Privacy Policy

Last updated: March 9, 2026

ChefUp ("we", "our", "us") is operated by Headwater Labs. This Privacy Policy explains how we collect, use, and protect your personal information when you use the ChefUp mobile application.

1. Information We Collect

Account Information

When you create an account, we collect your email address, username, and password (securely managed by AWS Cognito). If you sign in via Google or Apple, we receive your name and email from those providers.

Profile Information

You may optionally provide dietary requirements, allergies, and family member profiles. Profile photos are stored as encrypted data associated with your account.

Pantry & Recipe Data

We store the ingredients you add to your pantry, expiry dates, and recipes you generate or save. This data is used to provide the core functionality of the app.

Usage Data

We collect anonymised analytics via Firebase Analytics, including screen views, feature usage, and app performance data. This helps us improve the app experience.

Crash Reports

We use Sentry to collect crash reports and error logs. These may include device type, OS version, and app state at the time of the error. No personal data is included in crash reports.

Camera & Microphone

With your permission, the app accesses your camera for ingredient scanning (OCR and barcode) and your microphone for voice input. Images and audio are processed in real-time and are not stored on our servers.

2. How We Use Your Information

3. Data Sharing

We do not sell your personal data. We share data only with:

4. Data Storage & Security

Your data is stored on AWS servers in the EU (eu-west-2 region). We use industry-standard encryption for data in transit (TLS/HTTPS) and secure authentication via AWS Cognito. Passwords are never stored in plain text.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Anonymised analytics data may be retained indefinitely.

6. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

To exercise any of these rights, contact us at hello@chefup.io.

7. Children's Privacy

ChefUp is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us.

8. Push Notifications

With your permission, we send push notifications for expiry reminders, cooking timers, and occasional engagement prompts. You can disable these at any time in your device settings or within the app.

9. Third-Party Links

The app may contain links to external websites. We are not responsible for the privacy practices of third-party sites.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of ChefUp after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Email: hello@chefup.io
Website: https://chefup.io