Privacy Policy

1. Introduction

SuzeChef ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the SuzeChef mobile application ("App") and website.

By using the App, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please do not use our App.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us when you create an account via Google or Apple Sign-In (powered by Auth0):

• Email address: Used for account creation, authentication, and service communications
• Name: Display name for your account and leaderboard profile
• Authentication tokens: Securely stored tokens for maintaining your session

We do not store your authentication passwords. All sign-in is handled securely through Google or Apple's OAuth services via Auth0.

2.2 User Content

We collect and store content you create or import in the App, including:

• Recipes you import, remix, or create
• Cookbooks and recipe collections
• Meal plans and weekly schedules
• Shopping lists generated from meal plans
• Personal notes and recipe modifications
• Dietary preferences and restrictions

2.3 Gamification & Usage Data

To power SuzeChef's gamification features, we collect:

• Cooking session history and completion data
• XP points, levels, and streak information
• Suze evolution stats (Protein, Brain Fuel, Fiber, Hydration, Energy Balance)
• Water intake tracking data
• Leaderboard rankings and tier information

2.4 Device & Technical Information

We automatically collect certain technical information when you use the App:

• Device type and operating system version
• App version and build number
• Usage analytics and interaction patterns
• Crash reports and performance data
• Timestamps of activities

2.5 Subscription Information

If you subscribe to SuzeChef Pro, we collect subscription status and plan type, subscription start and renewal dates, and purchase history (processed through the Apple App Store). We do not collect or store your payment card information. All payments are processed securely by Apple.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service provision: To provide, maintain, and improve the App's features and functionality
• Authentication: To verify your identity and secure your account
• AI recipe parsing: To process recipe URLs and text through our AI service and return structured recipe data
• Personalization: To generate recipe remixes based on your dietary preferences
• Gamification: To calculate XP, track stats, determine Suze's evolution, and maintain leaderboards
• Data sync: To synchronize your data across sessions and provide offline caching
• Subscription management: To manage your Pro subscription and feature access
• Communications: To send important service updates, security alerts, and support messages
• Analytics: To understand usage patterns and improve the user experience
• Security: To detect, prevent, and address technical issues and fraudulent activity
• Legal compliance: To comply with legal obligations and enforce our Terms of Service

4. AI Processing

SuzeChef uses artificial intelligence to parse recipes from URLs and generate personalized remixes. Here is exactly what is and is not shared with AI providers:

4.1 On-Device Image Processing

When you use the camera or photo library to capture a recipe (e.g., scanning a recipe card, cookbook page, or handwritten recipe), your images are never sent to any AI service or external server. All image recognition and text extraction (OCR) is performed entirely on your iPhone using Apple's on-device frameworks. Only the extracted text is sent to our backend for recipe parsing. The original images remain on your device and are not uploaded, stored, or transmitted by SuzeChef.

4.2 What IS Sent to AI

• Plain text extracted from images via on-device OCR (never the images themselves)
• Raw recipe text extracted from a URL (ingredients, steps, etc.)
• Your dietary preferences (e.g., "vegetarian," "low-carb") when generating a remix
• Any additional comments you provide during the remix process (e.g., "make it spicier")

4.3 What is NEVER Sent to AI

• Photos or images of any kind — all image processing stays on your device
• Your name, email address, or any personally identifiable information (PII)
• Your account credentials or authentication tokens
• Your cooking history, XP, stats, or gamification data
• Your meal plans, shopping lists, or cookbook organization
• Your device information or usage analytics
• Any data that could identify you as an individual

All AI processing happens server-side via our Convex backend. No private information, personal data, or images are shared with any AI provider. We route AI requests through OpenRouter, which means we are provider-agnostic and no single AI vendor receives your data directly. AI-generated content (parsed recipes, remixes, nutritional estimates) may contain errors. You are responsible for verifying all recipe information before cooking.

5. Data Sharing & Disclosure

5.1 Third-Party Service Providers

We share your information with trusted third-party service providers who assist us in operating the App:

5.2 No Sale of Personal Data

We do not sell your personal information to third parties for marketing or advertising purposes.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, such as court orders or subpoenas, government investigations, protection of our rights, property, or safety, or prevention of fraud or illegal activity.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner. We will notify you of any such transfer and any changes to this Privacy Policy.

6. Data Storage & Security

We implement industry-standard security measures to protect your information:

• Encryption: Data is encrypted in transit (TLS) and at rest in Convex's cloud infrastructure
• Secure authentication: OAuth 2.0 via Auth0 with secure token-based sessions
• Local caching: On-device data is stored using SwiftData with iOS-level encryption
• Access controls: Strict access controls limit who can access your data
• Data minimization: We only collect data necessary to provide our services

No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

7.1 Retention Periods

We retain your information for as long as necessary to provide our services:

• Account data: Retained while your account is active
• User content: Retained until you delete it or your account
• Gamification data: Retained while your account is active
• Analytics data: Retained for up to 12 months
• Subscription data: Retained as required by App Store policies and tax laws

7.2 Account Deletion

When you delete your account, we will:

• Immediately revoke your authentication credentials
• Delete all your recipes, cookbooks, meal plans, and gamification data within 30 days
• Remove your personal information from our active databases
• Retain anonymized, aggregated analytics data as permitted by law

7.3 How to Delete Your Account

You can delete your account directly from the App:

1. Open SuzeChef and go to your Profile
2. Tap Settings
3. Select "Delete Account"
4. Confirm your decision

Alternatively, you may contact us at suzechefai@gmail.com to request account deletion.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data in a structured, commonly used format
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing your personal information
• Withdraw consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, please contact us at suzechefai@gmail.com. We will respond to your request within 30 days.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States where our service providers operate. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

By using the App, you consent to such international transfers of your information.

10. Children's Privacy

SuzeChef is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected such information, we will take immediate steps to delete it.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at suzechefai@gmail.com.

11. California Residents (CCPA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request information about the categories of personal information we collect and how we use it
• Right to Delete: You may request deletion of your personal information
• Right to Opt-Out: You may opt out of the sale of your personal information (note: we do not sell personal information)
• Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights

To exercise these rights, please contact us at suzechefai@gmail.com.

12. European Residents (GDPR)

If you are a resident of the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Lawful basis: We process your data based on your consent (account creation), contract performance (providing the service), and legitimate interests (analytics and security)
• Data subject rights: You have the rights listed in Section 8, including the right to data portability and the right to erasure
• Data Protection Officer: For GDPR-related inquiries, contact us at suzechefai@gmail.com
• Right to lodge a complaint: You may lodge a complaint with your local data protection authority if you believe your rights have been violated

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Displaying a prominent notice in the App
• Sending you an email notification (for material changes)

Your continued use of the App after such changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

• Email: suzechefai@gmail.com
• Website: suzechef.com