Privacy policy
ChefMaster Privacy Policy
Effective date: October 3, 2026. Last updated: October 3, 2026.
This is the public privacy policy for the ChefMaster mobile application on iOS and Android, published by The Trendsetter Agency LLC (“we,” “us”). It is written for people using the app and for Apple App Store and Google Play review.
ChefMaster is a personal kitchen helper. You photograph food you already have, and the app asks the AI account you connect to suggest recipes. It is not a doctor, dietitian, grocery store, or medical device.
1. Who to contact
- Developer: The Trendsetter Agency LLC
- App: ChefMaster
- Website: https://www.thetrendsetteragency.com/
- Privacy policy URL: https://www.thetrendsetteragency.com/apps/chefmaster/privacy/
- Support URL: https://www.thetrendsetteragency.com/apps/chefmaster/support/
- Email: MichelleTrendsetters@gmail.com and support@thetrendsetteragency.com
- Phone: (248) 321-9121
- Appointments: calendly.com/michelletrendsetters/30min
2. Information the app handles
| Data | Do we collect it? | Linked to you? | Used to track you? | Why |
|---|---|---|---|---|
| Email address and password | Yes. Password is stored only as a bcrypt hash. | Yes | No | Create and sign in to your account. |
| Name, if you enter one | Optional | Yes | No | Label saved recipes, such as “Alex’s ChefMaster Recipes.” |
| Diet, allergies, and optional health conditions | Only if you select them | Yes | No | Cooking constraints. Not a medical record and not used to diagnose or treat you. |
| Photos of your fridge, pantry, spices, or extras | Sent when you take or choose a photo. We do not keep the image file. | Sent with the recipe request | No | So your AI provider can see what you have. |
| Recipes, meal preferences, and pantry text | Yes, when you generate or save them | Yes | No | Show, save, and share recipes you asked for. |
| AI sign-in token for the provider you connect | Yes, encrypted | Yes | No | Call that provider as you. We never see that provider’s password. |
| Precise location, contacts, microphone, advertising ID, payment card | No | — | No | Not used by this app. |
3. Camera and photo library
iOS and Android ask before the app uses the camera or photo library. The permission text in the app is: “ChefMaster uses the camera to photograph food in your fridge, freezer, and pantry so it can suggest a recipe,” and “ChefMaster reads photos you choose of your kitchen so it can suggest a recipe from what you have.” You can say no. The app cannot invent a photo recipe without at least one picture.
Photos are resized on your phone and sent over HTTPS with the recipe request. ChefMaster does not build a photo library of your kitchen. The image is not written into our database. The AI provider you chose receives it under that provider’s own terms, except the free model, which never receives photos.
4. Health and diet information
You may pick diet styles (including vegetarian, vegan, pescatarian, halal, kosher, low carb, low sugar, gluten free), allergies (including peanuts, tree nuts, milk, eggs, soy, wheat, shellfish, fish, sesame), and conditions to cook around (including diabetes, high blood pressure, kidney disease, celiac, heart disease). You can leave every group on “none.”
These choices are cooking limits only. Recipe text in the app says it is not medical advice. We do not use this information for advertising, insurance, credit, or sale. If you generate a recipe, the limits you picked are included in the request to your AI provider so the recipe can respect them.
5. AI providers
You bring the model. The phone does not hold an API key. If you connect an account, the sign-in token is encrypted on our server with AES-256-GCM. Calls go to the provider you pick:
- Google Gemini, if you connect Google. Photos can be sent. Google Privacy Policy.
- OpenAI ChatGPT, if you connect ChatGPT. Photos can be sent. Recipe requests to the OpenAI Responses API are sent with storage turned off on our side. OpenAI Privacy Policy.
- Anthropic Claude, if that provider is switched on for your account. Photos can be sent. Anthropic Privacy Policy.
- Free model: Llama 3.3, hosted by OVHcloud AI Endpoints. Text only. No photo. No account on that provider. It is rate limited. OVHcloud Privacy Policy.
