Privacy Policy

VibeKitchen is a tool for cooks and cottage-food sellers (“chefs”) to run a storefront and take orders. This Privacy Policy explains what Sillex Tech LLC, doing business as VibeKitchen collects, why, and what we do with it. It covers chefs who create an account and use the app, buyers who place an order through a chef’s storefront, and visitors to this website.

What we collect

When a chef creates an account and uses the app, we collect:

• Account details — name, email address, and password, handled through Amazon Cognito. We store your name and email; Cognito manages your password, and we never see it. With Apple or Google sign-in, we use the name the provider shares, when available, and do not ask you to enter a name.
• Age confirmation: in the app and on the website, you confirm you are 18 or older; we record that confirmation and when you gave it, linked to your account. We do not collect your date of birth.
• Storefront content you enter — business name, bio, phone number, kitchen street address, city, state and ZIP (optional at signup, needed before opening for orders), pickup/delivery details, hours, social links, and the photos you upload for your storefront and dishes.
• A push-notification token if you enable notifications, so we can send order and account alerts to your device.
• Order and messaging activity created as you operate your storefront (orders received, messages with buyers, payouts).

When you set up payments and tax, we also collect:

• Business and location facts — selling/use address and jurisdiction, used to determine tax treatment and seller readiness.

When a buyer places an order at a chef’s storefront, we collect:

• The contact details needed to fulfill the order (such as name, email, and phone) and the order’s items and pickup/delivery details. Buyers order as guests and do not create an account.

When you or a buyer use messaging, we collect:

• Messages, read state, and safety actions — the content of buyer-seller order conversations, whether they have been read, and any block or report actions taken. If a message is reported, we keep a separate snapshot for safety review.

When anyone visits this website, we collect the waitlist, analytics and ad-measurement data described under “Cookies and tracking” below.

Why we collect it

We use this information to create and secure your account, run your storefront, take and fulfill orders, send order and account notifications, provide support, and meet legal and payment-verification obligations. We do not use your account, storefront, order or payment information to build advertising profiles, lookalike audiences, or any cross-app tracking. Visits to our marketing pages are measured for our ads, as described under “Cookies and tracking” below.

Payments

Payments are processed by Stripe, our third-party payment processor. When a chef sets up payments or a buyer pays for an order, that financial information (such as bank or card details) is collected and stored by the payment processor under its own privacy terms. VibeKitchen does not store card or bank-account numbers. We keep only the records needed to reconcile orders and payouts (such as amounts, status, and a processor reference).

Where it lives

Account and storefront data is stored in Amazon Web Services (AWS) in the United States: Amazon Cognito for sign-in, Amazon DynamoDB for records, Amazon S3 and CloudFront for uploaded photos, and Amazon SES for transactional email delivery. Push notifications are delivered through the Expo Push Service, which forwards them to Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM) for your device. AWS and Expo are data processors under our account; they do not use or share the data outside of providing us infrastructure and delivery services.

How long we keep your data

We keep different kinds of data for different periods:

• Financial records (orders, payments, tax calculations, refunds, disputes, and payout records) — up to seven years after the transaction, or longer only for an active dispute, legal hold, or controlling legal requirement.
• Order messages — an order chat remains open for 48 hours after the order is completed, cancelled, refunded, or expires without payment. It then becomes read-only, and its message content is scheduled for deletion 30 days later. AWS may complete that deletion asynchronously after the scheduled time. This schedule does not currently apply to separate pre-order inquiry threads.
• Safety and moderation evidence — if a message, listing, or account is reported, we keep a separate snapshot of the reported content for up to two years after final action, or longer for an active legal hold.
• Support correspondence — two years after closure, extended only for an active dispute, fraud case, or legal hold.
• Email delivery logs — 90 days; routine application logs — 30 days. Bounce and complaint evidence may be retained longer to honor suppression.
• Push notification receipts — up to 4 days (14 days for delivery failures).
• Recovery codes and security challenges — expire within 10 minutes; retained only through the bounded issuance window.
• Backups — a rolling recovery window of up to 35 days, then removed.

