Privacy Policy

Effective date: October 13, 2026

Corwood Labs, LLC ("ChefMate," "we," or "us") operates ChefMate. This policy covers our app, website, and related services for people 13 or older in the United States.

Notice at collection · Privacy rights · Consumer Health Data Privacy Policy · Contact

What we collect — notice at collection

We collect these categories when you use related features; information may be linked to your account:

Identifiers and personal records: name, email, handle, account and authentication identifiers, IP address, sign-in information, age eligibility confirmation, settings, and contact details.
Content and visual information: recipes, drafts, photos, imported links and text, questions, answers, notes, cooking history, plans, grocery and pantry lists, comments, and support or legal correspondence.
Internet or app activity and diagnostics: device and browser information, interactions, saves, follows, blocks, request records, errors, and performance data.
Inferences: preferences and conclusions derived from your content or activity.
Sensitive personal information: account-access credentials and health or other sensitive details you include in content. See our separate Consumer Health Data Privacy Policy.

Sources include you, your device, chosen sign-in services, materials or services you import from, other users' interactions or reports, and service providers returning results or diagnostics. We may receive partner information subject to required notice and permission. The uses, recipient categories, and retention criteria below apply to each category as relevant.

How information may be used

We may use information to operate and personalize services, communicate, analyze usage, maintain safety and security, prevent abuse, handle claims, and meet legal obligations. We and permitted recipients may also use it for research, development, training and improving our or others' AI and models, analytics, marketing, advertising, measurement, referrals, and commercial partnerships.

All uses and disclosures remain subject to law, required privacy choices, and platform restrictions, including restrictions on third-party sharing and advertising, marketing, or data mining using protected health or device data.

AI features and permission

When enabled, AI features process information through third-party AI service providers and intermediaries. Before first use, the app asks your permission through an in-app sheet. Inputs may include requests, constraints, questions, recipe details, cooking context, recent exchanges, selected photos, extracted text, and source references. Checking, retry, or recovery passes may send inputs and results to additional AI providers. AI records may include account-linked requests, results, and diagnostic transcripts that may identify you.

You can decline permission or stop future AI sharing in Account settings (AI data sharing). Withdrawal does not recall earlier transfers; deletion rights still apply.

Who may receive information

The collected categories may be disclosed for the stated purposes to:

Service providers: hosting, infrastructure, authentication, storage, AI and routing, analytics, diagnostics, support, security, and professional advisers.
Commercial recipients: advertising, marketing, analytics, research, model-development, referral and other business partners, and affiliates, subject to legal and platform restrictions, required notices, permission, and choices.
Your chosen recipients: account users and recipients of content you publish, share, or export.
Legal and safety recipients: authorities, advisers, and parties to matters as legally permitted or required.
Successors: parties to mergers, acquisitions, financing, reorganizations, bankruptcy, or business-asset transfers, subject to law.

Third parties receiving app user data are required to provide the same or equal protection as this policy and applicable platform requirements. Information may be processed in the United States or other countries. We use safeguards, but no system is completely secure.

Private content is not published to other users but may be processed as described here. Anyone using the same sign-in can access the synchronized library. Public profiles, recipes, comments, and eligible cook notes may show your content, display name, and handle. A public note does not make a private recipe public. Public recipe links can be viewed without an account. Recipients may keep or redistribute copies.

Features may request camera, photo, calendar, reminder, or notification access; manage it in device settings. Exported copies follow the receiving services' policies and settings; deleting ChefMate data does not automatically remove them.

Sale, sharing, and advertising choices

In the preceding 12 months, we have not sold personal information or shared it for cross-context behavioral advertising, including information of users under 16, and do not currently do so. Future partner disclosures may qualify as sale or sharing even without payment.

Where applicable, you may opt out of sale, sharing, or targeted advertising or limit sensitive-information use and disclosure. Enable Global Privacy Control in a supporting browser to communicate an opt-out. Where legally required, it applies to that browser or device and, when identifiable, your account and associated offline sales or sharing; other legally recognized signals also apply.

Where permitted, sale or sharing involving known users under 16 requires applicable affirmative authorization. Connecticut prohibits sale and targeted advertising involving users known, or wilfully disregarded, to be ages 13–17 and restricts their processing purposes and retention.

Retention and deletion

For each category, we retain information as reasonably needed for the described purposes, then delete or de-identify it, subject to law. Duration depends on record type, account and feature needs, unresolved requests or disputes, security, and legal obligations. We maintain and use de-identified information only in de-identified form and do not attempt re-identification except as permitted by law.

Delete your account in Account → Delete account. This removes your sign-in and associated personal information, subject to lawful retention exceptions. Deleting a shared account removes its library for everyone. Limited security, legal, diagnostic, correspondence, and deletion or restore-suppression records may remain where legally permitted or required. Backup and provider deletion follows applicable deadlines and permitted extensions.

Previously de-identified or aggregated information, models or systems already improved, and others' copies are not recalled except as law requires. These exceptions do not override required deletion, including downstream health-data deletion.

Privacy rights and requests

Depending on your state and applicable law, rights may include confirming processing; knowing and accessing categories and specific information, sources, purposes, and recipients; portability; deletion; correction; consent withdrawal; opting out of sale, sharing, targeted advertising, or profiling with significant effects; limiting certain sensitive-information uses or disclosures; and freedom from unlawful discrimination for exercising rights. California residents have applicable CCPA/CPRA rights.

Email support@mychefmate.app or use Account settings (Your data). State your request and account email for account-related access, correction, or deletion. For opt-outs, specify Do Not Sell or Share My Personal Information or Opt Out of Targeted Advertising; for sensitive-information limits, specify Limit the Use of My Sensitive Personal Information. Do not send passwords.

Authorized agents may submit requests to the same email address; we may require legally permitted proof of authorization and identity. Sale/sharing opt-outs require neither identity verification nor a new account. Legal exceptions and required response deadlines apply. You can edit supported fields in the app. To appeal a denial where available, reply or email with Privacy appeal. If denied, you may contact your state attorney general.

Do Not Track

ChefMate does not currently respond to browser Do Not Track signals. Service providers may collect the technical and activity information described above. Other parties do not currently collect personal information through ChefMate over time and across other websites or services.

Children and teens

ChefMate is not directed to children under 13. We do not knowingly collect their personal information and will delete it if discovered. Report concerns to support@mychefmate.app. California registered users under 18 may request removal of their own public posts by emailing that address with their account email and links or descriptions identifying the posts. Removal does not ensure complete or comprehensive erasure.

Policy changes

We may change our practices and this policy. We post the revised policy and effective date and provide further notice or consent requests required by law.

Contact

Corwood Labs, LLC: support@mychefmate.app.