SuperChef App

Privacy Policy

Effective Date: October 1, 20251. Introduction
Welcome to SuperChef, operated by Esnap Labs, LLC ("Company", "we", "our", "us"). We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and protect data when you use the SuperChef app and related services ("Services").
By using our Services, you consent to the practices described in this policy.
2. Information We Collect
We collect the following information to provide and improve our Services:
- Account Information: such as your email address (if provided through Apple Sign In or Google Sign In), user ID, and authentication tokens.
- User Preferences: dietary preferences, activity level, cooking experience, household size, and other preferences you provide during onboarding or in-app settings.
- Meal Planning Data: your meal plans, scheduled meals, grocery lists, and meal history.
- Recipe Data: recipes you favorite, recipes you create using the Recipe Builder, AI-generated recipes, and your recipe preferences.
- Nutrition Data: calories, macronutrients (protein, carbs, fat), and dietary information you track through the app.
- Image Data: photos you take or upload for AI recipe generation (processed by our AI service and not stored permanently).
- Usage Data: information about how you interact with the app, including device information (e.g., device model, operating system, IP address), and feature usage.
- Subscription Information: subscription status, purchase history, and payment information processed through RevenueCat and Apple App Store.
Note: We do not use cookies or similar tracking technologies. SuperChef is a native mobile application and does not employ web-based cookies or tracking mechanisms.3. How We Use Your Information
We use your data to:
- Provide and operate the Services you use, including meal planning, recipe library access, AI recipe generation, and grocery list generation
- Store and sync your meal plans, favorites, and user-generated recipes across your devices
- Calculate and track your nutrition information and dietary goals
- Personalize your experience based on your preferences and dietary restrictions
- Process AI recipe generation requests from images or text descriptions
- Process subscription payments and manage your premium account access
- Improve our algorithms and app performance using aggregated, anonymized data
- Communicate with you regarding updates, support, and promotional offers (with your consent)
- Comply with legal obligations
3A. Aggregated Analytics and Benchmarks
We may create and use de-identified, aggregated statistics derived from your usage data and app interactions (e.g., popular recipes, common meal planning patterns, and nutrition trends). These aggregates contain no personal data and are not reasonably usable to identify you.
- Participation: Where available, you may control participation in aggregated analytics via in-app settings, or contact us to request exclusion from future aggregation. Aggregates already produced are de-identified and not linked back to you.
- Safeguards: We apply privacy safeguards (such as minimum cohort sizes and other techniques) to reduce re-identification risk. Aggregated data is not sold and is shared only with service providers acting on our behalf.
- Retention and Use: Aggregated, de-identified data may be retained to improve features, generate insights, and ensure service quality.
4. Data Storage and Security
- Cloud Storage: Your meal plans, favorites, user-generated recipes, and account data are stored securely in Firebase (Google Cloud Platform) using industry-standard encryption.
- Local Storage: Some data (such as favorites and meal plans) may be cached locally on your device using UserDefaults for faster access and offline functionality.
- Secure Transmission: All data transmitted between your device and our servers uses encrypted TLS connections.
- Authentication: We use Firebase Authentication for secure sign-in via Apple Sign In, Google Sign In, or anonymous authentication. Your authentication credentials are managed by these providers and are not stored by us.
- Subscription Data: Subscription and payment information is processed securely through RevenueCat and Apple App Store. We do not store your payment card information.
4A. Data Retention
- Account Data: Retained until you delete your account or request deletion
- Email Address: Retained only if provided through Apple Sign In or Google Sign In, until account deletion
- User Preferences: Retained until you update them or delete your account
- Meal Plans and Recipes: Retained until you delete them or your account is deleted
- User-Generated Recipes: Recipes you create using Recipe Builder or AI generation are retained until you delete them or your account is deleted
- AI-Generated Recipe Images: Images uploaded for AI recipe generation are processed and not stored permanently after recipe generation
- Analytics Data: Aggregated, de-identified analytics may be retained for service improvement
- Account Deletion: All personal data (including email, preferences, meal plans, and recipes) permanently removed within 30 days of account deletion request
5. Data Sharing and Disclosure
We do not sell or rent your personal information to third parties.
