ရှိတာချက်...ချက်တာစား

Privacy policy

Last updated:

ShalChat is run by First July Team. This page explains what we collect, why, who else receives it, and how you can delete it. We do not sell your data, show ads, or use third-party trackers.

  • The ingredients you enter, your filters and AI recipes are kept in your browser (session storage) and sent to our server only to find recipes. We do not save them on the server.
  • Your shopping list and your 👍/👎 votes are remembered in your browser (local storage) on this device only.
  • A random guest ID cookie (ski_gid, valid for one year) lets us count daily AI ideas per browser. It contains no personal information.
  • To stop abuse, our server counts requests per network address for up to an hour. Addresses are turned into one-way codes first and are never stored on disk.

Sign-in is with Google only; we never see your Google password. We store:

  • your name, email address and profile picture from Google;
  • recipes you save (a copy of each recipe as you saved it);
  • your pantry (the ingredients and quantities you keep);
  • your settings: language, preferred cuisine, servings and spice level;
  • your dietary rules and allergies — only if you give consent in Settings. These can reveal religious beliefs or health information, so we never send them to the AI provider and delete them as soon as you withdraw consent;
  • your 👍/👎 votes on AI recipes, with the recipe's title and ingredients;
  • your star ratings of recipes (others see only the average and the number of ratings);
  • your sign-in sessions, without your network address or browser details.
  • our admins can see your name, email and usage counts to run the service and stop abuse; they can never see your dietary rules or allergies, and their actions are logged.

AI ideas are created with Google's Gemini API. For each request we send only ingredient codes and names, quantities, servings and the cuisine or meal type you chose. We never send your name, email, account, location, dietary rules or allergies. Allergy and dietary checks run on our own server, before and after the AI.

Google processes this data under its Gemini API terms. On some Google plans, Google may use it to improve its products; because it contains only ingredients and numbers, it does not identify you.

For each AI request we keep a usage record: date and time, size, estimated cost, the result status, and your account or guest code. It contains no ingredients or recipe text.

Signed-in users can add their own key from OpenAI, OpenRouter or Google Gemini in Settings. We store it encrypted, show only its last four characters, never log it, and delete it when you delete it or your account. While it is switched on, your AI requests go to that provider under its terms, with the same limited data as above, and the provider bills you directly.

  • Amazon Web Services (Lightsail, Singapore region) hosts our server and database.
  • Google provides sign-in and the Gemini AI service.
  • If you add your own AI key: the provider you chose (OpenAI, OpenRouter or Google).
  • Account data is kept until you delete your account.
  • Server logs contain no network addresses and are overwritten automatically as they grow (about 30 MB).
  • We do not keep backups of user data, so deleted data cannot be restored.
  • Settings → Delete account permanently deletes your account, saved recipes, pantry, settings, dietary data, votes and ratings. (For safety, Google may ask you to sign in again first.)
  • You can withdraw dietary consent at any time in Settings; the dietary data is deleted at once.
  • Clearing your browser data removes the guest ID, shopping list and anything kept on the device.
  • For any question or request about your data, write to [email protected].

ShalChat is not directed at children under 13. Google accounts have their own age rules.

If we change how we use data, we will update this page and the date above. Important changes will also be shown in the app.

[email protected]