Privacy Policy
Effective October 3, 2026
Avana.ai Inc. ("ChefSense", "we", "us") runs the ChefSense website, apps, and the ChefSense connector for AI assistants. This Privacy Policy explains what personal information we collect, why we use it, who receives it, how long we keep it, and the choices you have. By using ChefSense, you agree to the practices described here.
1. Information We Collect
1.1. Account information: your name, email address, password (stored hashed), profile photo, and, if you sign in with Google, your Google account ID and avatar.
1.2. Household and diet profile: the names of people you add to your household, and the diets, allergies, and ingredient dislikes you record for yourself and for them.
1.3. Kitchen content: pantry items, shopping lists, saved and generated recipes, recipe book organization, recipe URLs you import, and the questions and answers you exchange in recipe chat.
1.4. Photos you upload: photos of your pantry, fridge, receipts, and printed recipes that you scan, and images you upload for recipes.
1.5. AI assistant connector activity: if you connect an AI assistant (see section 4), a record of each request it makes to ChefSense, described in section 4.3.
1.6. Billing information: your subscription status and transaction history. Card details are collected and held by our payment processor, Paddle, and never reach our servers.
1.7. Usage and device data: IP address, browser type, device information, pages visited, and error diagnostics, collected through server logs, cookies, and similar technologies.
2. How We Use Information
2.1. We use your information to:
- Provide ChefSense: generate and store recipes, track your pantry and shopping lists, read your scans, and answer cooking questions.
- Personalize recipes to your household's diets and preferences.
- Respond to requests from AI assistants you have connected.
- Process subscriptions and payments.
- Keep ChefSense secure and reliable: prevent abuse, enforce rate limits, and diagnose errors.
- Respond to support requests and send service messages.
- Send product updates and offers, which you can opt out of at any time.
- Comply with legal obligations.
2.2. We do not sell your personal information, and we do not use your content to train AI models.
3. AI Processing Inside ChefSense
3.1. ChefSense uses third-party AI models to generate recipes and recipe images, read scanned photos, and answer cooking questions. Depending on the model you choose in your settings, requests go to one or more of these providers: OpenAI, Google (Gemini), Anthropic (Claude), and xAI (Grok). If one provider is unavailable we may retry with another.
3.2. What we send depends on the feature:
- Recipe generation and editing: your ingredients and pantry items, your request, and the names, diets, allergies, and dislikes of the household members you are cooking for.
- Scans: the photos you upload.
- Recipe chat and cooking questions: your messages and the recipe you are asking about.
- Recipe images: a description of the dish.
3.3. We do not send your email address, password, billing details, or location to these providers. They process requests under their API terms, which do not allow them to train their models on the data we send.
4. Connecting ChefSense to AI Assistants
4.1. What a connected assistant can do. You can connect ChefSense to AI assistants such as Anthropic's Claude, OpenAI's ChatGPT and Codex, and Meta's Muse. You sign in on ChefSense's own consent screen, and the assistant never sees your password. The permissions you approve (OAuth scopes) let the assistant read and change:
- your pantry, including starting and applying pantry and receipt scans;
- your recipe book, including saving, editing, generating, and scanning recipes;
- your diet profile and your household members' diets and preferences;
- your shopping list.
A connected assistant cannot view or change your email, password, two-factor settings, or billing.
4.2. Data you share with the assistant. When an assistant reads your ChefSense data, that data is sent to the assistant's provider and becomes part of your conversation there. From that point it is handled under that provider's own terms and privacy policy, not this one. The recipients are Anthropic (Claude), OpenAI (ChatGPT and Codex), and Meta (Muse), depending on which assistant you connect. Review their policies to understand how they store and use conversations.
4.3. What ChefSense keeps about connector use.
- Audit log: for every request, the tool used, the result status, how long it took, which kind of sign-in was used, and a one-way hash (fingerprint) of the request. We do not store the request's contents or the response. We use this log to investigate problems you report and to detect abuse.
- Undo history: a copy of each item before and after an assistant changes it, so you can ask the assistant to undo the change.
- Performance telemetry: the tool name, status, and timing, tagged with a hashed account ID. It never contains request contents or responses.