We may share information with:
- Service providers who assist us in delivering the Services (Firebase/Google Cloud, RevenueCat, Apple) under confidentiality agreements
- Legal authorities when required by law or to protect rights and safety
- Third-party services integrated into our app (e.g., Google Sign In, Apple Sign In) as necessary to provide authentication and related services
5A. Third-Party Services
We share data with the following third-party service providers to deliver our Services:
- Firebase/Google Cloud Platform: We use Firebase for authentication, cloud storage, and data synchronization. Data shared includes: account information, meal plans, recipes, favorites, and user preferences. Google's privacy practices apply to data processed by Firebase. For more information, see Google's Privacy Policy: https://policies.google.com/privacy- RevenueCat: We use RevenueCat to manage subscriptions and payment processing. Data shared includes: subscription status, purchase history, and transaction information. We do not share payment card details. RevenueCat's privacy policy applies to subscription and payment data. For more information, see RevenueCat's Privacy Policy: https://www.revenuecat.com/privacy- Apple: When using Apple Sign In, we receive your email address (if you choose to share it) and user ID. Apple's privacy practices apply to authentication data. For more information, see Apple's Privacy Policy: https://www.apple.com/privacy/- Google: When using Google Sign In, we receive your email address (if you choose to share it) and user ID. Google's privacy practices apply to authentication data. For more information, see Google's Privacy Policy: https://policies.google.com/privacyAll third-party service providers are contractually obligated to protect your data and use it only for the purposes of providing services to us.6. Your Rights and Choices
Depending on your location, you may have rights including:
- Accessing and correcting your personal data
- Requesting deletion of your personal data
- Exporting your data (meal plans, recipes, favorites)
- Opting out of marketing communications
- Objecting to or restricting certain processing activities
- Managing your subscription and payment preferences through your device settings
To exercise these rights, please contact us at [email protected] or use the in-app settings to manage your data.7. Security
We use industry-standard security measures including encryption, secure authentication, and access controls to protect your information. However, we cannot guarantee absolute security due to inherent risks of internet transmission and data storage.
8. International Data Transfers
Our Services are hosted and operated in the United States using Google Cloud Platform. By using the Services, you consent to the transfer and processing of your data in the United States, which may have different data protection laws than your jurisdiction.
9. Children's Privacy
Our Services are not directed to individuals under 13 years old. We do not knowingly collect personal information from individuals under 13. If we learn that we have collected such information, we will take steps to delete it promptly.
10. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You have the right to request information about the categories and specific pieces of personal information we collect, use, disclose, and sell (we do not sell your personal information).
- Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out: We do not sell your personal information, so there is no opt-out mechanism required.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise your California privacy rights, please contact us at [email protected] with "California Privacy Rights" in the subject line. We will respond to your request within 45 days.We collect the following categories of personal information:
- Identifiers (email address, user ID)
- User preferences and account information
- Meal planning and recipe data
- Subscription and payment information (processed through third parties)
We use this information to provide our Services, process payments, and improve our app. We do not sell personal information to third parties.11. Cookies and Tracking Technologies
SuperChef is a native mobile application and does not use cookies, web beacons, or similar web-based tracking technologies. We do not track your browsing activity across other websites or apps. Any data collection is limited to what is necessary to provide and improve our Services, as described in this Privacy Policy.
12. Data Breach Notification
In the event of a data breach that compromises your personal information, we will notify affected users and relevant authorities as required by applicable law. We will provide notice within 72 hours of becoming aware of the breach, where feasible and as required by law.
13. Changes to This Privacy Policy
We may update this Privacy Policy occasionally. Changes will be posted here with an updated effective date. Your continued use of the Services constitutes acceptance of any changes.
14. Contact Us
If you have questions or concerns about this Privacy Policy or your data, please contact us:
Esnap Labs, LLC
9938 Timbers Drive
Cincinnati, Ohio
United States of America
Email: [email protected]
This Privacy Policy is incorporated into and governed by the Terms and Conditions of SuperChef.