Effective Date: September 30, 2026
This Privacy Policy explains how ChoppedFork collects, uses, stores, shares, and protects personal data when you use the ChoppedFork website, mobile applications, platform, integrations, and related services (collectively, the “Service”).
ChoppedFork is currently operated as a private, independent project and is currently provided free of charge.
ChoppedFork currently does not charge subscription fees, display advertising, or use personal data for targeted advertising.
The Service and its business model may change in the future. If advertising, advertising-related tracking, or other materially different processing of personal data is introduced, this Privacy Policy and other applicable disclosures will be updated and consent will be obtained where required by law.
This Privacy Policy should be read together with the ChoppedFork Terms of Service.
For the purposes of applicable data-protection legislation, including the General Data Protection Regulation (“GDPR”), the person responsible for determining the purposes and means of processing personal data through ChoppedFork is the data controller.
Data Controller:
Gustav Jansson
Email:[email protected]
ChoppedFork is currently operated as a private, independent project and does not currently operate through a registered company or organization.
The personal data processed by ChoppedFork depends on how you use the Service and which optional features or integrations you choose to enable.
When you create or use an account, ChoppedFork may process:
Where password-based authentication is supported, passwords are not stored in plain text. Authentication credentials are protected using appropriate cryptographic mechanisms.
If authentication is handled through an identity provider, that provider may process authentication credentials separately from ChoppedFork.
ChoppedFork may allow you to sign in using an external identity provider, such as Google.
If you choose this method, ChoppedFork may receive information necessary to identify or create your account, such as:
ChoppedFork does not receive your Google password.
The external provider processes information according to its own privacy policy and terms.
When you create or import recipes, ChoppedFork may process:
Recipe content may contain personal information if you voluntarily enter such information.
Users should avoid including unnecessary personal information about themselves or other people in recipes.
Where supported, ChoppedFork may process:
These functions are used to provide and personalize the Service.
If you create or join a household, ChoppedFork may process:
This information is used to provide household functionality.
Household members may share information with one another through the Service.
This may include:
Information shared within a household may be visible to all current members of that household.
You should therefore only enter information into a household that you are comfortable sharing with its members.
ChoppedFork may process pantry information such as:
Pantry information is used to provide the shared household pantry and related functionality.
ChoppedFork may process:
This information is used to provide shared household shopping-list functionality.
ChoppedFork may process:
This information is used to provide shared household meal planning.
When a household owner creates an invitation link, ChoppedFork may process:
Household invitation links normally expire after seven (7) days unless otherwise specified by the Service.
ChoppedFork may provide features that extract or interpret recipe information using automated or AI-assisted processing.
Depending on the feature you use, ChoppedFork may process:
These features may use technologies such as speech recognition, optical character recognition, language models, or other machine-learning systems.
Where processing is performed using ChoppedFork-operated infrastructure, the submitted information is processed within that infrastructure.
If a feature uses an external service, the relevant data may be transmitted to that provider as described in this Privacy Policy and any feature-specific disclosure.
ChoppedFork does not currently use User Content to train a general-purpose AI model.
ChoppedFork may allow users to create personal API tokens or other credentials for integrations.
ChoppedFork may process information including:
Personal API-token values are intended to be secret credentials.
Where supported, ChoppedFork stores a cryptographic representation of the token rather than retaining the reusable plaintext token for authentication.
ChoppedFork may allow you to connect external applications, AI assistants, or services using technologies such as:
Examples may include Claude or other compatible AI assistants and applications.
Connecting an external service is optional.
When you choose to connect and use an external service, ChoppedFork may make data available to that service in response to authorized requests.
Depending on the permissions granted and the action requested, this may include:
Shared household content is protected by additional household-level permission controls.
ChoppedFork does not make shared household content available to external AI integrations unless every current member of that household has enabled external AI access for the household.
This may apply to shared data such as pantry information, shopping lists, meal plans, and recipes belonging to other household members.
Each household member controls only their own permission. A household owner cannot grant external AI permission on behalf of another member.
Any household member may withdraw their permission at any time. Withdrawal blocks further external AI access to shared household content until every current household member has enabled access again.
If a new member joins a household, external AI access to shared household content remains blocked until the new member has also enabled external AI access.
Limited household metadata may still be made available where necessary to identify the household, determine access permissions, or explain why shared household content is unavailable.
Some integrations may also be authorized to create, update, or delete data.
ChoppedFork may use separate permissions or scopes for different categories of access.
ChoppedFork does not automatically provide an external AI service with unrestricted access to all ChoppedFork data merely because the integration exists.
Access is intended to be limited by the integration’s authorization, available tools, the user’s permissions, and the requests made through the integration.
When an independent external service receives information through an integration, that service may process the information under its own privacy policy and terms.
For example, if you choose to connect Claude or another external AI service, information you intentionally make available through that integration may be processed by the provider of that service.
ChoppedFork does not control the independent processing practices of an external service selected by the user.
You should review the privacy policy of any external service before connecting it.
