Information We Collect

We collect information you provide directly to us, such as:

• Account information (email, username, profile picture)
• Food preferences and dietary restrictions
• Food allergies (user-attested, stored only with your explicit confirmation via the allergen attestation flow)
• Home inventory data
• Recipe and meal tracking information
• Location data (when you choose to share it)
• A log of your in-app activity (recipes saved, cooked, or skipped; ingredients added; allergen-filter events) used to improve personalization over time

Food Preferences & Allergy Data

Chefrson uses your declared food preferences to personalize recipe suggestions, filter unsafe recipes, and tailor AI responses.

• Allergies are stored only after explicit attestation (you confirm a disclaimer and check an acknowledgement box). The standard preferences-update path refuses to write the allergies field, ensuring only attested changes are accepted.
• Dietary mode, cuisine preferences, spice tolerance, skill level, equipment, and time caps are stored when you set them and can be changed at any time in Settings.
• Activity events (recipes saved, cooked, skipped; ingredients added) are logged to improve personalization. You can disable this via the "Profile learning" toggle in Settings.
• You can export your recipes any time from the Settings page, and delete your account and all associated data from Settings.

Disclaimer: Chefrson filters recipes based on ingredient-list text matching. It can miss allergens in imported recipes with vague wording, and it cannot detect cross-contamination or trace-amount warnings. Always verify packaging before cooking. Chefrson is not a medical device.

How We Use Your Information

We use your information to:

• Provide and improve our recipe recommendation service
• Find nearby grocery stores and their inventories
• Personalize your experience based on dietary preferences
• Send you notifications about your meal planning
• Ensure the security of your account

Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties except:

• To provide the services you requested (e.g., finding store inventories)
• When required by law or to protect our rights
• With your explicit consent

Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Your data is encrypted in transit and at rest using industry-standard encryption.

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your data
• Opt-out of communications

Cookies and Tracking

We use cookies and similar technologies to enhance your experience, remember your preferences, and analyze usage patterns. You can control cookie settings through your browser preferences.

Third-Party Analytics & Session Recording

Chefrson uses PostHog (PostHog Inc., US Cloud region) for product analytics, session recording, and error tracking. When you use the app or website, PostHog may receive:

• Event data — clicks, navigation, and feature usage via PostHog's autocapture; plus named events we emit ourselves (for example, recipe_saved, inventory_item_added, cookbook_shared). Used to understand which features are used and to surface activation funnels.
• Page views and page leaves — anonymous timing + route information for each screen.
• Session recordings — disabled. We do not record your screen. The recorder is switched off at initialisation (disable_session_recording: true), so no session replays of your interactions exist to review, mask, or share. If we ever turn this on, this page will say so before we do.
• Error reports — uncaught JavaScript exceptions and unhandled promise rejections, with stack traces, to help us diagnose crashes. Error reports may include the code path and error message but are scoped to Chefrson's own code.
• Your user ID — once you sign in, we link your Chefrson user ID (and email) to your PostHog events so we can support you and debug issues you report. Before you sign in, events are attached to an anonymous device ID.

PostHog honors the Do Not Track browser setting — if you enable DNT, PostHog will not collect analytics from your sessions. PostHog's own privacy policy and data-handling practices are documented at posthog.com/privacy.

We do not sell PostHog data to third parties. A fully in-app opt-out toggle is planned; in the meantime, enabling Do Not Track in your browser or deleting your account (see Your Rights above) stops further collection.

Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:
Email: privacy@chefrson.com