Privacy Policy

Last Updated: December 9, 2025

Effective Date: December 9, 2025

1. Introduction

WeeknightChef ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process information when you use our mobile application (the "App") and related services.

Please read this Privacy Policy carefully. By accessing and using WeeknightChef, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

  • Email address (required for account creation)
  • Full name (optional)
  • Password (encrypted and never accessible to us)

User Preferences:

  • Dietary restrictions (vegetarian, vegan, gluten-free, nut allergies, etc.)
  • Preferred cuisines
  • Cooking skill level
  • Time constraints for meal preparation
  • Serving size preferences

Recipe Data:

  • Recipes you create or save
  • Recipe modifications you request
  • Ratings and reviews of recipes
  • Ingredients and dietary notes you add

Meal Planning Data:

  • Weekly meal plans you create
  • Recipes assigned to specific days
  • Meal plan preferences and notes

Grocery Lists:

  • Items on your grocery lists
  • Custom categories and organization
  • Checked/unchecked status

Images:

  • AI-generated food images for recipes (stored in Supabase Storage)
  • Photos you upload (optional, for your personal cookbook)

Feedback:

  • Bug reports and feedback you submit
  • Feature requests
  • Support communications

2.2 Information Collected Automatically

Device Information:

  • Device type and operating system
  • App version
  • Device identifier (for analytics only, not linked to your identity)

Usage Data:

  • Pages/features you access
  • Time spent in the app
  • Features you use most frequently
  • Errors encountered

Authentication Data:

  • Login timestamps
  • Session information

3. How We Use Your Information

3.1 To Provide Services

  • Generate personalized recipes using AI
  • Modify recipes based on your preferences
  • Create and manage meal plans
  • Generate grocery lists
  • Display AI-generated food images
  • Save recipes to your cookbook
  • Sync data across your devices

3.2 To Improve Our Services

  • Analyze which recipes are most popular
  • Understand which features users find valuable
  • Identify technical issues
  • Optimize app performance

3.3 Communication

  • Send password reset emails (upon request)
  • Send email verification for account changes
  • Send account deletion confirmations
  • Respond to your support requests
  • Send in-app notifications about your meal plans

3.4 Legal Compliance

  • Comply with applicable laws and regulations
  • Enforce our Terms of Service
  • Protect against fraud and abuse

4. Sharing Your Information

4.1 We DO NOT Share Personal Information

We do not sell, trade, or rent your personal information to third parties.

4.2 Third-Party Service Providers

We share limited information with the following services to provide functionality:

Supabase (Backend & Database)

  • Email address
  • Encrypted passwords
  • Recipe data
  • Meal plans
  • Grocery lists
  • User preferences
  • Purpose: Store and retrieve your data securely

OpenAI (Recipe Generation)

  • Selected dietary preferences and protein type
  • Limited context about your meal planning needs
  • Purpose: Generate personalized recipes
  • Note: We do NOT send full personal profile to OpenAI
  • Note: OpenAI may use anonymized conversation data per their API terms

Replicate (Image Generation)

  • Recipe details (title, ingredients, description)
  • Purpose: Generate AI food images for display
  • Note: Generated images are stored in our secure storage, not Replicate's servers

Supabase Storage (Image Hosting)

  • Generated food images
  • Purpose: Store and serve recipe images

4.3 Legal Requirements

We may disclose your information if required by law, court order, or valid government request.

4.4 Business Transfer

If WeeknightChef is acquired, merged, or sold, your information may be transferred as part of that transaction.

5. Data Retention

5.1 Active Account Data

We retain your data while your account is active. This includes:

  • Account information
  • Recipes and meal plans
  • Grocery lists
  • Preferences
  • AI-generated images

5.2 Deleted Account Data

When you delete your account:

  • All data is immediately deleted from our systems
  • Backup copies are purged within 30 days
  • We do not retain recovery backups after deletion
  • This applies to all associated data (recipes, meal plans, groceries, images, preferences)

5.3 Guest Mode Data

Guest mode data (when not logged in):

  • Stored locally on your device only
  • Not backed up to our servers
  • Automatically cleared if you uninstall the app
  • Migrated to your account if you later sign up

6. Data Security

6.1 Security Measures

  • All data transmitted via encrypted HTTPS connections
  • Passwords are encrypted and hashed (bcrypt algorithm)
  • Database encrypted at rest (Supabase encryption)
  • API keys stored securely in environment variables (not in app binary)
  • Row-level security policies enforce user data isolation
  • No sensitive data (passwords, API keys) accessible to application code

6.2 Limitations

While we implement reasonable security measures, no system is completely secure. We cannot guarantee absolute security of your information.