Core ChoppedFork application data, such as account information, recipes, pantry information, shopping lists, meal plans, and household data, is stored in ChoppedFork’s backend and database infrastructure.
When you connect and use an external service through MCP or another supported integration, ChoppedFork may retrieve authorized data from its backend and provide the requested information to that external service.
The information made available depends on the permissions granted, the tools available to the integration, the resource involved, and the action requested by the user.
Connecting an external integration does not by itself create a separate application-data store within ChoppedFork for that integration.
Where an authorized integration performs a write operation, such as creating, updating, or deleting a recipe, pantry item, shopping-list item, or meal-plan entry, the resulting change may be stored in ChoppedFork’s backend in the same way as a corresponding action performed directly through the ChoppedFork application.
Technical information about integration requests may still be processed or retained for security, troubleshooting, abuse prevention, and reliable operation of the Service, as described elsewhere in this Privacy Policy.
An external service that receives information through an authorized integration may independently store or otherwise process that information according to its own privacy policy and terms.
Where OAuth or similar authorization is supported, ChoppedFork may process information necessary to establish and manage the connection, such as:
Such information is used only as necessary to authenticate, authorize, maintain, and secure the requested integration.
ChoppedFork may process technical information necessary to operate, monitor, and protect the Service.
This may include:
This information is used for security, abuse prevention, troubleshooting, and reliable operation of the Service.
ChoppedFork does not currently use advertising identifiers for targeted advertising.
When you request a password reset, ChoppedFork or its authentication system may process:
Password-reset tokens are temporary.
ChoppedFork may process your email address and related delivery information when sending transactional or service-related email.
This may include:
ChoppedFork may process personal data for the following purposes.
Including:
Including:
Including:
ChoppedFork does not currently use personal data for advertising or targeted advertising.
ChoppedFork processes personal data only where a lawful basis exists under applicable data-protection law.
Depending on the processing activity, ChoppedFork may rely on the following legal bases.
Processing may be necessary to provide the Service requested by you, including:
ChoppedFork may rely on legitimate interests for purposes such as:
Where legitimate interests are relied upon, ChoppedFork will consider the interests, rights, and freedoms of the individuals concerned.
ChoppedFork relies on consent where shared household content is made available to external AI integrations.
Each household member may choose whether to allow this processing. Refusing or withdrawing this consent does not prevent the member from using the ordinary ChoppedFork household features.
Shared household content remains unavailable to external AI integrations unless every current household member has provided the required consent.
Where required, ChoppedFork may ask for consent before particular processing occurs.
This may apply, for example, to future non-essential tracking technologies or other processing where applicable law requires consent.
Where processing is based on consent, you may withdraw that consent subject to applicable law.
ChoppedFork may process personal data where necessary to comply with a legal obligation.
ChoppedFork processes information necessary to allow users to share information within households.
When you join a household, information intentionally shared within that household may become available to other members.
This may include recipes, pantry information, shopping lists, and shared meal-planning information.
ChoppedFork does not make household information available to unrelated ChoppedFork users merely because the information is stored in ChoppedFork.
Access to information by members of a household within ChoppedFork is separate from access by external AI assistants or other external integrations.
Shared household content is not made available to external AI integrations unless every current member of the household has enabled external AI access for that household.
Each household member controls only their own permission. A household owner cannot grant external AI access on behalf of another member.
Any household member may withdraw their permission at any time. If any current member has not enabled external AI access, shared household content remains unavailable to external AI integrations.
If a new member joins the household, external AI access to shared household content remains blocked until the new member has also enabled external AI access.
AI-assisted features may process User Content to perform a task requested by the user.
Examples include extracting recipe information or assisting with organization, meal planning, or shopping-list creation.
AI-generated results may contain errors.
ChoppedFork does not use AI-assisted output to make decisions that produce legal effects or similarly significant effects concerning users.
ChoppedFork does not currently use User Content to train a general-purpose AI model.
If this practice changes materially in the future, this Privacy Policy will be updated before such processing where required by applicable law.
If you choose to connect an external AI assistant or application, data requested through that integration may be transmitted to the external provider.
The categories of information transmitted depend on:
ChoppedFork intends to provide only the access necessary to perform authorized actions.
However, once data has been provided to an independent third-party service at your request, that provider’s own privacy practices may apply.
Revoking or disconnecting an integration, where supported, prevents future authorized access through that credential or connection.
Separately, withdrawing external AI permission for a household blocks future access to protected shared household content, even if an external integration remains connected.
You may need to contact the external provider separately to exercise rights concerning data held by that provider.
ChoppedFork may process recipes and other information imported by users.
Users are responsible for ensuring that imported content can lawfully be stored and processed.
ChoppedFork does not generally verify the copyright or ownership status of imported recipes or media.
Users should not use the Service to store or process content that they do not have the right to use.
ChoppedFork does not sell personal data.
ChoppedFork does not currently use personal data for targeted advertising.
Personal data may be disclosed or made available to the following categories of recipients where necessary.
Information intentionally shared within a household may be visible to members of that household.
ChoppedFork may use service providers necessary to operate the Service, including providers for:
Only information reasonably necessary for the relevant service should be provided to such providers.
