Privacy Policy

Last updated: 8 October 2026  ·  Olivier Chicoineau

1. Who we are

SoChef is a cooking application developed and operated by Olivier Chicoineau, a natural person operating the service under the trading name “SoChef”, in Spain. For any question about your data, contact us at support@sochef.app.

• Publisher: Olivier Chicoineau, a natural person operating the service under the trading name “SoChef”
• Address: Avenida 327, 08860 Castelldefels, España
• NIE: Y1704535L
• GDPR data controller: Olivier Chicoineau — support@sochef.app
• General contact: contact@sochef.app
• Support and data: support@sochef.app
• Country: Spain
• Website: sochef.app

2. Data we collect

We collect the following data when you use SoChef:

Account data

• Email address (required to create an account)
• Name or nickname (provided at sign-up or via Google OAuth)
• Profile picture (if you sign in with Google)

Usage data

• Recipes created, cooked and added to favourites
• Cooking history and scores
• Shopping lists and weekly planning
• Fridge contents entered manually
• Community posts (shared recipes)
• Participation in weekly challenges

Preferences and settings

• Selected country and language
• Dietary restrictions of family members
• Preferred supermarket for shopping

Technical data

• Photos sent for recipe scanning (processed by AI, not retained)
• Anonymised session logs for debugging purposes

3. How we use your data

• Authentication: secure creation and management of your account
• App features: displaying your recipes, planning, shopping lists
• Personalisation: recipe suggestions adapted to your preferences and dietary restrictions
• AI generation: sending scan photos and fridge contents to third-party APIs to generate recipes
• Community: sharing your recipes with other users (with your explicit agreement)
• Weekly challenges: tracking your progress and awarding rewards

4. Sharing with third parties

We share certain data with the following technical providers, strictly for the operation of the application:

Anthropic (Claude API)

• Purpose: analysing recipe scan photos, generating recipes from the fridge
• Data transmitted: photo contents, recipe text
• Policy: anthropic.com/privacy

OpenAI

• Purpose: generating images for recipes (gpt-image-1 model)
• Data transmitted: recipe titles and descriptions for visual generation
• Policy: openai.com/privacy

Supabase

• Purpose: database hosting and authentication
• Location: European Union (Frankfurt, Germany)
• Policy: supabase.com/privacy

5. Retention period

• Your data is kept for as long as your account is active
• If your account is deleted, all personal data is erased (immediately from the application, within 30 days for a request by email)
• Exception — catalogue content: the recipes you have published to the SoChef community catalogue, together with their AI-generated illustrations, are kept in anonymised form (with no link to your account or your identity, under the attribution “SoChef”) in order to preserve the shared catalogue. Your private or unpublished recipes are deleted.
• Exception: anonymised technical logs kept for a maximum of 12 months (GDPR legal basis art. 17.3.b)

6. Your rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Access: obtain a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: request the deletion of your account and your data
• Portability: receive your data in a structured format
• Objection: object to certain processing
• Restriction: request the restriction of processing

To exercise these rights, contact us at support@sochef.app. We will reply within 30 days.

You may also lodge a complaint with your national supervisory authority (CNIL in France, AEPD in Spain).

7. Security

• All communications are encrypted via HTTPS (TLS 1.2+)
• Data in the database is encrypted at rest (Supabase)
• Passwords are never stored in plain text (managed by Supabase Auth)
• No external security audit has been carried out to date

8. Cookies and trackers

• We only use session cookies necessary for authentication to work
• No marketing or advertising tracking cookies
• No Google Analytics, Facebook Pixel or equivalent integration
• On Android, the application uses local storage (localStorage) for preferences

9. Protection of minors

SoChef is not intended for people under 13. We do not knowingly collect personal data from children. If you believe a child under 13 has created an account, contact us immediately at support@sochef.app.

10. Social publishing tools

SoChef publishes its own content (recipe videos and carousels) to its own YouTube (@SoChefapp), TikTok (@sochef.app) and Instagram (@sochef.app) accounts through those platforms' official APIs: YouTube API Services (YouTube Data API and YouTube Analytics API), TikTok's Content Posting API and Login Kit, and Meta's Instagram API. These tools are connected to SoChef's accounts only: they are not offered to app users, and no data about app users is ever sent to these platforms.

What data we access

• From our own accounts: the account's identifier, name and picture, and the publishing permissions (access tokens).
• From our own posts: their publishing status and aggregate statistics (views, average view duration, likes, comments, saves, shares, profile visits, subscribers gained).
• On Instagram, the comments and messages our account receives (username and text), so that we can reply.

We do not access data about the people who view our posts or about other accounts, apart from those comments and messages.

Why: to publish our content, check that it was published correctly, measure its results internally and reply to our community.

Where and for how long: on our server in the European Union (Hetzner, Germany). Access tokens are kept in a file that only the publishing service can read, and are never displayed. YouTube statistics are not stored with the posts: they are read for each internal weekly report and deleted from saved reports after 30 days. TikTok and Instagram statistics are kept with each post to compare results. Of Instagram comments and messages we keep the last 500 interactions at most.

How to revoke access: SoChef's access to an account can be revoked at any time; the stored tokens then stop working.

• YouTube / Google: security.google.com/settings/security/permissions
• TikTok: in the app, Profile → Settings and privacy → Security and permissions → App permissions
• Instagram / Meta: in Meta Business Suite, Settings → System users, or in Facebook settings → Business integrations

By using YouTube API Services, SoChef is bound by the YouTube Terms of Service; data processed by Google is handled under the Google Privacy Policy. See also the TikTok Privacy Policy and the Meta Privacy Policy.

11. Changes to this policy

We may update this privacy policy to reflect changes in our practices or in regulations. In the event of a substantial change, we will notify you through the application or by email. The “last updated” date at the top of the page will always be kept current.

Continued use of SoChef after notification constitutes acceptance of the changes.