Privacy Policy

Last updated: March 2026

Welcome to OltreChef ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the OltreChef mobile application.

1. Introduction

OltreChef ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").

If you have any questions about this policy, please contact us at omar.al.qweider@oltrelabs.com.

2. Information We Collect

2.1 Information You Provide

Account Information: Email address, display name (if provided)
Authentication: Credentials for Google Sign-In
User Preferences: Dietary restrictions, cooking preferences, pantry basics, health goals
Health & Nutrition Data: Calorie targets, macro goals, dietary restrictions, and health objectives you enter
Photos: Images you capture or upload for ingredient scanning. Photos are processed by AI to identify ingredients and are not permanently stored beyond what is needed to generate recipe suggestions
Meal Plans: Meals you plan, recipes you save, and cooking history
Chat Messages: Messages you send to the AI assistant for recipe suggestions or cooking advice

2.2 Automatically Collected Information

Device Information: Device type, operating system, unique device identifiers
Usage Information: App features used, time spent in app, interaction patterns
Location Data: General location (if permission granted) for localised recipe suggestions
Analytics Data: App crashes, performance metrics, feature usage statistics
FCM Token: A device-specific token used to deliver push notifications, stored in Firebase and updated on device change or app reinstall
Device Timezone: Stored to schedule meal plan notifications at the correct local time
Notification Preferences: Whether you have enabled or disabled specific notification types
Notification Error Logs: If notification scheduling fails, error details (error type, device timezone, timestamp) are logged to your account for debugging and cleared periodically

2.3 Third-Party Information

Google Sign-In: Basic profile information (name, email) when you sign in with Google
Firebase Services: Authentication, database, analytics, and storage data

3. How We Use Your Information

We use collected information to:

Provide Services: Process ingredient scans, suggest recipes, track cooking history, schedule meal notifications
AI Processing: Send your ingredient descriptions, chat messages, and food photos to Google Gemini AI to generate recipe suggestions and responses
Improve App: Analyse usage patterns, fix bugs, enhance features
Personalise Experience: Customise recipe suggestions based on your preferences and health goals
Communicate: Send meal plan reminders, push notifications, updates, and support responses
Security: Detect and prevent fraud, abuse, or security issues
Legal Compliance: Comply with legal obligations and enforce our Terms of Service

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties.

4.2 Service Providers

We share information with trusted service providers who assist in delivering the App:

Firebase (Google): Authentication, Firestore database, analytics, and cloud storage
Google Gemini AI: Processes your recipe requests, chat messages, and ingredient descriptions to generate AI-powered responses. Queries are sent to Google's API and are subject to Google's Privacy Policy
Google Cloud: AI/ML processing for ingredient recognition and image analysis
Firebase Analytics: App usage analytics and crash reporting

These providers are contractually obligated to protect your information and use it only for specified purposes.

4.3 AI Processing Notice

Important: Your ingredient descriptions, chat messages, and food photos are sent to Google Gemini AI for processing in order to generate recipes and responses. We do not use your personal data to train AI models. AI-processed data is subject to Google's data retention and privacy policies. See Google's Privacy Policy for details.

4.4 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights, prevent fraud, or comply with legal obligations.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity. You will be notified of any such transfer.

5. Data Storage and Security

Data is stored securely using Firebase (Google Cloud Platform), encrypted in transit and at rest
We use secure authentication (Firebase Auth), HTTPS/TLS, and Firebase App Check to prevent unauthorised API access
We retain your data as long as your account is active or as needed for legal purposes
While we implement robust security measures, no method of transmission or storage is 100% secure

6. Your Rights and Choices

6.1 Access and Correction

You can access and update your account information, preferences, dietary restrictions, and health goals through the App at any time.

6.2 Data Deletion

You can delete your account through App Settings. Account deletion removes your personal data within 30 days. Some information may be retained for legal compliance. To request data deletion, contact us at omar.al.qweider@oltrelabs.com.

6.3 Opt-Out Options

Notifications: Disable push notifications in device or App settings
Location: Disable location permissions in device settings at any time
Camera: Disable camera permissions in device settings at any time

6.4 UK GDPR Rights (UK Users)

Since OltreChef is operated from the United Kingdom, UK residents have the following rights under UK GDPR: right to access, rectification, erasure, restriction of processing, data portability, and the right to object. To exercise any of these rights, contact us at omar.al.qweider@oltrelabs.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

6.5 EU GDPR Rights (EU Users)

If you are in the European Union, you have the same rights as listed in Section 6.4 above. Contact us at omar.al.qweider@oltrelabs.com.

7. Health and Dietary Data

Health and dietary data is used solely to personalise recipe suggestions and meal planning
It is never shared with third parties for commercial purposes
You may delete this data at any time through App Settings → Profile
Information provided in the App does not constitute medical or nutritional advice — always consult a healthcare professional

8. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately at omar.al.qweider@oltrelabs.com.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where Google's servers are located. By using the App, you consent to such transfers.

10. Third-Party Services

Google Sign-In, Firebase, Gemini AI, Google Cloud — see Google Privacy Policy
External Recipe Links — we are not responsible for the privacy practices of external sites

11. Analytics and Advertising

We use Firebase Analytics to understand app usage and improve features. Analytics data is anonymised and aggregated where possible. The App does not currently display third-party advertisements and we do not share your data for advertising purposes.

12. Data Retention

Active Accounts: Data retained while your account is active
Deleted Accounts: Most data deleted within 30 days; some retained for legal compliance
Legal Requirements: Some data may be retained longer if required by applicable law

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified through the App or via email. Continued use of the App after changes constitutes acceptance of the updated policy.

14. California Privacy Rights (CCPA)

California residents have the right to know about data collection, request deletion, opt out of sale (we do not sell your data), and non-discrimination for exercising privacy rights. Contact us at omar.al.qweider@oltrelabs.com.

15. Contact

For questions, concerns, or requests regarding this Privacy Policy:
omar.al.qweider@oltrelabs.com — we aim to respond within 30 days.

16. Consent

By using the App, you consent to this Privacy Policy. If you do not agree, please do not use the App.