Privacy Policy — CHOP

1. Introduction

This Privacy Policy describes how CHOP Inc. ("Company," "we," "us," or "our") collects, uses, and protects your information when you use CHOP.

2. Information We Collect

2.1 Information You Provide

Data Type	When Collected	Purpose
Email address	Registration	Account management, notifications
Name (optional)	Settings	Personalization
Dietary preferences & allergies	Onboarding, settings	Filtering recipes, safety
Household size	Onboarding	Recipe scaling
Photos of fridge/pantry	Using scan feature	Ingredient recognition
Ingredient lists	Manual entry or scan	Recipe generation, pantry tracking
Recipe ratings	Rating recipes	Improving recommendations
Payment information	Subscribing	Payment processing

2.2 Photo Data — Important Details

The photo is transmitted over an encrypted connection (TLS 1.3)
The photo is sent to OpenAI's Vision API for ingredient recognition
The AI returns a list of identified ingredients (text only)
The original photo is deleted from our servers within 24 hours
Only the extracted ingredient list (text data) is saved to your account

We do NOT: store a permanent library of your photos, perform facial recognition, analyze non-food items, share photos with anyone beyond the AI processing provider, or use photos for training AI models or marketing.

3. How We Use Your Information

Provide the Service: recognize ingredients, generate recipes, track pantry
Process photos: identify ingredients via AI vision processing
Personalize: apply dietary filters, scale recipes
Send notifications: expiry reminders, weekly meal suggestions
Process payments via the applicable platform processor
Improve the Service: analytics, bug fixes, feature development

We do NOT sell your information, share food preferences with advertisers, or use your data for targeted advertising.

4. AI Processing

Ingredient recognition: Photos processed by OpenAI Vision API under our data processing agreement. Not used to train models.
Recipe generation: Ingredient lists processed by OpenAI API. Not used for model training.
Nutritional estimates: Generated by AI. Estimates only.

5. How We Share Your Information

Provider	Purpose	Data Shared
Payment Processor (Apple, Google, or Stripe)	Payments	Email, payment details
OpenAI	Ingredient recognition	Photos (transient, under DPA)
OpenAI	Recipe generation	Ingredient lists, dietary prefs
Vercel	Hosting	Technical data
PostHog	Analytics	Anonymized events
Resend	Notifications	Email address
Sentry	Error monitoring	Error data (no PII)

We never share dietary information, food preferences, or ingredient data with food companies, grocery retailers, or advertisers.

6. Data Retention

Data Type	Retention
Photos	Deleted within 24 hours
Ingredient lists	Until you delete or account deletion
Recipes	Until you delete or account deletion
Dietary preferences	Until you change or account deletion
Payment records	As required by law
Deleted accounts	Purged within 30 days

7. Data Security

AES-256 encryption at rest; TLS 1.3 in transit
Photos encrypted during transmission and processing
Row-level security: users access only their own data
Breach notification within 72 hours

8. Your Rights

All Users: Access, correct, and delete your data. Opt out of non-essential emails. Delete account via Profile settings.

California (CCPA/CPRA): Full CCPA rights. We do not sell personal information. Contact: privacy@getchop.app.

EEA/UK (GDPR): Full GDPR rights. Standard Contractual Clauses for transfers. Contact: privacy@getchop.app.

9. Children's Privacy

Not intended for children under 13. No knowing collection of children's data.

10. Camera and Photo Library Permissions

CHOP requests access to your device's camera and/or photo library solely for ingredient scanning. You may revoke these permissions at any time through your device settings. The Service will still function with manual ingredient entry if camera access is denied.

11. Cookies

Essential cookies only (auth, session). Analytics with opt-out. No advertising cookies. See our Cookie Policy.

12. Changes

30 days' notice for material changes.

13. Contact

Email: privacy@getchop.app
Data Protection: dpo@getchop.app