Privacy Policy

Last updated: September 23, 2026

1. Introduction

ChefsPlan ("we", "us", or "our") operates https://chefsplan.app/ (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

2. Information We Collect

We may collect the following types of information:

  • Account information: Name, email address, and similar identifiers when you create an account
  • Household content: Recipes, meal plans, shopping lists, favorites, images, files you upload, and reports you submit
  • Household preferences: Diet tracks, allergens you choose to avoid, and typical servings
  • Guest workspace: If you use the Service without an account, a workspace identifier stored in your browser
  • Usage data: Pages visited, features used, session replay of in-app activity, and similar product-analytics events
  • Device information: Browser type, operating system, device type, and similar technical data collected with that usage data
  • Cookies: Information collected through cookies and similar technologies, as described below

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, maintain, and improve our services, including meal planning for your household
  • To import recipes and generate placeholder dish images
  • To respond to your inquiries and provide customer support
  • We may email you about the product
  • To understand how the Service is used, through product analytics and session replay
  • To personalize your household's meal planning
  • To comply with legal obligations and enforce our terms
  • To detect, prevent, and address security issues and fraud

4. Third-Party Services

We share information with service providers that process it on our behalf:

  • Clerk — account sign-in and household membership
  • Convex — database, file storage, and the application backend
  • Vercel — hosting the Service, and Vercel AI Gateway for recipe import and image generation
  • Google — Gemini models that receive recipe-import content and dish-image prompts through Vercel AI Gateway
  • PostHog — product analytics and session replay

We do not sell your personal information.

These third parties have their own privacy policies governing how they use your information.

Recipe import and image generation

When you import a recipe from text, a PDF, an image, or a public web page, we send that content through Vercel AI Gateway to Google Gemini models so we can extract dishes. When we create a placeholder image for a dish, we send the dish title and tags through the same gateway to Google Gemini image models. We do not send your sign-in credentials with those requests.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Service and to understand how it is used.

Types of Cookies We Use:

  • Essential Cookies: Required for sign-in and for the Service to function
  • Analytics Cookies: Used by PostHog for product analytics and session replay, to understand how the Service is used

You can manage your cookie preferences through your browser settings. A guest workspace identifier is stored in your browser's local storage.

6. Data Retention

We retain personal information for as long as needed to provide the Service and for the periods below, unless a longer period is required or permitted by law.

Account deletion

You can delete your account in the Service. We soft-delete the account immediately: your sign-in is removed and you are signed out. If you are the only member of a household, we permanently delete that household after 30 days, including its meals, plans, settings, and files. Recipes from that household are then removed from the public catalog. A copy another household has already saved remains in that household. If the household has other members, we remove only your membership. The household and its data stay available to the remaining members.

Household export

A household admin can download a zip copy of that household's recipes, plans, lists, settings, and images. The download link expires after 1 hour.

Guest workspaces

If you use the Service without an account, that guest workspace is unclaimed until you sign in and move it into a household. We delete an unclaimed guest workspace after 30 days without activity.

7. Your Rights

You can delete your account in the Service, as described above. A household admin can download a zip copy of household data before that link expires.

Rights Under GDPR (EU/EEA Residents)

If you are a resident of the European Union or European Economic Area, you have the following rights:

  • Right to Access: Request access to your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to processing of your data
  • Right to Restrict Processing: Request restriction of processing
  • Right to Withdraw Consent: Withdraw consent at any time

Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

  • Right to Know: Know what personal information is collected and how it is used
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: Opt-out of the sale of your personal information
  • Right to Non-Discrimination: Not be discriminated against for exercising your rights

Rights Under CPRA (California Residents - Enhanced Rights)

If you are a California resident, you have the following enhanced rights under the California Privacy Rights Act (effective January 2023):

  • Right to Know: Know what personal information is collected, used, shared or sold
  • Right to Delete: Request deletion of your personal information
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out of Sale/Sharing: Opt-out of the sale or sharing of your personal information
  • Right to Limit Use of Sensitive Personal Information: Limit the use and disclosure of sensitive personal information
  • Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights
  • Right to Data Portability: Obtain a copy of your personal information in a portable format

Sensitive Personal Information: Under CPRA, sensitive personal information includes Social Security numbers, driver's license numbers, account credentials, precise geolocation, racial/ethnic origin, religious beliefs, genetic data, health information, sex life or sexual orientation, and contents of mail/email/text messages.

Rights Under LGPD (Brazil Residents)

If you are a resident of Brazil, you have the following rights under LGPD:

  • Right to Confirmation and Access: Confirm and access your personal data
  • Right to Correction: Request correction of incomplete or inaccurate data
  • Right to Anonymization/Deletion: Request anonymization or deletion of unnecessary data
  • Right to Data Portability: Transfer your data to another service provider
  • Right to Information: Be informed about data sharing with third parties

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country. When we transfer your information internationally, we use the safeguards the law requires.

9. Children's Privacy

Our Service is not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.