4.4. Disconnecting. You can disconnect at any time from the assistant's own settings: in Claude, Settings → Connectors; in ChatGPT, the Apps or Connectors settings; in Muse, its connector settings. Disconnecting stops the assistant from making further requests. To also revoke its access on our side, email us or delete your account. If you connected Claude with an older connector token, you can revoke it in ChefSense under AI Agents. Data the assistant already received stays with its provider under their terms.
5. Who Receives Your Information
5.1. We share personal information only with the following recipients, and only as needed for the purposes in section 2:
- AI model providers that power ChefSense features: OpenAI, Google, Anthropic, and xAI (section 3).
- AI assistants you choose to connect: Anthropic, OpenAI, and Meta (section 4).
- Payment processing: Paddle, our merchant of record, which handles checkout, payment details, invoicing, and sales tax.
- Infrastructure: our cloud hosting, database, and file storage providers.
- Email delivery: the service we use to send account and service emails.
- Monitoring and analytics: Sentry (error reports, which can include your account ID and IP address), Honeycomb (performance telemetry), and Google Analytics (website usage).
- Sign-in: Google, if you choose to sign in with Google.
- Other household members: people you invite to your household can see the shared pantry, shopping lists, and recipes you share with them.
- Legal and safety: authorities or other parties when required by law or to protect the rights and safety of ChefSense and its users.
- Business transfers: a successor organization if ChefSense is merged, acquired, or sells its assets, subject to this policy.
5.2. Our service providers may use your information only to provide services to us.
6. How Long We Keep Information
6.1. We keep information only as long as needed for the purposes above:
| Information | How long we keep it |
|---|---|
| Account and profile information | Until you delete your account, then permanently deleted within 30 days |
| Recipes, recipe chat, diet profile | Until you delete them or your account, then permanently deleted within 30 days |
| Pantry and shopping lists | Until you delete them. Deleted immediately when the household is deleted, including when its owner deletes their account. |
| Photos uploaded for scans | Until you delete your account, then permanently deleted within 30 days. Photos from household scans are deleted immediately when the household is deleted. |
| AI assistant connector audit log | 12 months |
| AI assistant undo history | 30 days |
| Connector access tokens | Until they expire (one year for assistant sign-ins), you revoke them, or you delete your account |
| Performance telemetry | 60 days |
| Error reports | 90 days |
| Server logs | 14 days |
| Billing and transaction records | As long as tax and accounting law requires (generally 7 years). Your name and email are removed from our billing records when you delete your account. |
| Database backups | Up to 30 days, after which backups are overwritten |
6.2. When you delete your account, you lose access immediately, and we permanently delete its data within 30 days. Copies in backups are overwritten on the backup schedule above. If you authored content that we publish for everyone, such as blog articles, we remove your name and contact details from your account and keep the content.
7. Data Security
7.1. We protect personal information with encryption in transit, hashed passwords, access controls, and OAuth permissions for connected assistants. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your Choices and Rights
8.1. You can review and update your account, household, and diet information at any time in ChefSense.
8.2. You can delete individual recipes, pantry items, and shopping list items, or delete your whole account from your profile settings.
8.3. You can disconnect AI assistants at any time (section 4.4).
8.4. You can opt out of promotional emails by following the unsubscribe link in those messages.
8.5. Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to certain processing. To make a request, email us at the address below. We will respond within 30 days.
9. International Transfers
9.1. ChefSense is based in Canada, and our service providers may process information in the United States and other countries. When information is transferred, we rely on our providers' contractual commitments to protect it.
10. Children's Privacy
10.1. ChefSense accounts are not intended for anyone under 18. We do not knowingly collect personal information from children. You may add children to your household to record their diets and preferences, and you are responsible for that information. If we learn that a child has created an account, we will delete it.
11. Changes to This Policy
11.1. We may update this Privacy Policy to reflect changes in our services or the law. We will post the updated policy here with a new effective date and, for material changes, notify you by email or in the app.
12. Contact Us
Avana.ai Inc., Saskatchewan, Canada. For questions or privacy requests, contact us at support@chefsense.ai.
This policy is subject to our Terms of Service.