purpose: excluding or flagging ingredients in recipes shown or generated for you.
- It is included in the prompts we send to our AI provider, because that is how the exclusion is enforced.
- We never use it for advertising or profiling, and never sell it.
- You can change or remove it at any time in the app.
Please read this carefully. Cheffin uses automated systems to generate and filter recipes. We work hard to honour your allergens, but we cannot guarantee a generated or imported recipe is free from any given allergen. Always check ingredient labels yourself. Do not rely on Cheffin alone if you have a severe allergy.
Who we share it with
We use these processors. We share the minimum each needs.
| Provider | What they receive | Purpose |
|---|---|---|
| Supabase (database, auth, file storage) | All account and app data | Hosting and authentication |
| OpenAI | Your prompts, messages, preferences (incl. allergens), and recipe content | Generating and extracting recipes |
| Google (Gemini) | A short text description of a dish | Generating recipe images |
| Vercel | Standard request logs | Hosting the API |
We do not sell personal information, and we do not share it with advertisers.
International transfer: these providers may process data outside your country, including in the United States.
How long we keep it
- While your account exists: for as long as you keep it.
- When you delete your account: your account and the data linked to it — recipes, collections, chats, shopping lists, preferences, cooking history — are deleted.
- Backups: deleted data may persist in encrypted backups for up to 7 days before being overwritten.
Your rights
You can, at any time:
- See your data — most of it is visible in the app
- Correct it — edit your profile and preferences in Settings
- Delete it — Settings → Delete Account removes your account and its data
- Object or restrict — email us
- Take it elsewhere — email us for a machine-readable export
If you are in the UK/EU you may complain to your supervisory authority; in Australia, to the Office of the Australian Information Commissioner (OAIC).
Security
- Passwords are hashed, never stored in readable form
- Traffic is encrypted in transit (HTTPS/TLS)
- Auth tokens are held in the iOS Keychain on your device
- Access to production data is restricted to those who need it
No system is perfectly secure. If a breach affects you, we will notify you and the relevant regulator as required by law.
Children
Cheffin is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
Changes
If we change this policy materially we will notify you in the app before the change takes effect.
Contact
support@cheffin.ai — or write to 383 George Street, Sydney NSW 2000, Australia.