Privacy

Who we are

Dorm Chef is operated by Ali El Bourdany in Egypt.

For privacy questions, contact [email protected]

When you visit and pay

Cloudflare hosts this website and processes technical request information, including IP addresses and traffic information, to deliver and protect the site.

We use Cloudflare Web Analytics to count visits: which pages are viewed, the website that sent you, and your browser, device type and country. It does not use cookies or local storage and does not fingerprint you. We see totals, not individual visitors.

Whop checkout loads only after you choose to check out. Your browser then connects to Whop and its payment providers, which may use cookies, device information and tracking technologies.

Whop collects the account, billing and payment details requested in its form and checks access to the kit in Whop Files. Our website does not collect your card details in a Dorm Chef payment form.

We use purchase and contact information available through Whop to help with orders, file access and support.

Read Whop’s Privacy Policy

Read Cloudflare’s Privacy Policy

If you join the email list

Signup is for people aged 18 or over. If you choose to join, we store your email, your confirmation that you are at least 18 and your consent record in private Supabase storage, pending verification.

Your consent is for Dorm Chef recipes, product news and founding-member updates. We use Resend to send a confirmation link when your signup request is eligible. After you confirm, an automated welcome series shares a first recipe, practical cooking guidance and ways to take part. Its three messages are scheduled after confirmation, around day three and around day seven; delivery may be later. You can unsubscribe at any time.

Pending signup requests that remain unverified are removed after 30 days at the next hourly cleanup.

Our providers process technical request information to protect signup. Our signup records do not store your raw IP address. The separate intake rate limit records use protected identifiers and are removed after 48 hours at the next hourly cleanup.

We keep email delivery and consent records while needed to send messages, confirm your choices and respect opt outs. These include hashed request and link identifiers, scheduled message status, provider message references and consent or suppression records.

Resend processes your email address and delivery information to send confirmation and welcome emails. We use delivery, bounce and complaint notifications to handle delivery and stop unwanted messages. We do not use open or click tracking for these emails.

You can withdraw consent using the unsubscribe link in our marketing emails or by emailing us. Buying the kit, creating an account or asking for support does not subscribe you to marketing. Account verification, password resets and replies to support requests are separate service messages.

To withdraw consent, write to [email protected]

If you create an account

An account is optional. If you create one, we store your name, your email address, your statement that you are 18 or older and the kitchen setup you choose to save, such as fridge and microwave access.

Supabase runs sign-in for us. Your password is stored only as a secure hash, and we never see it. Google sign-in is not currently enabled.

We use this information to run your account and your My kitchen page. Creating an account doesn’t subscribe you to marketing emails.

To delete your account, write to [email protected]

Ad measurement

If you choose Allow in Ad choices, we use Google Ads to measure whether an ad leads to a paid purchase. Google’s tag does not load and we do not save ad click identifiers before you allow this. Global Privacy Control keeps this measurement off.

With your permission, we keep a validated ad click identifier and campaign labels in your browser for up to 30 days. We remember your choice for up to 180 days. A private checkout token in your browser session expires after 30 minutes. Our server uses it to match this checkout to a signed Whop payment before reporting a purchase.

A conversion sends Google the paid amount, currency and Whop payment reference, with ad identifiers and technical browser request information. We do not send your email, name, account profile, payment card details or hashed email to Google. We do not enable personalized advertising or enhanced conversions. Free claims and checkout button clicks are not reported as purchases.

Choose Ad choices in the footer and Keep off to withdraw consent, delete saved ad identifiers and disable the private checkout token. The page reloads to stop the Google tag. Withdrawal does not remove a conversion already sent to Google or change your order, downloads or account access. You can contact us about data already held.

If your browser blocks storage or measurement, you decline, or you pay through the separate hosted Whop fallback, this first measurement setup may not attribute your purchase to an ad.

Google’s Privacy Policy · How Google uses information from partner sites

Optional AI first-recipe ad measurement

AI ad choices is a separate, optional permission to use Google Ads to measure whether an ad leads to a new account’s first successful AI Chef recipe. Allowing purchase or Meta measurement does not allow this purpose. Google’s AI measurement tag does not load before you choose Allow. Declining does not limit AI Chef, the free week or your account.

Our server keeps the time and a random event reference for the first successful recipe, with an eligibility record that excludes existing accounts and our own tests. This records recipe generation, not proof that someone cooked it. Only a fresh eligible result may be reported; opening a page, signing up, viewing past recipes or saving a recipe is not counted as this event.

With your permission, we keep a validated Google ad click identifier in your browser for up to 30 days, remember this separate choice for up to 180 days and keep the random reported-event reference for up to 30 days to avoid repeat reporting. We use a separate AI measurement cookie prefix. Google receives the random event reference, ad identifiers and technical browser request information. We never send Google Ads your email, name, password, messages, recipe text, photos, allergies or kitchen details. This is separate from the Gemini service that generates your answers. Personalized advertising and enhanced conversions are not enabled.

Choose AI ad choices and Keep off to withdraw. We delete the saved AI ad identifiers, reported-event references and AI measurement cookies, and stop future reporting. If Google’s AI tag has started, the page refreshes to stop it; the app preserves its current draft in your tab where browser storage permits. This does not change your separate purchase or Meta choices or remove an event already sent to Google. Contact us about information already held.

