1. Information We Collect

• Account and profile information such as your name, email address, display name, profile photo, legal acceptance records, and password credentials (stored as a secure hash, not in plain text).
• Content you create or import such as recipes, notes, meal plans, pantry items, grocery lists, cooking session progress, comments, messages, uploaded photos, and recipe book information.
• Import and sharing data such as recipe source URLs, uploaded files, invite tokens, referral information, public share links, and collaboration records when you import, invite, or share content.
• Device, session, and sync data such as session tokens, browser or mobile device identifiers, device type, push tokens, app version, operating system version, sync activity, and recent account activity.
• Billing and subscription data such as subscription tier, subscription status, Stripe customer or subscription IDs, and mobile subscription identifiers received from app store billing services. We do not store your full payment card number.
• Support and communications data such as contact form submissions, support tickets, emails you send us, notification preferences, and message delivery logs.
• AI assistant data such as prompts, conversation history, recipe context, and generated responses when you use AI-powered features.
• Dietary and allergy information such as your chosen diet, food allergies, ingredient dislikes, dietary restrictions, and nutrition preferences or targets. This information is stored with your account and can be used to personalize recipe suggestions and meal plans.
• Social connections such as your in-app friends, follows, invitations, and blocking records. These features do not require access to your device's address book.
• ChatGPT connection data such as your linked MomoChef account identifier, the OpenAI subject identifier ChatGPT assigns to the connection, the permission scopes you approve, and first/last-use timestamps for the connection, recorded when you link MomoChef to ChatGPT.
• Security and abuse-prevention data such as IP-derived rate-limit data, log records, reCAPTCHA verification results, and diagnostic or error information.
• Cookies, local storage, and similar technologies used for authentication, theme preferences, keeping you signed in, and preserving referral, invite, or share-flow state on the web.

2. How We Collect Information

• Directly from you when you create an account, upload content, use support forms, or communicate with us.
• Automatically when you use the Service, including through authentication cookies, app logs, and device or sync metadata.
• From integrations you choose to use, such as recipe imports from external URLs, public shares, referrals, and subscription platforms.
• From service providers that help process payments, deliver email, host images, detect abuse, and support AI features.

3. How We Use Information

We use information to:

• Provide, operate, maintain, and improve the Service.
• Create and manage your account, authenticate you, and keep your sessions secure.
• Store, sync, organize, and display your recipes, meal plans, grocery lists, pantry items, and other content.
• Enable sharing, collaboration, referrals, community features, public recipe or recipe-book pages, and cooking sessions.
• Process uploads, imports, exports, backups, and recipe parsing workflows.
• Process subscriptions, reconcile billing state, and manage premium access.
• Send transactional emails, support replies, verification emails, password reset emails, and notifications.
• Provide AI assistant responses and related recipe suggestions or meal-planning features.
• Monitor reliability, troubleshoot issues, detect fraud or abuse, and enforce our Terms.
• Comply with legal obligations and protect the rights, safety, and security of our users and Service.

4. When Information Becomes Visible to Others

• Your account content is private by default unless you choose to share it.
• If you publish a recipe or recipe book, share a public link, send an invite, message another user, or participate in collaborative features, the related content and profile details may be visible to the recipients or to the public based on the settings you choose.
• If you enable directory visibility or community features, other users may be able to find your profile or interact with your shared content.
• If you publish a recipe to the community catalog, it may also be served through connected AI platforms (such as ChatGPT) to users who browse MomoChef content there without signing in; your account name and email are not shared with those anonymous viewers.

5. How We Share Information

We may share information in the following circumstances:

• Service providers and infrastructure vendors that help us operate the Service, such as providers used for payment processing, subscription management, email delivery, image upload and hosting, error monitoring, bot detection, push notifications, support ticketing, and AI responses.
• OpenAI for personalized AI features. The AI assistant and AI meal-planning features can send your messages, relevant conversation history, recipe information, dietary preferences and allergies, nutrition targets, and relevant pantry, grocery-list, and meal-plan information to OpenAI to generate responses and suggestions. MomoChef does not need to send your account password or payment card details to generate these responses.
• OpenAI for third-party recipe processing. Server-side import, validation, and recipe-enrichment workflows can process recipe text, captions, transcripts, or media from other websites and platforms using OpenAI. These calls process recipe source content rather than your dietary profile or assistant conversation history. Processing performed entirely on your device does not send that input to OpenAI.
• Other users or the public when you choose to share recipes, recipe books, messages, referrals, invitations, or community content.
• Connected AI platforms when you link MomoChef to ChatGPT (or a similar AI platform we support). Once you approve the connection, that platform can retrieve the data you approved for it on your instructions — typically your recipes (including community recipes you browse), meal plans, grocery lists, pantry items, and your basic account information (name, email, subscription tier) — so it can answer your requests. Requests from that platform are acted on only for the account you linked, under the scopes you approved, and you can disconnect at any time from your MomoChef account settings or from ChatGPT.
• Legal and safety disclosures if we believe disclosure is reasonably necessary to comply with law, respond to lawful requests, protect users, investigate abuse, or enforce our agreements.
• Business transfers in connection with a merger, acquisition, financing, reorganization, or sale of assets.

