Privacy Policy

1. Who we are

EtiquetaChef is a platform — mobile apps, web app and associated services — that helps professional kitchens create, print, manage and trace labels for food, ingredients and perishables. It is operated by two companies: EtiquetaChef Brasil, which serves Customers whose establishment is in Brazil, and EtiquetaChef WorldWide, which serves Customers established in any other country. The company that contracts with the Customer is the controller of the personal data it processes for its own purposes (account, billing, support, security). When it processes, on the Customer’s behalf, the data of the Customer’s staff and other persons registered in the platform, EtiquetaChef acts as processor and the Customer as controller.

Data controller:

• Customers established in Brazil: ETIQUETACHEF DESENVOLVIMENTO DE SOFTWARE CUSTOMIZÁVEL LTDA — CNPJ 69.380.362/0001-51 — Rua Pais Leme, 215, Conj. 1713, Pinheiros, São Paulo/SP, CEP 05424-150, Brasil.
• Customers established in any other country: EtiquetaChef WorldWide — Partita IVA 04367791201 — Bologna, Italia.

Contact: jonas@etiquetachef.com

2. Data we may collect

We may collect the following data depending on how you use the application:

• name;
• email;
• login credentials;
• user-created content such as text, labels, recipes, images or descriptions;
• device information such as model, operating system and language;
• app usage data such as screens accessed, features used and errors;
• device identifiers, such as the Android ID, used to register the device to your account;
• advertising identifiers provided by the operating system, such as the Google Advertising ID (GAID);
• installation identifiers generated by our analytics and crash-diagnostics tools;
• payment data, when there are purchases or subscriptions, processed by external stores or providers;
• location data: the location of the device (such as coordinates, accuracy, source and date and time) for each label printed on paper and each NFC tag written, the establishment’s address and coordinates, and the country determined from the app store or the IP address or, where that is not possible, from the device location (see section 15);
• the content of support requests and the information exchanged with support (L1, L2 and L3);
• data received from the Licensed Partner that sold or serves the account, such as company, contact and contracting data.

We do not collect sensitive data without clear necessity and consent when required.

3. How we use your data

We use your data to:

• create and maintain your account;
• enable application features;
• save labels, recipes, images or information added by you;
• ensure the traceability of labels and operational records, including the time and place of each print and NFC recording;
• determine the country of the establishment, the contracting company, the currency and the applicable price;
• improve performance and security;
• fix errors and prevent abuse, fraud and misuse of licences;
• process purchases, subscriptions or paid features;
• provide support, directly or through the Licensed Partner, and escalate requests between support levels;
• send important communications about the app;
• comply with legal obligations.

4. Legal basis for processing

When applicable, we process personal data based on the legal bases of the GDPR (Article 6) and of the LGPD (Articles 7 and 11), namely:

• contract performance, to deliver the requested service;
• consent, when required;
• compliance with legal obligations;
• legitimate interest, such as security, traceability of operational records, app improvement and fraud prevention;
• the exercise of rights in judicial, administrative or arbitral proceedings.

5. Data sharing

We may share data with services necessary to operate EtiquetaChef, such as:

• hosting and database providers;
• authentication services;
• usage analytics tools (PostHog, Firebase Analytics) and crash diagnostics (Firebase Crashlytics);
• advertising platforms, for campaign measurement (Meta Platforms);
• payment service providers, such as Asaas, Stripe, Apple and Google, and others that may be integrated;
• app stores, such as Google Play and the Apple App Store;
• the Licensed Partner that sold or serves the account, to the extent necessary for implementation, billing of the resale and L1 support;
• the other EtiquetaChef company, to the extent necessary for operation, infrastructure, security and support;
• support, security or infrastructure services.

To measure advertising campaign results, we share advertising identifiers and app usage events with Meta Platforms. We do not sell your personal data. We may also share information when required by law, court order or competent authority.

6. Third-party services

EtiquetaChef uses third-party tools to operate the service: Google (Firebase and Google Cloud — authentication, database, storage, Analytics, Crashlytics, Remote Config, Places address search and Vertex AI), Meta Platforms (advertising campaign measurement), PostHog (usage analytics), SendGrid (email), Twilio (SMS), Anthropic (optional AI features), and the payment service providers Asaas, Stripe, Apple (App Store) and Google (Google Play). Those third parties may process data under their own privacy policies. You should review their policies when applicable.

7. Data retention

We keep your data only as long as necessary to:

• provide the service;
• comply with legal obligations;
• resolve disputes;
• protect our rights;
• maintain required security and operational history.

Location data linked to labels and operational records follows the retention period of those records and is deleted together with them; after the account is closed, the deletion and export period provided in the Terms of Use also applies. Checklist records (runs, corrective actions and their photos) are kept for 180 days after completion (a run that was never completed, 180 days after it started) — a corrective action, after it is closed — and are then deleted automatically; deleted photos may remain for up to 90 more days as a previous version in storage and for up to 365 days in encrypted backups, after which they are erased. When a user is deleted, at the end of the 30-day period their name and the free text they typed in these records are anonymized. When the data is no longer needed, we may delete or anonymize it.

8. Security

We adopt reasonable measures to protect your data against unauthorized access, loss, alteration or misuse. Even so, no digital system is 100% secure. The user must also protect their account, password and device.

