Chefly.app Privacy Policy

Effective date: September 2, 2025

This Privacy Policy describes how Chefly ("we", "us", or "our") collects, uses, stores, and discloses information when you use the Chefly web application (the "Service"). This policy applies to users of the website, APIs, and any related services provided by Chefly.

1. Information We Collect

- Information you provide directly:

- Account information (name, email, password) when you register.

- Profile details (display name, preferences, avatar) if you choose to add them.

- Content you submit (recipes, comments, ratings, uploads).

- Support requests and correspondence.

- Automatically collected information:

- Usage data (pages visited, features used, timestamps).

- Device and connection information (IP address, browser type, operating system, device identifiers).

- Analytics data collected through cookies and similar technologies.

- Third-party sources:

- If you authenticate through third-party providers (e.g., Google, Facebook), we may receive certain information (name, email) from that provider in accordance with your consent.

2. How We Use Your Information

We use collected information to:

- Provide, maintain, and improve the Service.

- Personalize your experience and show relevant content.

- Communicate with you, including service announcements and responses to support requests.

- Process uploads and enable sharing features.

- Detect, prevent, and address technical or security issues.

- Comply with legal obligations.

We may also use aggregated or de-identified data for analytics, research, and business purposes.

3. Cookies and Tracking

We use cookies and similar tracking technologies to operate and improve the Service, for security, to remember your preferences, and for analytics. You can control cookies through your browser settings and opt-out of certain tracking via [your settings or a provided preference center].

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

- Service providers: We may share data with vendors and service providers who perform services on our behalf (hosting, analytics, email delivery).

- Legal requests: We may disclose information to comply with laws, respond to legal process, or protect rights, property, or safety.

- Business transfers: If we are involved in a merger, acquisition, or asset sale, user information may be transferred as part of that transaction.

- With your consent: We may share information where you have provided explicit consent.

5. Data Retention

We retain personal information as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods may be documented in our internal data retention schedule.

6. Security

We implement reasonable administrative, technical, and physical safeguards intended to protect personal information. However, no method of transmission or storage is completely secure. If we become aware of a breach affecting personal data, we will follow applicable legal requirements for notification.

7. International Transfers

Chefly is based in [Country/Region]. If we transfer personal data to other countries, we will take steps to ensure an adequate level of protection consistent with this Privacy Policy and applicable law.

8. Children

The Service is not directed to children under 13 (or higher age where required by local law). We do not knowingly collect personal information from children. If we learn we have collected data from a child without parental consent, we will delete it.

9. Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data. You can:

- Access and update your account information via your profile settings.

- Request deletion of your account by contacting us at the address below.

- Opt out of marketing emails by following the unsubscribe link in our messages.

To exercise rights not available in your account settings, contact us using the details below. We may need to verify your identity before fulfilling certain requests.

13. GDPR (European Union) Specific Disclosures

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following additional terms apply in respect of your personal data.

- Lawful bases for processing: We rely on one or more of the following legal bases to process personal data under the GDPR: (i) performance of a contract with you; (ii) your consent (where obtained); (iii) compliance with a legal obligation; and (iv) our legitimate interests (such as operating, improving, and securing the Service), provided those interests are not overridden by your rights.

- Your GDPR rights: You may have the right to (as applicable):

- Request access to the personal data we hold about you.

- Request correction of inaccurate or incomplete data.

- Request deletion of your personal data (the "right to be forgotten").

- Request restriction of processing of your personal data.

- Object to processing based on our legitimate interests or direct marketing.

- Request portability of your personal data in a commonly used, machine-readable format.

- Withdraw consent where we process your data based on consent.

- How to exercise your rights: To exercise any GDPR right, contact us at the contact details below. We will respond within the timeframes required by applicable law (generally one month). We may ask you for information to verify your identity before processing your request.

- International transfers: When we transfer personal data from the EEA/UK/Switzerland to other countries, we will rely on appropriate safeguards such as standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms.

14. CCPA/CPRA (California) Specific Disclosures

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) may provide you with additional rights regarding your personal information. This section describes those rights and how to exercise them.

- Categories of personal information collected: The categories of personal information we collect are described in Section 1 above.

- Your California privacy rights: California residents have the right to:

- Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collection, and the categories of third parties with whom we share it.

- Delete: Request deletion of personal information we have collected from you, subject to certain exceptions.

- Opt-Out of Sale or Sharing: You have the right to opt-out of the sale or sharing of your personal information. We do not sell personal information for monetary consideration. If our practices change, we will provide a clear method to opt-out (for example, a prominent "Do Not Sell or Share My Personal Information" link).

- Limit Use of Sensitive Personal Information: Under the CPRA, you may request limits on the use and disclosure of sensitive personal information for certain purposes.

- How to exercise your California rights: To submit a request under the CCPA/CPRA, please contact us at the contact details below or use the web form at: https://chefly.app/privacy-ccpa-request. We will verify your request using information that you provide and may require additional information to confirm your identity. Authorized agents may submit requests on your behalf with appropriate proof of authorization.

- Non-discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights. This means we will not deny goods or services, charge different prices, or provide a different quality of goods or services, except as permitted by law.

-- California resident agent for privacy requests: If you are a California resident and prefer to make requests by mail, send them to:

Chefly

Address: 632 N 2nd St, #1201, Philadelphia PA 19123

Attn: Privacy Requests — California

If required under California law, we will also provide a designated agent for service of process; contact details will be provided here when applicable.

10. Third-Party Links and Services

The Service may contain links to third-party websites or services. This Privacy Policy does not apply to third-party services; please review their privacy policies separately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on the Service and update the "Effective date". If changes are material, we will provide additional notice.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

Chefly

Address: 632 N 2nd St, #1201, Philadelphia PA 19123

Email: info@chefly.app

---