Privacy Policy

Chefnero Ltd is the data controller for the personal data described in this policy. If you have any questions, contact us at chefnero.ltd@gmail.com.

Account information. Email address, password (handled securely by our authentication provider, Supabase — we never see or store your raw password), full name, and phone number.

Profile information. Profile photo, and, for chefs: bio, specialties, cuisine types, service area, delivery radius, food hygiene certificate, and photos of food you’ve made.

Order & messaging content. The details of food requests you submit, quotes chefs send, and messages exchanged between customers and chefs while negotiating an order, including any photos shared in that chat.

Location data. With your permission, your device’s GPS location, used to show nearby chefs and estimate delivery distance. Chefs’ approximate service area is shown to customers; your precise location is never shared with the other party.

Payment information. All card details are collected and processed directly by Stripe, our payment processor — Chefnero does not store your full card number. We retain records of transaction amounts, order references, and (for chefs) Stripe Connect account status needed to pay out earnings.

Reviews. Star ratings, written reviews, and any photos you attach to a review, which are displayed publicly on the relevant chef’s profile.

Device & push notification data. A device token used to deliver push notifications (e.g. new quote, order status update) via Firebase Cloud Messaging.

Usage analytics. App screens viewed and key actions taken (such as searching, viewing a chef profile, placing an order, or completing payment), collected via Firebase Analytics to help us understand and improve the Service.

• To create and manage your account, and to verify your identity when you sign in.
• To connect customers with relevant, available chefs and to enable the request → quote → payment flow.
• To process payments and, for chefs, to pay out earnings via Stripe Connect.
• To send order-related notifications (new message, quote received, status updates) and, where you’ve agreed, occasional product updates.
• To display chef profiles, galleries, and reviews to prospective customers.
• To review uploaded food hygiene certificates as part of chef verification.
• To investigate disputes, reports of problems with an order, or suspected misuse of the Service.
• To understand how the Service is used so we can fix issues and improve it.
• To comply with our legal obligations, including tax and financial record-keeping.

We rely on the following legal bases depending on the activity:

• Contract — to create your account and to facilitate an order between you and a chef.
• Consent — for location access, push notifications, and non-essential cookies (you can withdraw this at any time in your device or browser settings).
• Legitimate interests — to keep the Service secure, prevent fraud, and improve it through aggregated usage analytics.
• Legal obligation — to retain financial records and respond to lawful requests from authorities.

We do not sell your personal data. We share it only as needed to run the Service:

• The other party to an order. A customer and chef see each other’s name, profile, and the messages/quotes exchanged for that order.
• Stripe, Inc. — payment processing and, for chefs, identity verification and payouts via Stripe Connect.
• Supabase — our database, authentication, and file storage provider.
• Google Firebase — push notifications and product analytics.
• Google / Apple — only if you choose to sign in using Google or Apple Sign-In.
• Law enforcement or regulators, where we are legally required to disclose information.

Some of these providers may process data on servers outside the UK or EEA. Where that happens, we rely on their standard contractual clauses or equivalent safeguards recognised under UK GDPR.

Our website uses essential cookies/local storage to keep you signed in and to remember your cookie preference. We do not currently use third-party advertising cookies. If this changes, we’ll update this policy and the cookie banner accordingly.

We keep your account and order data for as long as your account is active, and for a reasonable period afterwards to meet legal, tax, and dispute-resolution obligations (typically up to 6 years for financial records). Reviews may remain visible on a chef’s profile after your account is deleted, with identifying details removed on request where reasonably possible.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data (“right to be forgotten”), subject to our legal retention obligations.
• Object to, or ask us to restrict, certain processing.
• Request a portable copy of your data.
• Withdraw consent at any time where we rely on consent (e.g. location, push notifications).
• Complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk if you believe we’ve mishandled your data.

To exercise any of these rights, email chefnero.ltd@gmail.com. You can also delete your account directly from the app’s profile settings.

The Service is not directed at, and must not be used by, anyone under 18. We do not knowingly collect personal data from children.

We use industry-standard measures — including encryption in transit and at rest, and row-level database access controls — to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We may update this policy from time to time. If we make material changes, we’ll notify you in the app or by email. The “Last updated” date at the top shows when this policy was last revised.

Chefnero Ltd
Email: chefnero.ltd@gmail.com
Website: chefnero.com