7. Your Rights and Controls

7.1 Access Your Data

  • Log into your account to view your personal data
  • Use the app's features to manage your recipes, meal plans, and groceries

7.2 Update Your Data

  • Change your email address from Profile → Account Security
  • Update your password from Profile → Account Security
  • Modify your preferences from Profile → Preferences
  • Edit or delete any recipes, meal plans, or grocery items

7.3 Data Portability

  • Your recipes and meal plans can be exported (feature coming soon)
  • All your data belongs to you

7.4 Deletion (Right to be Forgotten)

Delete your account from Profile → Delete Account

  • Immediately removes all your data from our systems
  • Cascading deletion includes:
    • All recipes
    • All saved recipes
    • All meal plans
    • All grocery items
    • All user preferences
    • Your auth account
  • This action cannot be undone

7.5 Opt-Out

  • You can disable notifications from app settings
  • You can delete your account at any time
  • You can stop using the app without further data collection

8. Third-Party Links and Services

Our app may contain links to third-party websites and services (e.g., grocery delivery partners, credit card processors). This Privacy Policy does not apply to those services. Please review their privacy policies before providing your information.

9. Children's Privacy

WeeknightChef is not intended for children under 13 years old. We do not knowingly collect information from children under 13. If we become aware that we've collected information from a child under 13, we will delete it immediately.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

Right to Know

  • Request what personal information we collect
  • Request the sources of that information
  • Request how we use it

Right to Delete

  • Request deletion of personal information we've collected

Right to Opt-Out

  • Opt out of the sale/sharing of personal information (we don't sell data)
  • Opt out of targeted advertising (we don't use targeted advertising)

Right to Non-Discrimination

We will not discriminate against you for exercising your rights.

How to Submit Requests

  • Email: privacy@weeknightchef.app (contact form coming soon)
  • Subject: "CCPA Request"
  • Include: Your name, email, and specific request

We will respond within 45 days.

11. European Privacy Rights (GDPR)

If you are located in the EU/EEA, you have rights under the General Data Protection Regulation:

Legal Basis for Processing:

  • Contract: Processing necessary to provide services (account, recipes, meal plans)
  • Consent: You consent to use your data to improve our services
  • Legitimate Interest: Fraud prevention, security

Your Rights:

  • Access: Request copy of your data
  • Rectification: Correct inaccurate data
  • Erasure: Delete your account and data (Right to be Forgotten)
  • Restrict Processing: Limit how we use your data
  • Data Portability: Receive your data in portable format
  • Object: Opt out of certain processing
  • Withdraw Consent: Stop using the app

Data Controller

Data Protection Authority

For GDPR complaints, you can contact your local data protection authority.

12. Brazilian Privacy Rights (LGPD)

If you are located in Brazil, you have rights under the Lei Geral de Proteção de Dados:

  • Right to access your personal data
  • Right to correct inaccurate data
  • Right to delete your data
  • Right to data portability
  • Right to revoke consent
  • Right to lodge complaints with Brazilian data protection authority (ANPD)

13. Cookies and Tracking

13.1 No Cookies in App

The WeeknightChef mobile app does not use cookies (cookies are for web browsers, not mobile apps).

13.2 Analytics

We may use app analytics tools to understand usage patterns. These tools may use unique identifiers that:

  • Are not linked to your personal identity
  • Are used only for aggregate analytics
  • Can be reset in your device settings

14. Do Not Track (DNT)

Some browsers/devices offer "Do Not Track" functionality. Our app does not respond to DNT signals, but you can control tracking via:

  • App settings
  • Device privacy settings
  • Uninstalling the app

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make material changes:

  • We will update the "Last Updated" date
  • We will notify you within the app
  • Continued use of the app after changes constitutes acceptance

16. Contact Us

For privacy questions, requests, or concerns:

Email: privacy@weeknightchef.app (contact form coming soon)

Mailing Address:
WeeknightChef
Privacy Request
[Address to be added]

Response Time: We will respond to privacy inquiries within 30 days.

17. International Data Transfers

Your information may be stored and processed in the United States (via Supabase) and other countries where we operate. By using WeeknightChef, you consent to the transfer of your information to these locations.

18. Dispute Resolution

If you have a dispute regarding this Privacy Policy:

  1. Contact us first at privacy@weeknightchef.app
  2. We will attempt to resolve the matter within 30 days
  3. If unresolved, you may pursue legal remedies in your jurisdiction

19. Acknowledgment

By using WeeknightChef, you acknowledge that you have read and understood this Privacy Policy and agree to our practices as described.

Last reviewed and updated: December 9, 2025