Privacy Policy

👋 About This Policy

Chef's Voice is an AI-powered hands-free cooking assistant developed by NexCode. We are committed to protecting your privacy and being transparent about how we handle your data.

This policy applies to the Chef's Voice app (web, iOS, and Android) and describes what information we collect, why we collect it, and how we protect it.

📋 What Data We Collect

• Email address — used to create and identify your account via Firebase Authentication.
• Voice data (microphone audio) — streamed in real-time to Google's Gemini API to generate AI responses. Audio is not permanently stored by us.
• Usage data — we store your time balance (seconds), subscription status, and settings in Firestore so the app functions correctly.
• Payment information — handled exclusively by Stripe. We never store card details. We only store your Stripe customer ID and subscription status.
• Log data — Firebase and Google Cloud Functions may log technical debugging information (without personally identifiable information in production).

🎯 Why We Collect Data

• To provide AI voice assistance (Gemini Multimodal Live API).
• To manage your account and authentication.
• To track and limit usage according to your subscription plan.
• To handle payments and subscriptions via Stripe.
• To improve and debug the app.

🤝 Third-Party Services

Chef's Voice uses the following third-party services, each with their own privacy policies:

• Google Firebase — authentication, database (Firestore), and hosting. firebase.google.com/support/privacy
• Google Gemini API — AI voice processing. ai.google.dev/gemini-api/terms
• Stripe — payment processing. stripe.com/privacy

🇪🇺 GDPR — Your Rights

As an EU user, you have the following rights under GDPR:

• Right of access — you may request a copy of your personal data.
• Right to rectification — you may request that incorrect data be corrected.
• Right to erasure — you can delete your account directly in the app (Settings → Delete Account). We will then delete your Firestore data and cancel any active Stripe subscription.
• Right to data portability — contact us if you want your data in a structured format.
• Right to object — you may at any time object to the processing of your data.

Contact us at support@nexcode.se to exercise these rights.

🔒 Security

• All communication uses encrypted HTTPS/WSS connections.
• API keys and secrets are stored in Google Cloud Secret Manager — never in client code.
• Firestore access is controlled by security rules requiring authentication.
• Payments are handled by Stripe with PCI DSS compliance.

🗑️ Data Retention & Deletion

Your data is stored for as long as your account is active. When you delete your account, we remove your Firestore profile and cancel your Stripe subscription. Stripe may retain transaction history in accordance with their own legal obligations.

🔄 Changes to This Policy

We may update this privacy policy. Significant changes will be communicated via the app or email. Continued use of the app after an update constitutes acceptance of the revised policy.