Privacy policy
Last updated: August 18, 2026
At Chef Stockee, we take the protection of your personal data seriously. This policy describes, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, how we collect, use and protect your data.
Data controller
The controller of data collected on chefstockee.com is Philippine Loiseau, a sole trader trading as “Studio Lippia”.
Contact: contact@chefstockee.com
Data collected
On the marketing website chefstockee.com, we collect:
• Contact form data: name, email address, message content, only if you voluntarily write to us.
• Anonymized browsing data: pages visited, duration, device type, country (via Vercel Analytics, without cookies or individual identifiers).
In the Chef Stockee mobile app, we additionally collect: account identifiers, food stock data, culinary preferences, allergies, history of photographed receipts. These processes are detailed in the app settings.
Purposes and legal bases
• Respond to your contact requests, legal basis: legitimate interest.
• Measure site audience to improve it, legal basis: legitimate interest (anonymous audience measurement).
• Provide the app service (stock management, recipes, receipt scanning), legal basis: contract performance.
• Payment processing, legal basis: contract performance.
• Send you marketing communications, legal basis: consent (explicit opt-in only).
Data recipients
Your data is accessible only to Philippine Loiseau and to the following technical sub-processors, all contractually bound to comply with the GDPR:
• Railway (USA), hosting of the application server and database (accounts, stock, recipes, members, feedback). Transfer outside the EU governed by Standard Contractual Clauses (SCCs).
• Vercel Inc. (USA), site hosting, audience measurement. Transfer outside the EU governed by Standard Contractual Clauses (SCCs).
• Resend (USA), transactional email delivery. Transfer governed by SCCs.
• Apple (App Store) and Google (Google Play), payment processing for Solo and Family subscriptions; RevenueCat, Inc. (USA), technical management of in-app purchases.
• Anthropic PBC (USA), AI processing for receipt scanning and recipe generation. Transfer governed by SCCs. No data is used to train the models.
• Sightengine (France), automatic moderation of published recipe images and text. Data processed within the European Union, with no transfer outside the EU.
• Cloudflare R2 (USA/EU), encrypted storage of receipt images.
Retention period
• Contact form messages: 3 years from the last exchange.
• Audience measurement data: 13 months maximum.
• App account data: duration of your subscription + 3 years after account deletion (accounting and tax obligations).
• Billing data: 10 years (legal obligation).
Your rights
In accordance with the GDPR, you have the following rights regarding your data at any time:
• Right of access: obtain a copy of the data concerning you.
• Right of rectification: correct inaccurate data.
• Right to erasure: request the deletion of your data.
• Right to object: refuse processing based on legitimate interest.
• Right to restrict processing.
• Right to portability: retrieve your data in a structured format.
• Right to withdraw consent at any time.
To exercise these rights, write to contact@chefstockee.com specifying your request and attaching a copy of an ID. We will respond within a maximum of one month.
Cookies
The chefstockee.com website uses no advertising cookies and no third-party trackers, and performs no individual tracking. A single strictly-necessary cookie is set, “NEXT_LOCALE”, to remember your display language; it is not used for any tracking. Audience measurement is carried out via Vercel Analytics, without cookies and without a unique identifier. As these processes are exempt from consent, no cookie banner is required.
The mobile app may use technical cookies necessary for your authentication, detailed in the app settings.
Complaint to the CNIL
If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority (CNIL):
Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
Phone: +33 1 53 73 22 22
Website: www.cnil.fr
Modifications
This policy may be modified to reflect legal, technical or functional changes to the service. The last update date is indicated at the top of the page. Substantial modifications will be notified to you by email if you are a registered user.