Data for you.

What is sent for processing?

Creation requests, imported recipe text, conversations and feedback are sent to OpenAI for the action you choose. Private lists are stored in your account; only products you select are included in recipe generation.

In general chat, Send submits your message and recent context for processing without a separate confirmation box. Paying for the service does not itself change the provider's privacy settings.

Data sharing

Free token eligibility is not automatic or determined by model selection. It depends on the owner's OpenAI project settings, enrollment, models and quotas. Chefly does not change OpenAI sharing settings through chat. If sharing is enabled in the provider project, requests may be included. Do not enter sensitive personal information, secrets or content you cannot share.

Username, password and recovery

One profile is linked to each verified ChatGPT account. Passwords are stored as salted scrypt hashes, never plaintext. Sign-in uses a secure HttpOnly cookie for up to seven days. Changing or recovering a password revokes previous sessions. Short-lived attempt counters protect sign-in without storing plaintext network addresses. Recovery uses your original account, not security questions or public links.

Drafts on your device

Recipe ideas, ingredient edits, imported text and chat history are saved in this browser. Chat history is separated by account, limited to 100 chats and 400 messages per chat. You can search, rename, pin, export and delete chats; deleting also removes its draft. Guest chats join local account history when space is available. Pre-sign-in drafts can migrate locally; an existing account draft can be kept while you choose whether to restore the guest draft. This is not cross-device draft synchronization. Clearing browser data removes local drafts. Lists and recipes saved to your account remain on the server.

What is public?

Only recipes you explicitly publish, your chosen display name and moderated reviews are public. Drafts and conversations are never automatically published. General chat sends limited recent context. Full chat history is stored locally, not as a synchronized server archive. Color and theme preferences are also device-local.

Credits and security

Credit calculations use estimated provider prices even where a sharing benefit may apply; free usage is not guaranteed. The service key stays on the server and can only be managed by the owner. No system can guarantee absolute immunity from security incidents.