Privacy Policy

1.Data Protection Officer

ChefGenie has appointed a Data Protection Officer ("DPO") to oversee our compliance with the PDPA. If you have any questions, concerns, or requests regarding your personal data, please contact:

Data Protection Officer
Email: support@chefgenie-59477.zendesk.com
Address: 29 Media Circle #02-09 ALICE@MEDIAPOLIS, Singapore 138565

2.Personal Data We Collect

We may collect the following categories of personal data:

3.How We Use Your Personal Data

3.1 Providing and improving the Service

• Create and manage your account, including registration and login;
• Process and fulfill your orders and transactions, and enable pickup from our automated equipment and delivery;
• Operate, maintain, personalise, and improve the Service and develop new features.

3.2 Subscription and membership administration

• Process enrollment, renewal, cancellation, pause, and reactivation of memberships and subscriptions;
• Determine benefit eligibility and administer rewards, credits, Stars, and Points;
• Maintain accurate records of subscription and rewards activity for operational and audit purposes.

3.3 Communications

• Send transactional and service messages — order confirmations, payment receipts, delivery/pickup notifications, security alerts, and policy updates — via WhatsApp, SMS, email, or in-app push;
• Send subscription-related notices such as billing, renewal reminders, payment-failure alerts, and rewards-expiry reminders;
• Send marketing and promotional communications — offers, promotions, surveys, and our Lucky Draw coupon promotion (which may invite you to register for the ChefGenie app) — where you have consented or where otherwise permitted by law.

3.4 Fraud prevention and security

• Detect, investigate, and prevent fraud, abuse, duplicate accounts, unauthorised transactions, and other prohibited activity;
• Verify account uniqueness and eligibility for limited or one-time benefits;
• Enforce our Terms of Use and protect the safety, security, and integrity of the Service.

3.5 Legal compliance & analytics

• Comply with applicable laws, regulations, legal processes, and tax/accounting/audit obligations;
• Establish, exercise, or defend legal claims;
• Monitor and analyse usage trends, measure the effectiveness of promotions and features, and conduct research to improve the Service.

4.Messaging & Marketing (WhatsApp / SMS / Email)

We use the Meta / WhatsApp Business Platform, SMS providers, email, and in-app push notifications to communicate with you. Messages fall into two types:

• Service (transactional) messages — directly related to your order, such as confirmations, pickup codes, and preparation/delivery status. These are part of providing the Service.
• Marketing (promotional) messages — offers, coupons, and campaigns such as the Lucky Draw app-registration promotion. We send these only where you have provided the required consent, in accordance with applicable law and the WhatsApp / Meta messaging policies.

5.Disclosure of Personal Data

We do not sell your personal data. We disclose it only to the categories of recipients below, and only to the extent necessary for the relevant purpose. All service providers are contractually required to process your personal data only for the purposes for which it was disclosed.

We may also disclose personal data where we believe in good faith it is necessary to comply with applicable laws or legal processes, enforce our Terms of Use, investigate suspected fraud, or protect the rights, property, or safety of ChefGenie, our users, or the public; in connection with a merger, acquisition, reorganisation, or sale of assets (subject to applicable data protection laws); and to other third parties where you have given your consent.

6.SMS / Text Messaging (US Customer Support)

In the United States, customers can reach ChefGenie Support by text message at +1 (949) 638-5888. This number is shown in the ChefGenie app's ChefGenie Support contact panel and on the support poster on ChefGenie kiosks. We use it only to reply to customer support requests:

• We send text messages only after you text us first. By texting this number, you agree to receive text messages from ChefGenie Support in reply to your request.
• Our replies relate to your support request — for example your order, refund, or meal pickup. We do not send marketing or promotional messages from this number.
• We use your mobile number and the content of your messages only to respond to and resolve your request, and keep them as part of our customer-support records.
• Message and data rates may apply. Message frequency varies based on your support request.

• Reply STOP to opt out of all text messages from this number at any time.
• Reply HELP for help, or contact us at support@chefgenie-59477.zendesk.com.

See our SMS Terms & Conditions and how customers opt in to SMS support.

7.Your Messaging Opt-Out Choices

You can stop receiving marketing and promotional messages at any time:

• WhatsApp: reply STOP to any marketing message, or use the in-chat option to stop / block messages.
• SMS: reply STOP (or UNSUBSCRIBE) to any marketing text. For our US customer support number, replying STOP stops all text messages from that number — see SMS / Text Messaging.
• Email: click the "unsubscribe" link at the bottom of the email.
• App push: turn off notifications in your device or in-app settings.
• Or contact our Data Protection Officer / customer service team (see Contact Us) to be removed from marketing communications.

8.International Data Transfers

Your personal data may be transferred to, stored, and processed in countries outside of Singapore — including the United States and other countries where our affiliated companies or service providers operate. Where we transfer your personal data outside of Singapore, we will take appropriate steps to ensure that your data is protected to a standard comparable to the protection under the PDPA.

9.Data Retention

We retain your personal data for as long as reasonably necessary to fulfill the purposes for which it was collected. Specifically:

• Account data — for as long as your account remains active and for a reasonable period thereafter.
• Transaction and order data — for as long as necessary to fulfill our contractual, tax, accounting, and regulatory obligations.
• Subscription and rewards data — for the duration of your membership and a reasonable period thereafter to support audit, dispute resolution, and abuse prevention.
• Fraud and abuse investigation data — for as long as reasonably necessary to protect the integrity of the Service.

10.Cookies & Tracking Technologies

We use cookies and similar tracking technologies to maintain your session, understand how you interact with the Service, measure the effectiveness of communications and features, and detect and prevent fraud or abuse. You can set your browser or device to refuse all cookies or to alert you when cookies are being sent; however, if you do not accept cookies, some portions of the Service may not function properly.

11.Your Rights Under the PDPA

Under the Personal Data Protection Act 2012, you have the following rights:

• Right of access — request access to the personal data we hold about you, and information about how it has been or may have been used or disclosed within the past year.
• Right of correction — request correction of personal data that is inaccurate, incomplete, or misleading.
• Right to withdraw consent — where we process your data based on consent, withdraw it at any time by contacting our DPO or using the relevant controls within the Service (e.g., notification preferences).

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. If you withdraw consent for processing necessary to provide your account, subscriptions, rewards, or other features, we may no longer be able to provide them. We may require a reasonable period (not exceeding thirty (30) days from your request) to process a withdrawal, and may continue processing where permitted or required by law.

How to exercise your rights

Contact our Data Protection Officer (see Contact Us). We will respond within thirty (30) days or such other period as permitted by applicable law, and may charge a reasonable fee for processing access requests as permitted by the PDPA. Where a statutory data-portability obligation becomes applicable under Singapore law, we will handle qualifying requests accordingly. If you are not satisfied with our response, you may contact the Personal Data Protection Commission (PDPC) at https://www.pdpc.gov.sg.

12.Children's Privacy

The Service is not intended for children under the age of thirteen (13), and we do not knowingly collect personal data from children under thirteen (13). If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately using the details in Contact Us so that we can take appropriate steps to delete such data.

13.Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, loss, or destruction — including encryption, access controls, secure storage, and regular security assessments. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

14.Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or in-app notification at least fourteen (14) days before the changes take effect. We encourage you to review this Privacy Policy periodically. The "Last updated" date above reflects the most recent revision.