Privacy Policy

When you create an account we collect: your email address, a chosenusername and display name, an optional profile photo, and an optional short bio. Authentication is handled by Supabase on our behalf.

When you use the app we store: the recipes you create or save, your meal plans, your pantry contents, your shopping lists, your likes / comments / follows, and your chosen language. We also store anonymous device and usage signals (app version, last-active timestamp) to triage bugs.

We do notcollect: your contacts, your physical location, your microphone or camera (except when you tap to upload a photo), your health or fitness data, your financial data, or any data Apple or Google classify as "sensitive" without first asking your explicit consent.

• To run the app — saving your recipes, plans, pantry, etc.
• To translate recipe content into your selected language, on first view.
• To send transactional emails (welcome, password reset, email verification).
• To improve the product (aggregate analytics, never tied to a single user).

We do not sell your personal data. We do not run third-party ad networks inside the app. We do not profile you for advertising.

The only third parties that see any of your data are:

• Supabase — our database + authentication provider. Hosted in ap-south-1 (Mumbai). Data stays in India.
• Anthropic — used only for on-demand recipe translation. We send the recipe text (no account identifiers); the response is cached in our database so the same translation is not requested twice.
• Vercel — hosts this website. Standard request logs only.
• Microsoft 365 — sends transactional emails on our behalf.
• Grocery vendor deep links— when you tap "Order" on a shopping-list item, your phone opens that vendor's website with the ingredient name pre-filled. We do not share account data with the vendor; the search query is the only thing they see.

You can, at any time:

• Access all data we hold on you by signing in and viewing your profile, recipes, plans, pantry, etc.
• Export your data — write to hello@tasteitafter.com and we will send you a JSON archive within 30 days.
• Correct any of it by editing the relevant fields in the app.
• Delete your account and everything tied to it via the Delete account page, or by writing to us.
• Withdraw consent — you can stop using the app at any time. Deleting the account permanently removes all your data within 30 days.

We keep your data for as long as your account is active. When you delete your account, everything tied to it (profile, recipes, meal plans, pantry, translations, comments, likes) is permanently deleted within 30 days from our active database and within 90 days from encrypted backups.

DrChef is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, write to hello@tasteitafter.com and we will delete it.

We use industry-standard security: TLS 1.2+ on all connections, encrypted password hashing, row-level access control in the database, and least-privilege service credentials. No system is perfectly secure, but if we ever discover a breach affecting your data we will tell you within 72 hours.

We will update this policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be notified in-app before they take effect.

Questions about this policy or your data? Write to hello@tasteitafter.com. For DPDP-specific requests (data principal rights), please use the same email with subject line starting "DPDP".