Privacy Policy

1. Introduction

Welcome to Chef Cecil and Cecil Lists ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (www.chefcecil.com), the Chef Cecil web application, and the Cecil Lists mobile application available on iOS and Android.

By using Chef Cecil, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when you:

• Create an account (name, email address, password)
• Sign in with third-party services (Google, Facebook)
• Upload recipes, images, or documents
• Post comments or interact with other users
• Subscribe to our services or newsletters
• Contact us for support

2.2 Automatically Collected Information

When you access our services, we automatically collect:

• Device information (browser type, operating system, device identifiers)
• Usage data (pages visited, time spent, features used)
• IP address and general location data
• Cookies and similar tracking technologies

2.3 Information from Third Parties

If you sign in using Google or Facebook OAuth, we receive your name, email address, and profile picture from these services. We only request the minimum permissions necessary for authentication.

3. How We Use Your Information

We use your information to:

• Provide Services: Create and manage your account, process recipes, enable OCR functionality
• Improve Experience: Personalize content, remember preferences, provide recommendations
• Communication: Send service updates, respond to inquiries, deliver newsletters (with your consent)
• Security: Detect fraud, prevent abuse, protect against security threats
• Analytics: Understand usage patterns, improve our services, develop new features
• Legal Compliance: Comply with applicable laws, regulations, and legal processes

4. How We Share Your Information

We do NOT sell your personal information. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share specific information
• Service Providers: With trusted third-party vendors who assist in operating our services (hosting, analytics, email delivery)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Public Content: Recipes you choose to make public are visible to other users

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure password hashing using bcrypt
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Rate limiting and DDoS protection

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications
• Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, please contact us at privacy@chefcecil.com.

7. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and keep you logged in
• Remember your preferences and settings
• Analyze site traffic and usage patterns
• Provide personalized content and recommendations

You can control cookies through your browser settings. Note that disabling cookies may limit some functionality.

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are legally required to retain it.

9. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Third-Party Services

Our services may contain links to third-party websites or integrate with third-party services (Google OAuth, Facebook Login, Stripe payments). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy with a new "Last Updated" date
• Sending an email notification (for significant changes)
• Displaying a prominent notice on our website

Your continued use of our services after changes indicates acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@chefcecil.com
• Email (General): order@chefcecil.com
• Website: www.chefcecil.com

14. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

15. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

16. Cecil Lists Mobile App

The Cecil Lists mobile application, available on iOS App Store and Google Play Store, is subject to this Privacy Policy. The following additional information applies specifically to the mobile app:

Data We Collect

• Account Information: Email address and name for account creation and sync
• Shopping Lists: Items you add, check off, or share with others
• Barcode Scans: Product barcodes are processed locally on your device and looked up via OpenFoodFacts; we do not store your scan history on our servers
• Device Information: Device type, OS version, and app version for troubleshooting
• Usage Data: Features used and app interactions (anonymized)

Shopping List Sharing

When you share a shopping list with family or friends:

• Recipients can see the list name, items, and your display name
• Shared lists sync in real-time across all participants' devices
• You can revoke access at any time from the list settings
• Share links expire after 30 days if not accessed

App Store Privacy Labels

For App Store and Play Store privacy disclosures, Cecil Lists collects:

• Contact Info: Email address, name (linked to your identity, for account features)
• Identifiers: User ID (linked to your identity, for syncing)
• Usage Data: Product interaction (not linked to identity, for analytics)
• Purchases: Purchase history (linked to identity, for subscriptions)

Data NOT Collected

Cecil Lists does NOT collect: precise location, health data, financial information, contacts, photos (except when you explicitly upload), browsing history, search history outside the app, or sensitive information.

Offline Mode

Cecil Lists works offline. Your shopping lists are stored locally on your device and sync to our servers when you have an internet connection. You can use the app without an account, but syncing and sharing features require sign-in.