Privacy Policy

Last updated · October 26, 2026

SnapChef ("we", "us") collects only what's needed to run the app and sync your account across devices. We don't sell your data and we don't show ads. To measure our ads we share limited app activity with Meta (Facebook), and, only if you allow tracking, with TikTok — and you can permanently delete everything from inside the app at any time.

1. Information we collect

Account information

When you sign in with Apple or Google (via Firebase Authentication) we collect your email address, your display name (if provided), and a user ID plus authentication tokens for session security. If you use Sign in with Apple, we receive only what you choose to share (which may be a private relay email). Signing in is optional: you can also continue as a guest, in which case Firebase creates an anonymous user ID and we collect no email or name.

Photos and camera

SnapChef uses your camera and photo library so you can photograph ingredients. When you scan, the image is compressed on your device, location/EXIF metadata is stripped, and the image is sent through OpenRouter to an AI model (currently OpenAI) for ingredient detection and recipe generation. The photo is discarded after processing — we do not keep it on our servers.

Content you create (synced to your account)

So your data is available across your devices, the following is stored in Google Firestore tied to your account:

• Saved recipes and favorites
• Fridge and pantry inventory
• Cooking history and meal plans
• Dietary preferences, allergies, and onboarding answers
• Scan history, ratings, shopping lists, and streak/engagement counters

Purchases

Subscriptions are processed by the Apple App Store or Google Play — we never see your payment card details. RevenueCat manages your subscription status using a per-user identifier, purchase receipts, and device identifiers; it does not receive your name or email. RevenueCat also sends subscription events (such as a purchase, renewal, or cancellation) to our PostHog analytics, linked to your SnapChef user ID.

Analytics and diagnostics

We use PostHog (hosted in the EU) to understand how the app is used and to catch crashes. This includes product-interaction events (e.g. app opened, paywall viewed, purchase or trial events, recipe imports) and diagnostic/error reports, associated with your user ID and email (or, for guests, the anonymous user ID) so we can support your account. We do not use this data for advertising.

Advertising measurement (TikTok and Meta)

SnapChef includes the TikTok Business SDK and the Meta (Facebook) App Events SDK so we can measure which of our ads lead to installs. Neither receives your photos, ingredients, recipes, allergies, dietary preferences, name, or email.

• TikTok — only if you allow tracking when iOS asks (App Tracking Transparency). If you allow it, SnapChef shares your device's advertising identifier and these app events with TikTok: app install, app launch, tutorial (onboarding) completion, recipe generated, and checkout (starting a purchase). If you decline, the TikTok SDK is not started and nothing is sent to TikTok.
• Meta receives these app events: app install, app launch, tutorial (onboarding) completion, your first successful recipe generation, trial starts, and purchases (product, price and currency), together with device information that may include your IP address. If you allow tracking, Meta also receives your advertising identifier. If you decline, Meta receives the events without your advertising identifier and marked as not tracked; Meta then uses them only for aggregated campaign measurement (Aggregated Event Measurement), not to target ads to you.

You can allow or refuse tracking at any time in iOS Settings → Privacy & Security → Tracking. Declining doesn't affect any app feature.

2. How we use your information

• Account data — to authenticate you and sync your content and subscription
• Photos — to identify ingredients via AI (processed in real time, then discarded)
• Ingredients & preferences — to generate personalized recipes via AI
• Purchase data — to unlock and manage premium features
• Analytics & diagnostics — to improve the product and fix problems
• App events & advertising identifier — to measure our TikTok and Meta ads (the advertising identifier only if you allow tracking; TikTok only if you allow tracking)

We do not show ads, we do not use your data for profiling, and we never sell it. The only advertising use is the TikTok and Meta ad measurement described in Section 1.

3. Third-party services

• OpenRouter — routes ingredient detection & recipe generation to an AI model provider (currently OpenAI). We configure OpenRouter to use only providers that do not store your data. (Privacy)
• Google Firebase — Authentication (Apple, Google, or guest sign-in), Firestore database, and Storage. (Privacy)
• RevenueCat — subscription management. (Privacy)
• PostHog — product analytics & error tracking, EU-hosted. (Privacy)
• TikTok Business SDK — ad measurement, only if you allow tracking. (Privacy)
• Meta (Facebook) App Events SDK — ad measurement; with your advertising identifier only if you allow tracking, otherwise aggregated measurement only. (Privacy)

4. Data sharing

We will never sell or rent your personal data. Data is shared only with the processors above, solely to provide the app — except for ad measurement: the app events listed in Section 1 are shared with Meta, and, only if you allow tracking, your advertising identifier is shared with Meta and TikTok and the TikTok events are sent. Your fridge photos are sent to OpenRouter and the AI provider for processing as described in Section 1.

5. Data retention

• Photos sent for AI processing — processed in real time, not stored by us
• Account & synced content — kept while your account exists; removed when you delete your account
• Purchase data — kept for the subscription duration plus any legally required period
• Analytics events — retained by PostHog per our configured retention period
• TikTok ad-measurement events — sent only with your permission; retained by TikTok under its own policies
• Meta ad-measurement events — retained by Meta under its own policies

6. Your rights & choices

You can delete your account and all associated data directly in the app (Settings → Delete account), which removes your Firestore content and authentication record and, if you signed in with Apple, also revokes SnapChef's Sign in with Apple access. You can allow or refuse tracking at any time in iOS Settings → Privacy & Security → Tracking. If you are in the EU/EEA (GDPR) or California (CCPA), you also have rights to access, correct, port, and object to or restrict processing of your data.

Legal basis (GDPR): contractual necessity (providing the service), consent (camera use, account creation, tracking for ad measurement), and legitimate interest (analytics, security, fraud prevention, and aggregated ad measurement by Meta when you decline tracking). To exercise any right, email hello@hibernyte.com — we respond within 30 days.

7. Children's privacy

SnapChef is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has provided us data, contact hello@hibernyte.com.

8. Data security

All network requests use encrypted connections (HTTPS/TLS) and data is encrypted in transit. Authentication tokens are stored securely on your device. No method of transmission is 100% secure, but we apply reasonable safeguards.

9. International data transfers

Your data may be processed outside your country — Google/Firebase primarily in the United States, PostHog in the European Union, Meta in the United States and the countries where it operates, and, if you allow tracking, TikTok in the countries where it operates. These transfers rely on the providers' data-processing agreements and applicable safeguards.

10. Changes to this policy

We may update this policy; changes are posted here with a new date, and material changes will be surfaced in the app.

11. Contact

Questions or data requests: hello@hibernyte.com