Privacy Policy
Effective date: 2026-08-31
Who operates Ehfina
Ehfina is operated by ehfina, LLC. For privacy-related questions, contact us at support@ehfina.com.
What Ehfina is
Ehfina is a personalized recommendation service that helps your AI assistant understand your tastes and preferences. You maintain a private taste profile, record dining experiences, and receive recommendations that are shaped by your actual preferences.
What Ehfina is not
Ehfina does not store your conversations with ChatGPT, Claude, or any other AI assistant. When you connect an AI assistant to Ehfina, only the specific information you or your assistant choose to share through individual tool calls is transmitted to Ehfina. Your chat history, session data, and unrelated conversation content remain entirely within your AI assistant provider and are never sent to Ehfina.
Information we collect
Account information
When you create an Ehfina account, we collect:
- Email address — used as your account identifier and for authentication
- Authentication credentials — managed by our identity provider (FusionAuth, self-hosted). We store hashed passwords and session tokens. We never see or store your password in plain text.
Taste profile and preference data
When you interact with Ehfina through your AI assistant, we store:
- Direct preference statements — things you explicitly tell your assistant about your tastes (e.g., "I prefer bold, spice-forward dishes")
- Dining experiences — records of meals and restaurant visits you choose to log, including restaurant name, date, participants, and your feedback
- Experience feedback — ratings, comments, and corrections you provide about recorded experiences
- Recommendation records — recommendations that were made for you and their outcomes
What we do not collect
- Your complete ChatGPT or Claude conversation history
- Browsing history or location tracking data
- Payment or financial information (not yet implemented)
- Social media profiles or contacts
- Any data from sources you have not explicitly shared with Ehfina
How we use your information
We use your information for these specific purposes:
- Providing the service — storing your taste profile and experiences so your AI assistant can generate personalized recommendations
- Enforcing permissions — managing sharing groups, invitations, and consent so only authorized people can see the data you've shared
- Operating and maintaining the service — infrastructure, security, error handling, and performance monitoring
- Complying with legal obligations — where required by law
We do not use your data for:
- Advertising or marketing
- Sale to third parties
- Training AI models
- Building shared or cross-user models
- Product improvement or analytics beyond basic operational monitoring
Data sharing and processors
Your data is shared with the following categories of service providers:
| Provider | Purpose | Data accessible |
|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure hosting (compute, storage, databases) | All data stored in Ehfina, at the infrastructure level (encrypted at rest and in transit) |
| FusionAuth (self-hosted) | Identity and authentication | Account credentials, email, session state |
| Your chosen AI assistant (ChatGPT, Claude, or other) | MCP client — sends tool call requests and receives results | Only the specific data exchanged through individual tool calls that your assistant initiates |
We do not sell personal information. We do not share data with third parties for advertising purposes.
Data retention
| Data category | Retention period |
|---|---|
| Account profile, taste data, experiences, feedback, recommendations | Until you delete your account |
| Group, sharing, and consent metadata | Until you delete your account or leave a group |
| Audit events | 400 days |
| Idempotency records | 30 days |
| Pending invitations | 30 days after expiry |
| Deletion receipts | Indefinitely (proof of deletion, contains no personal content) |
| Application logs | 14 days |
| AI conversation content | Not stored by Ehfina — managed entirely by your AI assistant provider |
| Exported data | Not stored — generated on demand and returned directly to you |
| Backups (database) | 35 days rolling (point-in-time recovery) |
| Backups (identity provider) | 90 days current version, 30 days non-current version |
When you delete your account, your personal data is permanently removed from active storage and derived indexes. Backup copies may persist temporarily within their retention windows but are protected by a reconciliation process that prevents deleted data from being restored to service.
Your rights and controls
- Export your data — download a complete, machine-readable copy of everything Ehfina stores about you at any time
- Correct your data — update or correct information in your taste profile or recorded experiences
- Disconnect AI assistants — revoke access for any connected ChatGPT or Claude session at any time. Revocation takes effect immediately.
- Withdraw sharing consent — leave a sharing group or revoke consent for specific shared data. This immediately stops the other group member's access to the data covered by that consent.
- Delete your account — permanently delete your Ehfina account and all associated data. You will receive a deletion receipt confirming what was removed.
Security
Ehfina protects your data through:
- TLS encryption for all data in transit
- Encryption at rest for stored data
- OAuth 2.0 authentication with short-lived tokens
- Least-privilege access controls
- Automatic token expiration and revocation
- Security monitoring and incident detection
For more details, see our Security page.
International data processing
Ehfina is hosted in the United States (AWS us-east-2 region). If you access Ehfina from outside the United States, your data will be processed in the United States. By using Ehfina, you consent to this processing.
Children's privacy
Ehfina is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us immediately at support@ehfina.com.
Changes to this policy
We may update this privacy policy from time to time. If we make material changes, we will notify you by updating the effective date and, where appropriate, providing additional notice. Continued use of Ehfina after changes take effect constitutes acceptance of the updated policy.
Contact us
For privacy-related questions, data requests, or concerns:
- Email: support@ehfina.com
- Security concerns: security@ehfina.com
Distinction between AI provider and Ehfina data
When you use Ehfina through ChatGPT or Claude, two separate data flows exist:
- Your conversation with the AI assistant — this includes your chat messages, the assistant's responses, and the full context of your conversation. This data is processed and stored entirely by your AI assistant provider (OpenAI or Anthropic) under their own privacy policies. Ehfina has no access to this data.
- Data exchanged through Ehfina tool calls — when your AI assistant calls an Ehfina tool (e.g., to record an experience or retrieve your taste profile), only the specific data required for that tool call is transmitted to Ehfina. This is typically limited to: your preference statements, specific experience details, restaurant information, and recommendation context. Ehfina processes and stores only this narrow data exchange.
Enabling the Ehfina connector does not give Ehfina access to your entire chat history or ongoing conversation. Each tool call is a discrete, targeted data exchange.