Privacy Policy

Who we are

Chop it is run by Chop It AI Ltd, a company registered in England and Wales with company number 17145595, whose registered office is at 114 Douglas Road, Surbiton, KT6 7SB, United Kingdom (“Chop it”, “we”, “us”). We are the controller of your personal data under the UK GDPR and the Data Protection Act 2018, registered with the Information Commissioner’s Office under reference ZC217197.

This policy covers the Chop it iOS app, the web app at chopit.app, this website at chop-it.com and the Chop it app in ChatGPT. Contact us about anything in it at hello@chop-it.com.

What we collect and why

Your account

• Your email address, a password (stored only as a secure hash) or your Sign in with Apple details, and your account ID. Apple may give us a private relay address instead of your real one, and your name if you choose to share it.
• When you sign up, which page or campaign brought you to Chop it, so we can see which ways of finding us work.

What you keep in Chop it

• Recipes you save, write, import or have Chef IQ make, with any notes and photos you add.
• For imported recipes: the link to the source, the platform, the creator’s name and handle where available. New imports do not keep the original caption or extracted text with the saved recipe; older imports may still contain it. We use the source as inspiration and put the recipe through Chop it’s checks and format: British English, UK metric measurements and consistent cooking instructions. We keep an “Inspired by” credit and a link back to the source.
• This Week, saved weeks, your pantry and your shopping lists.
• Your food preferences: your diet, Foods to avoid and Dislikes (see Food preferences).
• Photos you give Chop it to read, such as a photo of a recipe, of your cupboard or of a meal to recreate. These are sent to OpenAI to read. We do not keep them in Chop it after the job unless you save one to a recipe. OpenAI’s retention is explained under AI and OpenAI.
• Recipes and weeks you choose to share, and ratings you give.
• Shopping choices. When you shop from a shopping review, we record which supermarket you choose and which list items you look up or tick, with the meals they came from, to see what is popular. These records are not sent to PostHog, Google Analytics or any supermarket. See how long we keep them.

Credits, purchases and Pro

• Your credit balance and a record of the credits you receive and spend, the Chef IQ jobs you run and their results, and your free import allowance.
• Whether you have Pro or a complimentary pass, and the App Store purchase records that RevenueCat passes to us: product, dates and transaction IDs. Apple takes the payment. We never see or store your card details.

Messages you send us

Feedback you send from Settings and emails you send us, with your email address so we can reply.

Technical details

• Your IP address, device type, operating system, app version and similar details that every app and website receives, used to run the service, keep it secure and fix faults.
• A device code: a random code stored on your device that lets Chop it keep what you do before you sign in and protects the service from abuse. It does not identify you by name.
• Product analytics and error reports, described under Analytics and your choices.

Why we use it, and our legal basis

Food preferences

In Food preferences you can pick a diet, choose Foods to avoid and add Dislikes, so recipes and plans leave those foods out. Some of these preferences, for example avoiding gluten or milk, could suggest something about your health, and a diet can sometimes suggest a belief. We treat them with extra care:

• We use them only to tailor recipes, plans and suggestions for you. We never use them for advertising and never sell or share them for anyone else’s purposes.
• When Chef IQ writes or adapts a recipe for you, they are sent to OpenAI with the request so the recipe can leave those foods out. If you use Chop it in ChatGPT with your account linked, ChatGPT can see them when it helps you cook.
• Entering them is your choice and Chop it works without them. You can change or delete them at any time in Food preferences, and deleting your account deletes them.

Chop it leaves out the foods you choose, but it is not built for managing allergies. Always check labels and ingredients. Our Terms of Use say more.

AI and OpenAI

Chop it uses OpenAI to write and rewrite recipes, read recipe pages, posts and photos you import, read photos of your food, check your pantry, get your shopping list ready, tidy and fix recipes, answer you in chat and draw recipe pictures.

Before an AI job starts in the app, Chop it asks permission to send the data it needs to OpenAI. Choose Not now to stop that job without using a credit. You can change this permission in Settings. Turning it off stops new AI jobs; it does not undo work already sent. This setting is separate from analytics and from using Chop it in ChatGPT.