Global Privacy Control keeps this purpose off. If storage or measurement is blocked, you decline, or the page has private sign-in or recipe details in its address or referring address, the visit may not be attributable. These choices never prevent you from making a recipe.

Google’s Privacy Policy · How Google uses information from partner sites

When you buy the kit or a recipe book

When you buy on Whop, Whop tells our server about the purchase. We store the email used at checkout, what you bought, the price, the date and Whop’s payment, membership and user references in private Supabase storage.

We use this to unlock the matching recipes in the Shop-Once Planner when you sign in to a Dorm Chef account with the same confirmed email, and to send one email after each purchase with your download and planner links. Resend sends that email. It is a purchase message, not marketing, and it does not subscribe you to anything.

If a purchase is fully refunded, its recipes stop unlocking through your account. We keep purchase records while needed for order support, refunds and recordkeeping.

If you share on Cooked by students

Sharing is optional and needs a free account. When you share, we store your photos or video, a small cover picture, the Dorm Chef recipe you picked or the recipe you wrote (its name, ingredients, steps, time and servings), your caption, a link to your own TikTok or Instagram post if you add one, whether you entered a challenge, your account ID and your confirmations: that you are 18 or older, that you made the food and took the photos or video, that it shows no one else’s face without their OK and no address, dorm name or room number, and that we may show it.

Your cook profile holds the name you choose to show and, if you add them, your school, a short bio and your Instagram and TikTok handles. It has a public page on thatdormchef.com that lists your live posts. Your handles appear only after Ali has checked they are yours, and only while you choose to show them. We never show your email address or account ID.

If you tap “I’d cook this” on a post, we store that you did, so it counts once. Other people see only the total.

Before upload, your browser redraws photos, which removes hidden data such as location, and blanks the location tags we find in videos. Our server checks each file again and refuses any that still carry a location.

Files wait in private Supabase storage until Ali reviews them. Rejected files are deleted; we keep the reason so you can see it on the share page. Approved posts appear publicly in Cooked by students on thatdormchef.com, on the matching recipe page and on your cook profile, with your profile details, and may be shared on Dorm Chef’s Instagram, TikTok and Pinterest.

You can change your name, school, bio and handles on the share page at any time, or hide your handles. You can ask us to take a post or your whole profile down at any time. We remove it from our website, delete our copy and delete our own social posts of it. Copies other people saved or shared elsewhere are outside our control. An upload that is never finished expires after two hours.

To take down a post or your profile, write to [email protected]

When you ask for help

If you email us, we receive your email address and the information you send. We use this to reply, investigate the issue and help with your order. Please do not send card details, passwords or unnecessary health information.

Your information and choices

We keep other information while needed for your request, order support, consent records and applicable recordkeeping or dispute obligations. We remove it when those purposes end, except information we need to retain.

You can email us to request access, correction or deletion of information we hold, withdraw consent or raise a privacy concern. We may keep a minimal do-not-contact record to respect an unsubscribe request.

Our service providers may process information outside Egypt. Whop manages information in your Whop account under its own policy. Your applicable privacy rights are not limited by this notice.

If you use AI Chef

AI Chef needs a free Dorm Chef account with a confirmed email. In private Supabase storage we keep your AI Chef kitchen (the appliances you can use, allergies, food choices, likes and dislikes, and whether you have a food thermometer and passed Thermometer 101), the meals you save with your ratings, the date your free week started, and a count of what you use. The count records each recipe, question or photo check, its level and its cost to us, with no messages or recipes in it, so daily and monthly limits and our spending caps work.

Your chat stays in your browser tab and is not stored on our servers. To write each answer, our server sends Google’s Gemini API your message, the recent conversation, your kitchen and the ingredients you list. We turn off Gemini’s conversation storage. Under its Gemini API terms, Google keeps these for up to 55 days only to detect abuse and does not use them to train its models.

The camera opens only when you tap. A photo is made smaller on your device, sent once through our server to Gemini for an answer, and never saved by us. Dictation and voice commands use your browser’s own speech recognition (in Chrome, Google processes it), and only the text you send reaches AI Chef. Reading steps aloud happens on your device.

If you buy an AI Chef plan on Whop, Whop tells our server about each payment. We store the email used at checkout, the plan (Home Cook or Master Chef, monthly or a pass), the price, the date and Whop’s payment and membership references, so the plan unlocks for the Dorm Chef account with that email. Whop handles your payment details.

You can delete your AI Chef kitchen and saved meals at any time with “Delete my AI Chef data” in the AI Chef menu. Usage counts, the free-week start date and plan payment records are kept while needed for limits, spending, refunds and recordkeeping, so deleting your AI Chef data doesn’t restart the free week. Deleting your Dorm Chef account removes the free-week date and usage counts with it. AI recipes are new and not kitchen-tested. Calories and allergens are counted in code and can’t promise a meal is allergen-free, so always read labels.

Help bubble and other features

The help bubble on our pages answers from Dorm Chef’s own help pages. What you type into it stays in your browser and is not sent to us.

Optional Google Ads purchase measurement is described above. Dorm Chef has no connected social account metrics integration. Whop’s own checkout technologies are described above.