9. User rights

Depending on your location, you may have the right to:

• access your data;
• correct inaccurate data;
• request deletion;
• restrict processing;
• withdraw consent;
• request portability;
• object to certain uses;
• lodge a complaint with a data protection authority.

10. Children and minors

EtiquetaChef is not directed at small children. If we discover we have collected data from a child without proper authorization, we will take steps to delete that information. If the application is used by minors, this must occur with parental or guardian authorization where required by law.

11. Purchases and payments

Payments, subscriptions and in-app purchases are processed by third-party payment service providers, according to the country and the channel: Asaas, Stripe, the Apple App Store, Google Play and others that may be integrated. EtiquetaChef does not store full credit card data. In a sale made by a Licensed Partner under a resale arrangement, billing to the Customer is done by the Licensed Partner. Billing, cancellation and refund rules may depend on the store or platform used.

12. International data transfer

EtiquetaChef serves Customers in more than 175 countries. The main database and file storage are hosted on Google Cloud in São Paulo, Brazil (southamerica-east1); some services, such as device presence, analytics, email and SMS, are processed in the United States and other countries where our providers operate. Data may also be shared between EtiquetaChef Brasil and EtiquetaChef WorldWide. Where data is transferred outside the country of origin, we adopt the mechanisms provided by the applicable law — such as the European Commission’s standard contractual clauses or adequacy decisions, where they exist, under the GDPR, and the mechanisms of Article 33 of the LGPD —, in addition to the contractual commitments of our providers. Since January 2026, the European Union and Brazil have mutually recognised each other as providing an adequate level of protection (Commission Implementing Decision (EU) 2026/179 and ANPD Resolution CD/ANPD No. 32/2026); for other destinations from Brazil, we use the standard contractual clauses approved by the ANPD (Resolution CD/ANPD No. 19/2024).

13. Changes to this Policy

We may update this Privacy Policy from time to time. When there are material changes, we may notify in-app or by other suitable means. Continued use of EtiquetaChef after the update means you are aware of the new version.

14. Device and advertising identifiers

EtiquetaChef uses identifiers to recognise the device, measure app usage and assess advertising campaign results:

• Google Advertising ID (GAID): an identifier provided by Android that you can reset or delete at any time. We use it to measure advertising campaign effectiveness, together with Meta Platforms.
• Android ID: used only within our own infrastructure, to register each device to the establishment. It is not shared with third parties.
• Firebase Analytics instance identifier: used to group events from the same device and, when you are signed in, for conversion measurement with Meta Platforms.
• identifiers generated by our product analytics (PostHog) and crash diagnostics (Firebase Crashlytics) tools, used to group events and error reports from the same device. When you are signed in, product analytics (PostHog) also links those events to your user identifier and your account email — in the web app, only if you accept analytics cookies.
• In the web app, technical error reports (PostHog) are sent even if you accept only essential cookies, based on our legitimate interest in keeping the service working: in that case nothing is stored in your browser (no cookies, no local storage), there is no session recording, and the report identifier is discarded when you close the page. If you are signed in, the report carries your user identifier and the business identifier, without your email.

You can delete or reset the advertising ID at any time in Android Settings → Privacy → Ads. You may also request deletion of your data as described in section 9.

15. Location data

For each label printed on paper and each NFC tag written, the app records the location of the device used (such as coordinates, estimated accuracy, source — GPS, network or other — and date and time), linked to the user, the device, the establishment and the label. Location is also used to confirm the time of operations independently of the device clock, to help fill in the establishment’s address and, when the country cannot be determined from the IP address, to determine the country for price, currency and contracting company purposes.

• Purpose: traceability and proof of execution of operational records, food safety, prevention of fraud and of misuse of licences, and security.
• Legal basis: contract performance and legitimate interest of the Customer and of EtiquetaChef in the integrity of the records.
• Permission: collection depends on the location permission of the device’s operating system, which can be withdrawn at any time in the system settings, and takes place only with the app in use, at the moments described above (printing, NFC writing, address, country at contracting and time check) — there is no continuous tracking or background collection, and only the location of prints and NFC writes is recorded; without the permission, printing and NFC writing may be unavailable on that device.
• Access: location records are visible to the Customer’s authorised users and, where applicable, to the Licensed Partner that serves the account, for support purposes.
• Limits and retention: EtiquetaChef does not use these records to monitor or evaluate staff; as regards the data of the Customer’s staff, it acts as processor under the Data Processing Agreement (DPA). Records are kept for as long as the label to which they belong exists. EtiquetaChef also keeps a per-establishment summary of the approximate areas (about 1 km) in which labels are printed, used internally to verify where the licence is used.

The Customer, as employer or party responsible for the users it registers, must inform its staff of this collection, in accordance with the labour and data protection rules applicable to it.

16. Licensed Partners and support

EtiquetaChef may be sold, implemented and supported by Licensed Partners — independent companies authorised by EtiquetaChef. The Licensed Partner is an independent controller of the data it processes in its own commercial relationship with the Customer (such as proposals, contracts and resale billing) and acts on behalf of EtiquetaChef or of the Customer when it accesses the account for implementation and first-level support (L1). Requests not resolved at L1 are escalated to EtiquetaChef (L2 and L3), together with the information needed to handle them. Requests about personal data and the exercise of data subject rights can always be sent directly to EtiquetaChef.

Related documents

• Fast access — PIN (how we handle the unlock PIN)