When you delete your account, the data described under “Your rights” below is removed or anonymized promptly. The retention periods above apply to records that survive deletion because of legal, financial, or safety obligations.

Who we share it with

We do not sell your account, storefront, order or payment data, and we do not share it with advertisers or data brokers. We share only what is necessary with the service providers that make VibeKitchen work: AWS (hosting, storage, authentication, and email delivery), Stripe (payments and connected-account onboarding), and Expo Push Service / APNs / FCM (push notifications). When a buyer places an order, we share the order and contact details with the chef fulfilling that order. We may also disclose information if required by law.

We share visits to our marketing pages with Meta to measure and show our ads, as explained under Cookies and tracking.

What we do not collect

We do not collect your device’s precise location — any address you enter for pickup or delivery is geocoded from the text you type, not from device GPS. We do not perform cross-app tracking in the mobile app or use your app data for third-party advertising.

Your rights

You can ask us at any time to:

• Tell you what we have on file for you.
• Correct or delete your information, or delete your account.
• Stop sending you marketing email.

You can delete your account under Profile in the mobile app or Settings on the web, or, if you can no longer sign in, use our account deletion page. Deleting your account closes your storefront, removes your sign-in, and deletes or anonymizes your profile information and owned media. We may retain minimized order, payment, tax, refund, dispute, fraud-prevention, safety, and audit records for the periods described above when needed for legal, financial, security, or operational obligations, after which they are removed.

For any other privacy request, email us at support@vibekitchen.net with the subject line “Privacy request”. We will respond within 30 days.

Cookies and tracking

This site uses Google Analytics 4 (operated by Google LLC) to understand how visitors find and use our pages. Google Analytics sets cookies named _ga and _ga_<container-id> in your browser to recognize returning visits and group page views into sessions.

On our behalf, Google Analytics collects: page views, device and browser type, approximate location derived from your IP address, referring URL, and basic interaction events such as outbound link clicks and waitlist form submissions. Google masks IP addresses before storing or processing them, so we do not receive your precise IP. We do not use Google Analytics data for advertising, and we have not enabled cross-site or cross-app tracking features.

To opt out of Google Analytics on this site and every other site, install the Google Analytics Opt-out Browser Add-on. We also honor the Do Not Track browser signal — if your browser sends DNT: 1, we do not load Google Analytics at all on your visit.

Our marketing pages also use Meta Pixel, provided by Meta Platforms, Inc. It sends Meta the pages you visit, the page you came from, browser and device details, your IP address, and taps on the App Store, Google Play and “Start for free” buttons. We use this to measure our ads and show them to people likely to be interested. Meta may connect this activity to your Meta account and use it to measure and deliver ads.

The pixel runs on public pages that explain VibeKitchen, including our home pages and guides. It does not run in the mobile app or on seller shops, checkout, order, sign-in, account, account setup, payment setup, help, legal, account-deletion, waitlist or unsubscribe pages, or our bakery order form tool. It uses cookies named _fbp and _fbc on our website to help recognize visits and connect them to ads.

We do not load Meta Pixel when your browser sends Global Privacy Control or Do Not Track. You can also visit the Digital Advertising Alliance’s opt-out page to manage participating companies’ interest-based ads. Meta’s Activity from other businesses setting controls whether Meta uses this activity to show you ads; it does not stop Meta from collecting the activity.

We also use essential cookies needed for the site to work.

Children

VibeKitchen is intended for adults running a food business and is not directed at children. You must be at least 18 to create a chef account. If you believe a child has provided us information, contact us at support@vibekitchen.net and we will delete it.

Changes to this policy

We may update this policy from time to time. If we make material changes — for example, adding a new kind of data collection, or changing where data is stored — we will update the “Last updated” date at the top. For material changes, chefs are asked to re-accept the updated Terms and Privacy Policy the next time they open the app.

Contact

Questions? support@vibekitchen.net.