SocialChef

SocialChef Privacy Policy

Last updated: 05/07/2025

The Simple Version

We respect your privacy and take protecting your personal data seriously. This policy explains what information we collect, why we collect it, how we protect it, and what rights you have. We never sell your personal information to anyone.

Who's responsible: VinterKraft LTD (that's us) handles your data. We're based in the UK and follow strict European privacy laws (UK GDPR).

What Information We Collect

When You Create an Account

  • Email address - so you can log in and we can contact you
  • Full name - to personalize your experience
  • Username - what others might see if we add social features
  • Age verification data - to ensure appropriate protections, especially for under-18 users

Your Recipe Content

  • Recipe data extracted from social media posts you choose to share with us
  • Links to the original social media posts (for attribution)
  • Creator names from the original posts (where available)
  • Recipe images - we process these temporarily but don't store them permanently
  • Your personal edits - notes, changes, and organization you add

Technical Information

To make the app work properly and safely:

  • Device info - what phone/tablet you're using, operating system version
  • Usage data - which features you use, how long you spend in the app
  • Performance data - crash reports and error logs (via Sentry)
  • Your IP address - for security, fraud prevention, and providing the service
  • Analytics data - how people use the app to help us improve it

Location Data

We don't collect precise location data, but we may infer your general location from your IP address for security and legal compliance purposes.

How We Use Your Information

Making SocialChef Work

  • Create and maintain your account with appropriate age protections
  • Extract recipe information using AI (with transparency about how this works)
  • Sync your recipes across all your devices
  • Provide customer support when you need help
  • Keep your account secure and prevent fraud

AI Processing - Important Details

We use artificial intelligence services (Groq AI and Replicate) to:

  • Extract recipe information from social media posts you share
  • Improve accuracy over time through machine learning
  • Organize content automatically for better user experience

You have the right to:

  • Object to AI processing of your personal data
  • Request human review of any AI decisions that affect you
  • Get explanations of how our AI systems work and what they decide
  • Correct any mistakes our AI systems make

Making SocialChef Better

  • Understand how people use the app to improve features
  • Fix bugs and improve performance
  • Develop new features based on what users actually need
  • Ensure content safety and compliance with our policies

Keeping You Safe

  • Content moderation - automatically filtering inappropriate content
  • Safety monitoring - detecting and preventing harmful behavior
  • Legal compliance - meeting our obligations under various safety laws
  • Child protection - enhanced safeguards for users under 18

Talking to You

  • Send important updates about the service or your account
  • Respond to your questions and provide support
  • Notify you about significant changes to our policies
  • Send safety-related communications when necessary

Legal Basis for Processing (For EU/UK Users)

We process your data because:

  • You asked us to - by using SocialChef, you're asking us to organize your recipes (Contract)
  • We have legitimate interests - like improving the app, preventing fraud, and ensuring safety (Legitimate Interests)
  • You gave us permission - for things like marketing emails, if you opt in (Consent)
  • We're legally required - to comply with safety laws, protect children, etc. (Legal Obligation)

Who We Share Your Data With

Service Providers We Trust

We work with these companies to make SocialChef work:

  • Supabase - securely stores your data in European data centers
  • Sentry - helps us catch and fix technical problems
  • Groq AI & Replicate - power our AI recipe extraction (with strict data protection agreements)
  • Payment processors - Stripe, Apple, Google (only for premium subscriptions)

Important: These companies can only use your data to help us provide SocialChef. They can't use it for their own purposes, and we have strict contracts with them.

Cross-Border Data Transfers

Your data is primarily stored in the European Union. When we need to transfer data outside the EU/UK:

  • We use Standard Contractual Clauses or other approved mechanisms
  • We conduct risk assessments for each transfer
  • We implement additional safeguards where necessary
  • We only work with trusted partners who meet strict data protection standards

Legal Requirements

We might have to share your information if:

  • A court orders us to
  • It's required by law (like child safety reporting)
  • We need to protect our rights or others' safety
  • It's necessary to investigate serious violations

Business Changes

If we ever sell SocialChef or merge with another company, your information might be transferred to the new owners (with the same privacy protections).

How We Protect Your Data

Security Measures

  • Encryption - your data is encrypted when stored and transmitted
  • Access controls - only authorized people can access your data
  • Regular security updates - we keep our systems secure and up-to-date
  • EU-based servers - your data stays in Europe with strong privacy laws
  • Security monitoring - we watch for threats and respond quickly

Data Retention - Specific Periods

  • Account data - kept while your account is active, deleted within 30 days of account deletion
  • Recipe data - kept until you delete specific recipes or your account
  • Analytics data - kept for 24 months maximum to improve the service
  • Child safety data - special retention rules apply, typically shorter periods
  • Legal compliance data - kept as long as required by law

Data Breaches

If something goes wrong with your data security:

  • We'll tell the authorities within 72 hours
  • We'll notify you within 72 hours if it might affect you
  • We'll take immediate action to fix the problem and prevent it happening again

Special Protections for Children

Age Verification

We use age verification systems to ensure appropriate protections:

