Privacy

Effective 26 September 2026. This notice explains what Chop Chop stores, why, and for how long.

Who is responsible

Chop Chop is run by Ashish Dhiman, an individual based in Belgium, as part of Thunderstack AI. Ashish Dhiman is the data controller for Chop Chop.

What Chop Chop stores

• Your Google account ID and email address. Google sends these when you sign in. Chop Chop never sees your Google password.
• Your meal library. This includes the meals, ingredients, plans, portions, and prep tasks you save.
• A sign-in cookie. It keeps you signed in for up to 30 days. It is required for the service to work.
• Invites and shared planning. If you invite someone to share planning, Chop Chop stores the email address you enter and the plans you choose until the invite is accepted, declined, cancelled, or ends after 14 days. When someone accepts, both of you can see and change the shared planning, and each of you can see the other's email address.

Chop Chop has no analytics, no advertising, and no tracking cookies. Meal image links you add are loaded by your own browser from the site you linked.

Why it is used

Chop Chop uses this information only to sign you in and to save your meal library for you. This is necessary to provide the service you ask for. Your information is not sold, shared with advertisers, or used for marketing.

Where it is stored and who helps

Chop Chop runs on a Hetzner server in Germany. Cloudflare provides the domain name service, traffic routing, and network security. Google provides sign-in. Cloudflare and Google may process network information, such as your IP address, under their own privacy terms, and may do so outside the European Economic Area.

How long it is kept

• Your account and library stay until you delete your account.
• Select Delete account in Chop Chop to delete your account, library, sign-ins, and invites at once.
• Shared planning stays while at least one person still uses it. It is deleted when the last person leaves or deletes their account.
• Server backups are deleted within eight days. A deleted account can remain in a backup until then.

Your rights

You can ask to see, correct, export, or delete your information, or object to how it is used. Email privacy@thunderstackai.com. You can also complain to the Belgian Data Protection Authority or the data protection authority where you live.