We do not use your photos, recipes, or keys to train a ChefMaster model. Provider charges, if any, are between you and that provider.
6. What we do not do
- We do not sell or rent personal information.
- We do not show ads and we do not use advertising identifiers.
- We do not track you across other companies’ apps or websites.
- We do not use Apple or Google account login for the ChefMaster account itself. The account is email and password. “Connect with Google” and “Continue with ChatGPT” are only for the AI that writes the recipe.
- Grocery ordering is not in the app. There is no cart and no store login.
7. Where data is stored
- On your phone: recipes you tap “Save to my phone,” plus the food rules you picked, using the device’s local storage. Uninstalling the app or clearing its data removes that copy.
- On our server: account, hashed password, optional name, diet and condition choices you save to the account, encrypted AI tokens, and recipes the server creates for you. Hosted with Railway and PostgreSQL. Railway privacy policy.
- Email: if you choose email delivery and a mail key is configured, a recipe can be sent through Resend to the address you typed. Resend privacy policy. Otherwise share uses your phone’s own share sheet.
All traffic between the app and our server uses HTTPS. We keep account data while the account exists. We do not keep a separate photo archive.
8. Deletion
In the app, open Settings and tap Delete account. That deletes the user and the related account data stored on our server, including pantry text, recipes, and encrypted AI tokens. It cannot be undone.
You can also email MichelleTrendsetters@gmail.com or support@thetrendsetteragency.com from the account email and ask us to delete it. We will delete the server account. Recipes saved only on the phone stay on the phone until you remove them or delete the app.
A public deletion note for all Trendsetter apps is also at thetrendsetteragency.com/data-deletion.
9. Your choices and rights
You can decline the camera, skip any photo, leave diet and health questions blank, sign out, and delete the account.
California (CCPA/CPRA): you can ask what we collected, ask us to delete it, and ask us to correct it. We do not sell or share personal information for cross-context behavioral advertising. We will not discriminate against you for asking.
EEA, UK, and similar laws (GDPR): you can ask for access, correction, deletion, a copy, or a limit on processing, and you can object. The legal bases we rely on are: performing the account you asked us to create, the steps you request (making a recipe), and our legitimate interest in keeping the service secure. Health notes are used only because you chose them as cooking limits.
To use any of these rights, email us. You may also complain to your local data protection authority.
10. Children
ChefMaster is not directed at children under 13, and we do not knowingly create accounts for them. The store age rating is 4+ / Everyone because the content is cooking, not because we want children’s accounts. If you believe a child under 13 gave us personal information, email us and we will delete it.
11. International transfers
We are in the United States. The app, Railway, and the AI providers above may process information in the United States and other countries where those providers operate. By creating an account you understand the information will be processed there.
12. Security
We use HTTPS, bcrypt password hashes, and AES-256-GCM for connected AI tokens. No method of sending data is perfectly secure. Do not use ChefMaster for emergency medical decisions.
13. Changes
If this policy changes, we will update the date at the top of this page. The URL stays the same so the App Store and Play Console listing can keep pointing here. Continued use after the update means you accept the new policy for new activity. If a change is about how we use health information, we will not expand that use without asking you in the app.
14. Store disclosure summary
Use this page as the privacy policy URL in App Store Connect and Google Play Console.
- Apple App Privacy: Contact Info (email, optional name), Health (optional conditions), User Content (photos and recipes). All linked to the user. None used for tracking. Photos are not kept by us.
- Google Play Data safety: data is encrypted in transit, users can request deletion, data is not sold. Collected: email, optional name, optional health info, photos (processed, shared with the user’s AI provider, not stored by us), app content you create (recipes and food rules).
- Permissions: Camera, and photo library / read images. No location, contacts, microphone, or tracking permission.
- Bundle id / package: com.trendsetters.chefmaster
- Export: standard HTTPS only. The app does not use non-exempt encryption of its own.