Privacy policy

1. Overview

AI Chef can be used without an account to search and view community recipes; only technical access data is generated. An account is required to generate your own recipes and to use the cookbook, meal plan and shopping lists.

2. Account and authentication

Registration and sign-in use Firebase Authentication (Google Ireland Ltd. / Google LLC). We process your email address, display name and technical authentication data. Legal basis: performance of contract (Art. 6(1)(b) GDPR).

3. Your account content

Your recipes, favourites, plans, shopping lists and profile settings (e.g. diet, allergies, servings) are stored in Google Firestore. To serve the public website quickly, published community recipes are additionally replicated to database and search infrastructure on European servers (Hetzner/Webbase, Meilisearch).

Community recipes you publish (including generated images) are publicly visible; your name and email address are not displayed publicly.

4. AI processing (OpenAI)

For recipe and image generation, your inputs (text prompts and, optionally, uploaded photos of ingredients) are transmitted to OpenAI (USA) and processed there to produce the response. Please do not include sensitive personal data in prompts or photos. Legal basis: performance of contract.

5. Images

Generated recipe images are stored and served from servers of Hetzner Online GmbH (Germany) under img.ai-chef.info.

6. Subscriptions and payments

Web subscriptions are processed via Stripe; Stripe processes payment data as its own controller and we never receive full payment details. App subscriptions are handled by the Apple App Store or Google Play. We use RevenueCat (customer ID, subscription status) to manage subscription entitlements across devices.

7. Contact form

When you contact us via the contact form we process your name (optional), email address and message to handle your request. Emails are sent via the Resend service. Legal basis: legitimate interest / pre-contractual steps.

8. Server logs and abuse protection

Accessing the website and its interfaces generates technical data (IP address, time, requested resource). It is used for operations, troubleshooting and abuse protection (e.g. rate limiting) and is retained only briefly.

9. Cookies and local storage

We only use technically necessary cookies and local storage: the sign-in session and display preferences (e.g. dark mode). There is no advertising tracking and there are no third-party analytics cookies.

10. Retention and account deletion

Account data and content are stored for as long as your account exists. You can delete your account at any time in the app or in your web profile; your personal data is then deleted unless statutory retention obligations (e.g. for invoicing data) require otherwise.

11. Your rights

You have the rights of access, rectification, erasure, restriction of processing, data portability and objection. Please contact us via the contact form. You may also lodge a complaint with the Austrian data protection authority (dsb.gv.at).

12. Changes

We update this policy when features or the services we use change. The version published here applies.