  • Under 13: Parental consent required, enhanced data protection
  • 13-17: Additional privacy safeguards, limited data processing
  • Verification methods: Age declaration, parental verification, device-based checks

Enhanced Rights for Children

  • Easier account deletion - simplified processes for young users
  • Stronger consent - clear, age-appropriate language
  • Limited data sharing - we share less data about children
  • Regular data deletion - we proactively delete children's data more frequently

Parental Rights

Parents/guardians of users under 13 can:

  • Access their child's data by contacting us
  • Request corrections to their child's information
  • Delete their child's account at any time
  • Object to processing of their child's data

Your Rights and How to Use Them

You have powerful rights over your data. Here's what you can do:

Access Your Data

What: Get a copy of all the personal information we have about you How: Email legal@socialchef.io with "Data Access Request" in the subject Timeline: We'll respond within 1 month

Fix Incorrect Information

What: Tell us if something's wrong and we'll correct it How: Contact support@socialchef.io or use in-app tools Timeline: Immediate for simple corrections

Delete Your Data ("Right to be Forgotten")

What: Ask us to delete your personal information How: Use account deletion in app settings or email legal@socialchef.io Timeline: Completed within 30 days Note: Some data may need to be kept for legal reasons

Limit How We Use Your Data

What: Ask us to only use your data for certain purposes How: Email legal@socialchef.io with specific restrictions Example: "Only use my data for providing the service, not for analytics"

Get Your Data Back (Portability)

What: Export your data in a format you can use elsewhere How: Use export tools in app settings or request via email Format: JSON, CSV, or other machine-readable formats

Object to Processing

What: Tell us to stop using your data for certain purposes How: Email legal@socialchef.io with your objection Examples: Object to marketing, analytics, or AI processing

Withdraw Consent

What: Take back permission you previously gave us How: Use privacy settings in the app or email us Effect: We'll stop that processing but won't affect past processing

To exercise any right: Email legal@socialchef.io with your request and proof of identity.

Social Media Integration and Content Rights

How We Access Social Media Content

  • No account linking - you don't need to connect your social media accounts
  • Only what you share - we only access content you specifically choose to share
  • Native sharing - we use your phone's built-in share functionality
  • No bulk importing - each piece of content requires your individual action

Content Rights and Fair Dealing

When you share social media content with us:

  • You must have the right to share that content
  • We store it for your personal use only under fair dealing principles
  • We don't redistribute or make it publicly available
  • Original creators retain all their rights
  • You're responsible for ensuring you have permission to share

What We Store

  • Recipe text and data - the actual recipe information
  • Attribution links - links back to original posts
  • Creator names - to give proper credit
  • Temporary image processing - we process images but don't store them permanently

International Data Transfers - Detailed Information

Where Your Data Goes

  • Primary storage: European Union (via Supabase)
  • AI processing: May include transfers to US providers (with safeguards)
  • Analytics: Processed within EU where possible

Safeguards We Use

  • Standard Contractual Clauses - EU-approved contract terms
  • Adequacy decisions - countries the EU recognizes as having good data protection
  • Additional measures - extra security for higher-risk transfers
  • Regular reviews - we assess transfer risks annually

Your Rights for International Transfers

  • Right to object to transfers to specific countries
  • Right to information about where your data goes
  • Right to complaint to data protection authorities about transfers

Cookies and Tracking Technologies

We use minimal tracking technologies:

  • Essential cookies - to keep you logged in and the app working
  • Analytics cookies - to understand how the app is used (you can opt out)
  • Performance cookies - to identify and fix technical issues

You can control these through your device settings or in-app privacy controls.

Changes to This Policy

We might update this policy occasionally:

  • We'll notify you through the app or by email about any changes
  • Material changes get extra notice and clear explanations
  • We'll update the date at the top of this policy
  • Old versions are available on request

Regulatory Compliance

We comply with:

  • UK GDPR and Data Protection Act 2018 - comprehensive data protection
  • Children's Code (Age Appropriate Design Code) - special protections for children
  • Online Safety Act 2023 - content safety and illegal content prevention
  • ePrivacy Regulations - electronic communications privacy
  • EU GDPR - for EU users
  • Other applicable international laws - where we have users

Questions and Complaints

Contact Us About Privacy

  • General privacy questions: legal@socialchef.io
  • Data requests: legal@socialchef.io
  • Child safety concerns: safety@socialchef.io

Our address: VinterKraft LTD Unit A, 82 James Carter Road Bury St Edmunds, IP28 7DE, UK

Data Protection Authorities

If you're in the UK/EU and think we're not following privacy laws, you can complain to:

  • UK: Information Commissioner's Office (ICO) - ico.org.uk
  • EU: Your local data protection authority

Response Times

  • Simple questions: Within 5 business days
  • Data requests: Within 1 month
  • Urgent safety issues: Within 24 hours

Your Data Protection Rights Summary

Remember: You're in control of your data. You can access it, correct it, delete it, move it, or ask us to stop using it. We're here to help you exercise these rights easily and quickly.

We're committed to protecting your privacy while helping you organize your recipes safely and securely!