Effective 13 August 2026.
What Chef stores
Household names, people, explicit dietary and safety constraints, preferences, meal plans, exact recipe versions, grocery plans, concise shop-run evidence and meal outcomes are stored in a SQLite database in the folder the user chooses.
Only that folder's path is stored in a user-level Chef configuration file. Chef can create JSON, Markdown and SQLite backups when the user requests them.
What Chef does not store
Chef must not persist retailer credentials, cookies, payment information, screenshots or raw retailer pages. It does not send the local database to Daniel Ferguson.
A host agent or optional Computer Use provider may process information under its own privacy terms. Review those terms before enabling browser automation.
Local protection and deletion
Chef permission-restricts its local files where the operating system supports it. Version 0.1 does not provide application-level encryption, so anyone with access to the operating-system account or backups may be able to read them.
Users can export their data or remove the chosen data folder and Chef configuration themselves. Chef does not automate removal because that action is destructive.
Contact
Privacy questions can be sent to gday@danferg.com.