Privacy policy

In short

• Your recipes and plans are yours. We never sell, share or publish them, and we never use them to train AI models.
• We collect only what we need to run Grammi Chef: your account, what you create in it, and the messages you send us.
• No advertising, no advertising cookies, no tracking across websites.

Who is responsible for your data

The data controller is the publisher named in the legal notice. For any question about your data, write to us from the contact page.

What we collect and why

Your account. When you sign in with Google, we receive your name, your email address and a Google account identifier. We use them to create your account, sign you in and write to you about your account. Legal basis: performing our contract with you.

What you create. Recipes, events, meal plans, ingredients, suppliers, grocery lists and notes. We store them only to show them to you and to do the calculations you ask for (scaling, conversions, grocery totals). Legal basis: performing our contract with you.

Your preferences. The interface language you choose, kept in a cookie.

Messages you send us. Your name, email address and message when you use the contact form, used only to answer you. Legal basis: our legitimate interest in answering you.

Technical logs. Our hosting provider records technical data (IP address, browser, date and time of requests) to keep the service secure and working. Legal basis: our legitimate interest in security.

What we never do

• Sell, rent or share your data with advertisers or data brokers.
• Publish your recipes or show them to other users.
• Use your recipes or any of your content to train artificial-intelligence models.
• Look at your content, except when you ask us to help with a problem.

Cookies

We only use cookies that are needed for the service: the session cookie that keeps you signed in, and the cookie that remembers your language. No consent banner is needed for these, and we use no advertising or analytics cookies.

Who processes data for us

We rely on a few providers, each bound by a data-processing agreement and allowed to use the data only to provide their service to us:

• Supabase — database and sign-in.
• Vercel — hosting of the website and the app.
• Google — sign-in with your Google account.
• Resend — delivery of contact-form messages to us.

Your kitchen — your recipes, events, ingredients and suppliers — is stored in the European Union (Ireland). Some of the providers above may process data outside it; where they do, transfers are covered by the European Commission's standard contractual clauses or an adequacy decision.

How long we keep it

• Your account and content: as long as your account exists. Deleting your account removes it and everything in it straight away; backups follow within 30 days.
• Contact messages: as long as needed to answer you, and at most three years.
• Technical logs: a few weeks at most.

Your rights

Under the GDPR you can access your data, correct it, delete it, receive a copy in a reusable format, restrict or object to its use. Two of these you do yourself, from Your data in the app: export everything in this kitchen as a readable page or as a full JSON file, and delete your account and everything in it for good. For anything else, write to us from the contact page and we answer within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL (www.cnil.fr) or with the data-protection authority of your country.

Security

You sign in with Google, so we never store a password. Data is encrypted in transit and at rest, and every request is checked against your account so no one else can read your data.

Children

Grammi Chef is a professional tool and is not meant for children under 16.

Changes

If we change this policy, we update the date at the top of this page and, for significant changes, tell you by email or in the app.