Privacy Policy

Last updated: October 23, 2025

This Privacy Policy describes how Sous Chef ("we", "our", or "us") collects, uses, and protects your information when you use our mobile application and website.

Information We Collect

Personal Information

Email address (for account creation and sharing features)
Name (for personalization and family member identification)
Home and family member information (for organization features)

Usage Data

Pantry items and inventory data
Shopping lists and shared content
Barcode scan data for item identification
App usage analytics and performance data

Device Permissions

Our app may request the following device permissions:

Camera access - for barcode scanning functionality
Storage access - to save and sync pantry data
Network access - to sync data across devices
Notification access - to send sharing alerts and reminders

Analytics and Technical Data

Device type, operating system, and app version
IP address and general location (country/region level)
App performance metrics and crash reports
Usage patterns and feature interactions

How We Use Your Information

To provide and maintain our pantry tracking service
To enable sharing features between family members
To process barcode scanning and item identification
To send sharing invitations and notifications
To improve our app's functionality and user experience
To analyze app performance and fix technical issues
To comply with legal obligations and enforce our terms

Legal Basis for Processing

We process your information based on the following legal grounds:

Contract: To provide the services you've requested
Consent: When you explicitly agree to data processing
Legitimate Interest: To improve our services and ensure security
Legal Obligation: To comply with applicable laws

Data Sharing and Third Parties

We do not sell, trade, or rent your personal information to third parties. Your data is shared only:

With family members you explicitly invite to your home
When you choose to share shopping lists via email or share codes
With trusted service providers who assist in operating our app:
- Cloud hosting services (AWS, Google Cloud, or similar)
- Analytics providers (crash reporting and performance monitoring)
- Email service providers (for notifications and invitations)
- Authentication services (for secure login)
When required by law or to protect our rights and safety

All third-party service providers are contractually bound to protect your data with the same level of security we provide.

Data Retention

We retain your information for the following periods:

Account data: Until you delete your account
Pantry and shopping list data: Until you delete your account or remove specific items
Analytics data: Up to 2 years for app improvement purposes
Communication logs: Up to 1 year for support purposes

After account deletion, we may retain some information for up to 30 days for backup purposes, then permanently delete it.

International Data Transfers

Your data may be processed and stored in countries other than your residence. We ensure adequate protection through:

Standard Contractual Clauses approved by regulatory authorities
Adequacy decisions for data transfers to approved countries
Strong encryption during data transmission and storage

Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data transmission is encrypted, and access is restricted to authorized personnel only.

Your Rights and Choices

You have the following rights regarding your personal data:

Access: Request a copy of your personal information
Rectification: Update or correct your personal information
Deletion: Delete your account and associated data
Data Portability: Export your pantry and shopping list data
Restriction: Limit how we process your data
Objection: Object to certain data processing activities
Consent Withdrawal: Withdraw consent where processing is based on consent
Communication Preferences: Opt out of non-essential communications

To exercise these rights, contact us at privacy@souschef.dev. We will respond within 30 days. Some requests may require identity verification.

Consent and Permissions

We obtain your consent before:

Accessing device features (camera, storage, notifications)
Sending marketing communications
Processing data for analytics beyond essential app functionality
Sharing data with family members or via sharing features

You can withdraw consent at any time through app settings or by contacting us. Withdrawal won't affect previous processing based on consent.

Cookies and Tracking Technologies

Our app and website may use:

Essential cookies: Required for app functionality
Analytics cookies: To understand app usage (with your consent)
Session storage: To maintain your login and preferences
Local storage: To store app data locally on your device

You can manage cookie preferences through your device settings.

Children's Privacy

Our app is designed for family use and we take children's privacy seriously:

We do not knowingly collect personal information from children under 13 (or applicable age in your jurisdiction) without verifiable parental consent
Family accounts should be created and managed by adults (18+)
Parents can review, modify, or delete their child's information by contacting us
We encourage parents to monitor their children's online activities

If we discover we have collected information from a child under the applicable age without proper consent, we will delete it immediately.

Data Breach Notification

In the unlikely event of a data breach that may affect your personal information:

We will notify regulatory authorities within 72 hours if required by law
We will inform affected users without undue delay
We will provide details about the breach and steps taken to address it
We will offer guidance on protecting yourself from potential harm

Compliance and Regulatory Information

Our privacy practices comply with applicable laws including:

General Data Protection Regulation (GDPR) - for EU users
California Consumer Privacy Act (CCPA) - for California users
Children's Online Privacy Protection Act (COPPA) - for US users under 13
Personal Information Protection and Electronic Documents Act (PIPEDA) - for Canadian users

Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of Pennsylvania, United States. Any disputes will be resolved in the courts of Philadelphia, Pennsylvania, unless prohibited by applicable consumer protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

We will update the "Last updated" date at the top of this policy
We will notify users through the app, email, or other reasonable means
For significant changes, we may require re-consent
We encourage you to review this policy periodically

Contact Information

For privacy-related questions, concerns, or to exercise your rights, contact us:

Privacy Contact: privacy@souschef.dev
General Contact: contact@souschef.dev
Website: https://souschef.dev
Mailing Address: SousChef.dev, Philadelphia, PA, USA

We will respond to privacy inquiries within 30 days. If you're not satisfied with our response, you may contact your local data protection authority.

By using our app, you acknowledge that you have read and understood this Privacy Policy.