Privacy Policy

Vegan Co-chef Ltd ("we," "us") operates vegancochef.com. This policy explains what data we collect, why, and the rights you have under UK and EU data protection law. If anything here is unclear, email privacy@vegancochef.com.

Our anti-diet-culture commitment

We do not collect calorie counts, macronutrient targets, body weight, BMI, or any related body-metric data — ever. Vegan Co-chef is built to help you cook, not to track your body.

What we collect

• Account data: name and email address when you create an account.
• Payment data: billing details handled directly by Stripe; we never see or store your card numbers.
• Cooking data: your pantry items, saved recipes, and food preferences — used only to power the app for you.
• Technical data: IP address, browser type, and pages visited (only if you accept analytics cookies — see below).

Cookies and analytics

We use two analytics tools. Both can be reviewed and changed at any time via the Cookie Settings link in the page footer.

• Google Analytics 4 — loads only after you click "Accept" on our cookie banner. It uses cookies to measure how visitors use the site (pages viewed, approximate location, device type). If you decline, no Google Analytics scripts load and no GA cookies are set.
• Vercel Analytics — first-party, cookieless page-view counting. It does not use cookies and does not track you across sites, so it runs without consent.

To withdraw or change your choice later, click Cookie Settings in the footer of any page.

Who else processes your data

We use trusted third parties to run the service. They process data under contract and only as needed:

• Google Firebase — authentication and database hosting.
• Stripe — payment processing.
• Resend — transactional email (e.g. sign-up confirmations).
• Vercel — website hosting and cookieless analytics.
• Anthropic — the AI that helps generate recipes from your pantry. Your pantry items are sent to generate recipes; we do not send your name, email, or payment details.
• Google Analytics — usage analytics, only with your consent.

We do not sell your personal data.

Your rights (UK GDPR)

You have the right to:

• Access a copy of the personal data we hold about you.
• Correct any inaccurate data.
• Delete your account and associated data ("right to be forgotten").
• Object to processing, including analytics and marketing.
• Withdraw consent for cookies at any time via Cookie Settings.
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) if you believe we have mishandled your data.

To exercise any of these rights, email privacy@vegancochef.com. We respond within 30 days.

How long we keep your data

We keep your account data while your account is active. If you cancel or delete your account, we remove your personal data within 30 days, except where law requires us to retain billing records (typically 6 years for UK tax purposes).

Security

Connections to vegancochef.com are encrypted with TLS. Account data is stored in Firebase with access controlled by role. No system is perfectly secure — if we ever discover a breach affecting your data, we will notify you and the ICO within 72 hours as required by law.

Changes to this policy

If we make material changes, we will update the "Last updated" date at the top of this page and, where required, notify you by email.