Privacy Policy

Last updated: November 1, 2026

This policy explains what personal information Cheffr collects, why, and how we protect it. Cheffr follows Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information we collect

• All users: name, email address, password (stored encrypted by our login provider), phone number (optional), city, and your account type.
• Customers: food preferences, allergies and notes you choose to add.
• Cooks: profile photo, cuisines and specialties, availability, hourly rate, description, plan and billing choice, referral code.
• Cook verification documents: police check, diplomas or certificates, professional reference letter, other supporting documents, work history, and the names and phone numbers of references.
• Payments: processed by Stripe. We receive limited information such as your email, plan, payment status and the last digits of your card. We never see or store your full card number.
• Technical information: basic information your browser sends, such as device type and pages visited, used to keep the website secure and working.

2. How we use it

• To create and manage your account and log you in.
• To show Cook profiles to customers (only approved Cooks, and only their first name, photo, city, specialties, rate, description, rating and reviews).
• To verify Cooks for safety, including reviewing documents and calling references.
• To process subscriptions, bookings, referral discounts and rewards.
• To contact you about your account, bookings, and important changes.
• To prevent fraud, enforce our Terms of Service and meet legal obligations.

We do not sell your personal information.

3. Police checks and documents

Verification documents are stored in a private storage area. They are never shown on the website. They can be seen only by the Cook who uploaded them and by authorized Cheffr staff for verification. We keep them while your Cook account is active and delete them within 90 days after your account is closed, unless we must keep them longer for legal reasons or an open safety investigation.

4. Who we share information with

• Service providers that help us run Cheffr: Supabase (database, login and file storage), Netlify (website hosting), Stripe (payments) and Google (email). They may store data outside Canada, including in the United States, where it may be accessible to authorities under local law.
• Other users: when you request or accept a booking, we may share the contact details needed to complete it.
• Authorities: when required by law, or when needed to protect someone's safety.
• A buyer or successor if Cheffr is sold or merged, under the same protections.

5. How long we keep information

We keep your information while your account is active and for as long as needed for the purposes above, for example to keep payment records required by tax law. You can ask us to delete your account at any time.

6. Your rights

You can access and update most of your information on your account page. You can also ask us to give you a copy of your information, correct it, delete it, or withdraw your consent (which may mean we can no longer provide the service). Email hello.cheffr@gmail.com. We will reply within 30 days. If you are not satisfied, you can contact the Office of the Privacy Commissioner of Canada.

7. Security

We use encrypted connections (HTTPS), access controls so users can only see their own private data, and private storage for documents. No system is 100% secure, so please use a strong password and keep it private.

8. Cookies and storage

Cheffr uses your browser's storage to keep you logged in. We do not use advertising cookies.

9. Children

Cheffr is for adults 18 and over. We do not knowingly collect information from children.

10. Changes and contact

We may update this policy and will post the new date above. Privacy questions: hello.cheffr@gmail.com, Cheffr, Ottawa, Ontario, Canada.