Privacy Policy

This Privacy Policy explains how ChiliSense ("we", "us") collects, uses, and protects information when you use our website and the AI-powered chili pepper detection and health-classification service (the "Service").

We designed ChiliSense to collect only the information necessary to deliver, secure, and improve the Service. We do not sell your data and we do not use your uploaded images to train our models without your explicit, opt-in consent.

We collect three categories of information:

• Account data. Your name, email address, and a hashed password when you register. We never store passwords in plain text.
• Content you submit. Photographs you upload for analysis and any metadata embedded in them (e.g. EXIF), the prediction outputs returned by our models, and any reports you generate.
• Operational data. IP address, browser type, request timestamps, and high-level activity logs (sign-in, sign-out, analyses run) used for security, abuse prevention, and basic usage analytics.

• To run the analysis you request and persist the resulting report to your account.
• To authenticate you and keep your account secure.
• To monitor service health, detect abuse, and prevent fraud.
• To respond to your support requests.
• To improve the Service in aggregate (e.g. counting how many predictions ran last week) — never tied to individual identity.

Your uploaded images are not used to train, fine-tune, or evaluate our machine-learning models by default. Training datasets are sourced from licensed public datasets and curated agricultural-research material.

If we ever offer an opt-in program to contribute your images to model improvement, it will be explicit, separate from this Policy, and revocable.

Account credentials are stored as salted hashes. Uploaded images are stored on encrypted object storage with access scoped to your user ID. Prediction records are stored in a managed PostgreSQL database with at-rest encryption.

We use industry-standard transport encryption (TLS) for all data in transit. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you without undue delay.

We share information only in these limited circumstances:

• Sub-processors. We use vetted third-party providers for hosting, object storage, the database, and email delivery. They are contractually bound to handle your data only on our instructions.
• Legal obligation. We may disclose information if compelled by valid legal process.
• Business transfer. If ChiliSense is acquired or merges, user data may transfer subject to this Policy.

We never sell your personal information.

We retain account data for as long as your account is active. Uploaded images and prediction records are retained until you delete them or close your account, whichever happens first. Activity logs are retained for up to 12 months for security and audit purposes.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and associated data.
• Export a copy of your reports.
• Object to or restrict certain processing activities.

You can delete individual reports from the Reports page. For full-account deletion or other requests, email hello@chilisense.app.

We use a single httpOnly session cookie to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.

We may update this Policy from time to time. We will revise the "Last updated" date at the top of the page and, for material changes, give you reasonable advance notice.