• We send OpenAI only what the job you asked for needs: for example the recipe text, your pantry items, your shopping list, the photo you took or your food preferences. We do not add your account name or email address to these requests. Text and photos you supply may themselves contain personal information.
• OpenAI handles API data under its business terms. API data is not used for training by default, but organisations can opt in. On 27 September 2026, we found optional sharing of API inputs and outputs enabled in our OpenAI organisation, despite our earlier no-training statement. On 28 September 2026, we saved and verified that all three optional-sharing controls were disabled, including API inputs and outputs. We are reviewing the scope of earlier sharing. Disabling sharing does not undo any earlier sharing. Its abuse-monitoring logs may contain request and response content and are normally retained for up to 30 days, unless a longer period is legally required. Separately, some API features retain application data. Chop it turns off stored Responses application state for new requests; this does not erase earlier stored responses or remove abuse-monitoring logs. Stored Responses are retained for at least 30 days by default. Image safety checks may also require retention. See OpenAI’s API data controls. Deleting your Chop it account does not itself erase these supplier records.
• Nothing Chop it does with AI makes decisions about you with legal or similarly significant effects.

Using Chop it in ChatGPT

• Without an account, we receive the request you make (for example “five dinners under 30 minutes”) and a temporary session code, not your wider chat. Drafts and lists made this way are deleted within a day or two.
• If you link your Chop it account, ChatGPT can read the recipes you allow in Settings, your pantry (unless you switch that off in Settings), This Week and your food preferences, and it can save recipes, plans and imports to your account when you ask.
• Your conversation itself is between you and OpenAI, under OpenAI’s privacy policy.

Analytics and your choices

In the app

• Product analytics tells us which screens and features get used, for example that a plan was made or a recipe saved, so we can improve Chop it. It is linked to your device code, and to your account ID when you are signed in. It is never used for ads or to track you across other companies’ apps or websites, and it does not record your screen or what you type.
• When analytics is on, PostHog also receives a report when something goes wrong in the app: the error, the page, and your browser and device details, linked in the same way as the rest of your analytics.
• Web app (chopit.app) and iOS app: analytics is off until you choose Allow on the notice or switch on Share usage analytics in Settings. Until then nothing is stored on your device for analytics.
• Switching analytics off stops it at once and removes its identifier from your device.
• Separately from the switch, our servers keep records of the jobs you run, credits and purchases, because we need them to run and bill the service. We also use some of these records, linked to your account, to understand how features are used. For our PostHog dashboard, we send totals of completed jobs, imports and credits spent, and counts of distinct accounts completing those jobs or imports. We calculate these on our server without sending account identifiers or job contents. The account counts describe completed work, not everyone who browses the app. These totals do not identify who declined analytics. Shopping-choice records are not included. You can object by emailing us; we exclude objecting accounts from future totals.
• If we turn on error reporting (Sentry), a report of what went wrong includes your device and app details and your account ID, but not your email address or a recording of your screen.

What the app stores on your device

When you tap Send list in Shop, the app loads Whisk’s shopping-list script from Whisk’s servers so it can hand your list to Whisk. Loading it means Whisk receives your IP address and browser details. It is not loaded at any other time, and Whisk only receives your shopping list if you choose to send it.

On this website (chop-it.com)

• This website has its own analytics, separate from the app. Nothing is measured until you tap Accept on the cookie banner. After that, PostHog measures visits, records a playback of your visit (pages, clicks, scrolling and pointer movement) and receives a report if the website runs into an error. Text you type into forms is masked before anything is sent, and network requests are not recorded.
• Google Analytics only loads after you tap Accept. It sets Google cookies and measures visits (pages viewed, how you arrived, approximate location). Google Signals and advertising features are off.
• If you decline or make no choice, PostHog and Google Analytics stay off. Your choice is remembered in your browser.
• If you join the website waitlist, we store your email address, the page you arrived on, the referring site and any campaign tags, next to the analytics identifier, so we can tell which campaign a signup came from. We use it to email you when a place opens up. Cloudflare Turnstile checks the form for spam, which sends your IP address to Cloudflare.
• If you leave a work email under “For food businesses” on the homepage, we store it with the same details, on a list separate from the waitlist, and send it to our own inbox so we can reply. We only email you about Chop it 2.1. The same spam check applies.

