Last updated: October 21, 2026
Consumer Health Data Privacy Policy
This policy explains the health information Chefra collects when people share food needs for a gathering, why, who sees it, and how you can see it, withdraw your consent or have it deleted.
1. What we collect
When someone shares food needs for a gathering in Chefra (a Spread or an Event), we collect: the food needs themselves, such as allergies, intolerances, diets and other health details about food; the name of the person they are for; and the name of the person who entered them. We also keep which version of the consent they agreed to and when.
A note left with an answer can also contain health details if someone writes them there. We treat those notes the same way.
2. Where it comes from
From the person themselves, from a guest answering for their household, or from the host or a member of the host's team who enters them. Every entry shows who entered it and for whom, for example “Added by Jane Roe for John Doe”.
3. Why we collect it and how we use it
Only so the host and the team running that gathering can plan food that is safe for the people coming. We do not use it for advertising, we do not sell it, we do not use it to recommend recipes or anything else, and we do not send it to any AI service.
4. Who sees it
The host, and members of the host's team whose role lets them see guests' notes, for that gathering. Other guests never see it. It is never shown through a private helper link, and never included in notifications, emails or text messages.
5. Who we share it with
We share it only with the host and their team, as described above, with your consent. The service providers that host our database and our website process it on our behalf, under contract, only to run Chefra. We do not share it with anyone else, and we do not sell it.
6. How long we keep it
For as long as the household stays on that gathering's guest list. It is deleted when the household is removed, when a guest uses “Forget me”, when the account it belongs to is deleted, or when the gathering itself is deleted. The host or a team member who can change food needs can also delete an entry at any time.
7. Your rights
You have the right to:
- confirm whether we collect your health data, and see it;
- get a list of everyone we have shared it with, which we send you by email from privacy@getchefra.com;
- withdraw your consent, which stops any further collection or sharing; and
- have your health data deleted.
When we delete it, copies in our database backups are removed as those backups expire, within 30 days.
To use any of these rights, email privacy@getchefra.com from the address you use with Chefra, or tell us which gathering and household it concerns. You don't need an account. We may ask for a little more information to confirm the request is yours. We answer within 45 days; if we need longer, we will tell you why within those 45 days and take at most 45 more. Requests are free up to twice a year.
8. If we say no
If we decline a request, you can appeal by replying to our answer and asking us to look again. We will tell you in writing what we decided, and why, within 45 days. If we still decline, you can complain to the Washington State Attorney General at atg.wa.gov/file-complaint.
9. Contact
Chefra LLC, privacy@getchefra.com.