Privacy statement

Who is responsible

Chefilo is the controller for the personal data processed in Chefilo.

Questions about your privacy, or a request about your data? Send an e-mail to info@chefilo.com

Which data we process

Depending on what you use, we process:

• Account: first and last name, e-mail address, password (stored only as a secure hash), optionally phone number and date of birth, preferred language, role, registration date and last sign-in.
• Profile (optional): profile photo, job title, workplace, nationality, bio, specialties and CV. Photos are re-encoded, which removes location data (EXIF/GPS).
• Recipes you create (with photos), who may see them (public, private or shared) and the members you share them with, and recipes you mark as favorite.
• Your shopping list: items, quantities and whether you ticked them off.
• Allergies and diets (optional): the allergens you avoid and the diets you follow. This can be health data; we only use it to adjust recipes for you (warnings, the "Fits me" filter and Basil) and only process it with your explicit consent (Art. 9(2)(a) GDPR). Other members and administrators do not see it; administrators only see totals per allergen or diet. You can change or remove it on your profile at any time.
• Contact form: your name, e-mail address and message, used only to answer your message.
• Sign in with Google (optional): from Google we receive your name, e-mail address, whether Google has verified it, and your Google account ID, which we use to recognise you next time. We do not receive your Google password or anything else from your Google account.
• Technical data: a sign-in cookie, your IP address (to block abuse, e.g. too many sign-in attempts) and logs with user IDs to keep the service secure. No passwords or access keys are logged.

Why we process it

We process your account, recipes (including who may see them and with whom you share them), favorites and shopping list to provide the service you signed up for (performance of a contract, art. 6(1)(b) GDPR). Optional profile details, your photo and CV are processed because you choose to add them; you can remove them at any time (consent, art. 6(1)(a)). Your allergies and diets can be health data; we only process them with your explicit consent (art. 9(2)(a)), which you withdraw by removing them on your profile. Security measures such as rate limiting, temporary lockouts, logs and the automatic check of photos for sexual content are based on our legitimate interest in a secure service (art. 6(1)(f)). We do not use your data for advertising or profiling.

How long we keep it

We keep your data as long as you have an account. When you delete your account, your data is deleted right away, including your recipes and stored files. Items you remove (a photo, your CV, items on your list, a member you no longer share a recipe with) are deleted immediately. When a member deletes their account, they disappear from your share lists. Technical logs are kept only as long as needed for security and troubleshooting.

Who we share it with

We do not sell or rent out your data. We use processors that store or send data on our behalf: hosting and file storage (Microsoft Azure, EU data centers), an e-mail provider for account e-mails, Azure AI Content Safety by Microsoft in Sweden to check uploaded photos for sexual content (only the image, which Microsoft does not keep) and, for Basil (the AI assistant, Premium members only), Azure OpenAI by Microsoft in Sweden. Your questions to Basil, plus the recipes, shopping list items and your allergies and diets needed for an answer or a variant, are sent to Azure OpenAI to create that answer. If you scan a recipe, the photos (made smaller and without location data) are sent to Azure OpenAI as well, only to read the recipe. We do not keep your conversations or scanned photos; Microsoft does not use them to train models and may keep them for up to 30 days to detect abuse. Other members see your name and public profile, your public recipes and the recipes you share with them; your private recipes are visible only to you, administrators included. Members you share a recipe with see your name as its author; you see their names in your share list. Other members never see your e-mail address, phone number, date of birth or your allergies and diets. If you sign in with Google, Google (Google Ireland Limited) knows that you use Chefilo; Google’s privacy policy applies to that.

Supermarket price comparison

To compare prices of Albert Heijn, Jumbo, Lidl, PLUS, ALDI, Dirk, Hoogvliet, DekaMarkt, Vomar, SPAR, Poiesz and Ekoplaza, our server downloads a public price list from checkjebon.nl (via GitHub) a few times a day. Your shopping list is not sent to checkjebon.nl, GitHub or any supermarket: the comparison happens on our own server, and the result is not stored. If you let Basil help (Premium), the names of your open items and of the products found go to Azure OpenAI to choose the right products, as described above for Basil. We do not share any personal data with the supermarkets.

Cookies and local storage

We use one functional cookie to keep you signed in (secure, not readable by scripts, not shared with other websites) and keep your language choice, your view choice for the recipe overview and the recipes you opened in the last 24 hours in your own browser only. Kitchen mode asks your browser to keep the screen on while it is open; nothing is stored for that. When you sign in with Google, two short-lived functional cookies protect that step (against forged sign-ins) and are deleted right after it. We do not use tracking, analytics or advertising cookies, so we do not ask for cookie consent.

Security

Connections are encrypted (HTTPS). Passwords are stored as a secure hash, accounts are locked temporarily after repeated failed sign-ins, e-mail addresses must be confirmed and access keys are encrypted. Files such as photos and CVs are stored in private storage and are only shown to signed-in members.

Your rights

Under the GDPR you have the right to:

• Access: see which data we have about you.
• Rectification: correct data that is wrong or incomplete.
• Erasure: have your data and account deleted.
• Restriction: ask us to temporarily stop using your data.
• Data portability: receive your data in a machine-readable format.
• Objection: object to processing based on our legitimate interest.
• Withdraw consent: remove optional details at any time; this does not affect processing before that moment.

You can download your data, correct your details and delete your account yourself on your profile page. For other requests, contact us; we respond within one month.

Complaints

Not satisfied with how we handle your data? Please let us know. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl

Changes

We may update this statement when Chefilo changes. The date at the top shows the latest version; we will tell you about important changes in the app.