6. Third-Party Services We Use

The Service may use third-party providers including, depending on the feature you use, services such as Stripe, RevenueCat, Resend, Cloudinary, OpenAI, Google reCAPTCHA, Apple Push Notification service, Firebase Cloud Messaging, and Sentry, or functionally similar replacements. Those providers process information on our behalf or in connection with the feature you choose to use.

Error and performance monitoring can include account and device identifiers alongside diagnostic records. These records may be linked to your account; they are not used for cross-app or cross-site advertising tracking.

Community photo submissions are held for review before publication. Authorized admins or moderators can view the submitted photo and associated recipe and submitter information to approve or reject it.

7. Your Choices and Controls

• You can update certain profile information, visibility settings, and preferences in your account.
• You can manage whether your profile is searchable and control what content you share publicly or with collaborators.
• You can manage notification preferences in the app and through your browser or device settings.
• In the iOS assistant, you can withdraw permission for personalized OpenAI requests using AI privacy → Withdraw AI consent. This covers chat, cooking assistance, and AI Meal Plan on that device. Withdrawal stops new requests; you can separately delete saved conversations from Past Conversations.
• You can clear certain browser storage through your browser settings, though some features may stop working correctly.
• You can request export or deletion of your account data through the product or by contacting us.

8. Data Retention

We retain information for as long as reasonably necessary to provide the Service, maintain your account, support sync and collaboration features, comply with legal obligations, resolve disputes, and enforce agreements. Some data may remain in backups, logs, billing records, fraud-prevention systems, or shared content histories for a limited period after deletion where permitted or required by law.

AI assistant data. If you use AI-powered features, your prompts, conversation history, recipe context, and generated responses are kept as part of your account so you can return to, continue, and delete your conversations at any time — this history exists for your benefit. Deleting a conversation removes it, and deleting your account removes the underlying history, subject to the backup window described above. To keep the Service safe, we retain limited security and abuse-prevention logs connected to AI usage (such as rate-limiting and abuse-detection records) for up to 90 days. When an AI feature processes your content, the relevant text is sent to our AI provider (OpenAI) solely to generate the response you requested, under terms that prohibit the provider from using API-submitted content to train its models; the provider retains such request data only for a short abuse-monitoring period (typically up to 30 days).

ChatGPT connection records. When you link MomoChef to ChatGPT, we keep a connection record (your account, the OpenAI subject identifier for the connection, the scopes you approved, and first/last-use timestamps) for as long as the connection is active. Disconnecting MomoChef from ChatGPT, or deleting your account, removes the connection record, subject to the backup window described above. Recipe content returned through the connection is not duplicated into ChatGPT beyond what ChatGPT retains in your own conversation history under its terms.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including secure password hashing, access controls, and measures intended to reduce abuse and unauthorized access. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. International Transfers

Your information may be processed in countries other than your own, including where our service providers operate. Where required, we take steps designed to implement appropriate safeguards for cross-border transfers.

11. Children's Privacy

This Service is not intended for and is not directed to children under 13 years old. We do not knowingly collect personal information from children under 13. By using the Service, you represent that you are at least 13 years old. If you believe a child under 13 has provided us personal information, please contact us and we will take appropriate steps to delete such information.

12. U.S. State Privacy Rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or information about the personal information we process about you. You may also have the right to appeal a denied request. We do not sell your personal information or share it for cross-context behavioral advertising as those terms are defined under certain U.S. privacy laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide reasonable notice (for example, by posting an updated version on this page).

14. Contact

Questions about privacy? Contact us at [email protected].

Related policies: Terms of Service.