Companies that help us run Chop it

These companies process personal data on our behalf, under contracts that require them to protect it and use it only to provide their service to us.

Other companies

These companies decide for themselves how they use data, under their own privacy policies:

• Apple, for Sign in with Apple and for App Store purchases, payments and refunds.
• OpenAI, for your conversations when you use Chop it inside ChatGPT.
• Supermarkets, when you follow a link from a shopping review. The link contains the words of that shopping line, such as “free range chicken thighs”. Chop it does not send your Chop it account details, email address or payment details. Your browser or device sends the supermarket the same technical details as it would to any website, such as your IP address and browser or device details, and it may show that you came from chopit.app. If you are signed in to that supermarket, it may recognise you, under its own privacy policy. What happens on its website or app is up to the supermarket.
• Whisk (Samsung Food), only when you choose to send a list there, as described above.
• Instagram (Meta), TikTok and recipe websites, when you import from them. Our servers request the source URL you provide; we do not add your Chop it account details. Our approved Meta oEmbed integration is for displaying public Instagram posts, separate from importing recipe text. New imports do not use or save photos from those sources. You can upload a photo yourself or choose to generate a new recipe image with AI. Older imported recipes may still contain source images while we review them; an image loaded directly from a source site sends your IP address to that site.

We never sell your personal data or share it with advertisers. We may share it if the law requires us to, to protect people’s safety, or with a buyer if the business is ever sold, in which case this policy would continue to apply.

Transfers outside the UK

Some of these companies are in the United States or have staff there. When personal data goes to the US, we rely on the UK-US data bridge where the company is certified to it, and otherwise on the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. Transfers to the EU rely on the UK’s adequacy regulations for the EU. Email us for more detail.

How long we keep it

Deleted data can stay in our encrypted database backups for a short time until they are replaced.

Deleting your account

Delete your account in the app: Settings, Delete account. Or email hello@chop-it.com from the address on your account. Deleting your account:

• deletes your account, recipes, plans, pantry, shopping lists, food preferences and credits from our database straight away;
• keeps accounting records for 6 years from the end of the financial year they relate to, or longer where the law requires, without your name or email;
• leaves recipes you shared at their links, without your account details, unless you ask us to take them down;
• does not cancel a Pro subscription: cancel that in your Apple account.

Some copies held by the companies above, such as photos you uploaded, analytics and subscription records, are not yet removed automatically when you delete your account. Email us and we will remove them within one month. See also how to delete your account.

Your rights

Under UK data protection law you have the right to:

• get a copy of the personal data we hold about you;
• have it corrected if it is wrong;
• have it deleted;
• restrict how we use it;
• receive it in a portable format;
• object to our using it on the basis of legitimate interests, including analytics;
• withdraw your consent at any time, for example by removing your food preferences or switching analytics off, without affecting what we did before.

Many of these you can do yourself in the app. For anything else, email hello@chop-it.com. It is free. We may ask you to confirm who you are, and we reply within one month (up to three for complex requests, in which case we tell you why).

Complaints

If you are unhappy with how we have handled your data, please email us first at hello@chop-it.com. We will acknowledge your complaint within 30 days and tell you what we have done. You can also complain to the Information Commissioner’s Office (the ICO; from 30 September 2026 the Information Commission, still known as the ICO) at ico.org.uk/make-a-complaint.

Children

Chop it is for people aged 13 and over. We do not knowingly collect data from children under 13. If you think a child under 13 has given us personal data, email hello@chop-it.com and we will delete it.

Security

Data travels to and from Chop it encrypted, access to our systems is limited to the people who need it, and each account can only reach its own data. No service can promise perfect security. If a breach puts your data at risk, we will tell you and the ICO as the law requires.

Changes to this policy

We update this policy when what we do with data changes. The date at the top shows the latest version. We will tell you in the app or by email before a change that matters to you takes effect.

Contact

Chop It AI Ltd, registered in England and Wales, company number 17145595.
Registered office: 114 Douglas Road, Surbiton, KT6 7SB, United Kingdom
Email: hello@chop-it.com