Consumer Health Data Privacy Policy
The short version
- Your household's allergies, diets and notes stay on your iPhone.
- With the AI on, they ride along with each request so the chef doesn't put peanuts in Grandma's dinner. Our server passes them on and forgets them.
- Never sold, never used for ads, and seen only by the two services that do the work (Cloudflare and OpenAI).
- To stop sending them, turn the AI off. To delete them, delete them from the People card. Questions? Email us.
This page adds to our privacy policy for laws such as Washington's My Health My Data Act. It explains how Heartless Chef handles information that could say something about someone's health.
What health information the app handles
- Allergies on your People cards, and how severe each one is.
- Diets on your People cards (for example vegetarian or gluten-free).
- Notes on your People cards, which can describe a need for a while (for example soft foods after dental work).
- Anything you tell the chef in a message that says something about health.
The chef's memory doesn't keep health details. The health score on a recipe describes the recipe's nutrition, not you, and is worked out on your iPhone.
Where it comes from
Only from you: what you type or say into the app. We don't get it from anyone else, and we don't infer it from other information.
When you add someone else's allergies, diets or notes, please do it with their OK. Their names are never sent.
How it's used
Everything above is stored only on your iPhone. If you've agreed to use the AI features, the app sends the allergies, diets and current notes of the people you mark “Eats Here Every Day” with each AI request, so the chef can leave out what they can't eat and warn about allergens. It's used for nothing else.
Nothing is sent before you agree, and nothing is sent after you turn the AI off.
Who receives it
We don't share it with third parties, and we don't sell it. Two service providers handle it on our behalf, under their data processing terms:
- Cloudflare runs our server, which passes each request on and doesn't store it.
- OpenAI writes the chef's reply. It doesn't use the data to train its models, and may keep it for up to 30 days to monitor for abuse.
Your rights
- See it. Everything the app holds is on your People cards and in your chats. Our server keeps none of it. Email us and we'll confirm that, and tell you who it has gone to.
- Delete it. Edit or delete a People card, or delete the app. Copies with OpenAI are deleted within 30 days.
- Withdraw consent. Turn off Settings → AI & Privacy → Use AI Features. Nothing is sent from then on.
- Ask us. Email support@heartlesschef.com. We answer within 45 days.
- Appeal. If we turn down a request, reply to our answer and ask us to look again. We'll answer within 45 days. If you're not satisfied, you can contact your state's attorney general (in Washington: atg.wa.gov/file-complaint).
Changes
If we change what the app collects or who receives it, we'll update this page and its effective date.