Where a service provider processes personal data on behalf of ChoppedFork, appropriate contractual and legal safeguards will be used where required.
If you choose an external login provider such as Google, information necessary for authentication may be exchanged with that provider.
If you choose to connect an external AI assistant or other application, information requested through the authorized integration may be disclosed to that provider.
Examples may include Claude or another MCP-compatible application.
The provider’s independent terms and privacy practices may then apply.
ChoppedFork may disclose personal data where required by applicable law or a valid legal request from a competent authority.
ChoppedFork may use a third-party email-delivery provider, including Resend or a replacement provider, to send transactional emails such as:
Only information necessary to deliver and operate these messages will be shared with the relevant provider.
If the email provider or technical infrastructure changes, this Privacy Policy may be updated where necessary.
ChoppedFork may use third-party providers, such as Cloudflare or similar services, for purposes including:
Such providers may process technical information such as IP addresses and request metadata as necessary to provide their services.
Some service providers or user-selected external integrations may process personal data outside Sweden and, in some cases, outside the European Economic Area (“EEA”).
Where ChoppedFork is responsible for a transfer of personal data outside the EEA, an appropriate legal transfer mechanism will be used where required by applicable law.
This may include:
Where you independently choose to connect an external service, that provider’s privacy policy may contain additional information regarding its international data transfers.
ChoppedFork retains personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.
Account data is generally retained while the account remains active.
User Content is generally retained until:
Security logs and technical records may be retained for a limited period where necessary for security, troubleshooting, abuse prevention, or legal purposes.
When an account is deleted, ChoppedFork will generally delete associated personal data and User Content from the active Service.
Some information may remain temporarily in:
Such information will be deleted or overwritten according to applicable retention periods and technical processes.
Certain information may be retained where necessary to:
You can delete your ChoppedFork account using the account-deletion functionality provided by the Service.
Account deletion is intended to permanently remove your account and associated personal data from the active Service.
This may include:
Deleting an account may affect information shared with other household members.
Some information may remain temporarily in backups, logs, or technical systems.
Once deleted, an account generally cannot be recovered.
Deleting your ChoppedFork account does not automatically cause independent third-party services that you previously connected to delete information they already received.
You may need to contact those providers separately.
If you cannot delete your account through the Service, you may contact ChoppedFork:
Email:[email protected]
ChoppedFork may use cookies, browser storage, application storage, or similar technologies that are necessary for:
ChoppedFork does not currently use advertising cookies or targeted-advertising technologies.
If non-essential analytics, advertising, or similar tracking technologies are introduced in the future, this Privacy Policy will be updated and consent will be obtained where required by applicable law.
ChoppedFork does not currently display advertising and does not currently use personal data for targeted advertising.
ChoppedFork may introduce advertising or other forms of monetization in the future.
If advertising is introduced:
A future possibility of advertising does not mean that ChoppedFork currently uses advertising or advertising tracking.
ChoppedFork takes reasonable technical and organizational measures to protect personal data.
These measures may include:
However, no internet service can guarantee absolute security.
Users are responsible for protecting account credentials, personal API tokens, and other credentials they control.
If ChoppedFork becomes aware of a personal-data breach, the incident will be assessed and handled in accordance with applicable data-protection law.
Where legally required, ChoppedFork will notify the relevant supervisory authority and affected individuals.
Under the GDPR, certain personal-data breaches must be reported to the supervisory authority without undue delay and, where applicable, within 72 hours after the controller becomes aware of the breach.
Depending on the circumstances, you may have the following rights.
You may request information about whether ChoppedFork processes personal data about you and request access to that data.
You may request correction of inaccurate or incomplete personal data.
You may request deletion of personal data where the GDPR gives you that right.
You may request restriction of processing in certain circumstances.
Where applicable, you may request personal data that you have provided to ChoppedFork in a structured, commonly used, and machine-readable format.
Where processing is based on legitimate interests, you may have the right to object depending on the circumstances.
Where ChoppedFork relies on consent for a particular processing activity, you may withdraw that consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
These rights are subject to the limitations and conditions provided by applicable law.
To exercise your rights or ask questions about your personal data, contact:
Email:[email protected]
You can also permanently delete your ChoppedFork account yourself while signed in. See the account deletion instructions for details about how deletion works and what data is affected.
We may take reasonable steps to verify that a request is made by the person to whom the personal data relates. Where possible, verification will be performed through the authenticated ChoppedFork account or the contact information already associated with that account. If we have reasonable doubts about the identity of the requester, we may request additional information necessary to verify the request. We will not request more personal data than is reasonably necessary for this purpose.
Requests will be handled in accordance with applicable law.
Information regarding GDPR rights will generally be provided free of charge, subject to applicable legal exceptions.
If you believe that ChoppedFork processes your personal data unlawfully, you may contact ChoppedFork first using the contact information above.
You also have the right to lodge a complaint with the relevant supervisory authority.
For Sweden, the relevant authority is:
Integritetsskyddsmyndigheten (IMY) Swedish Authority for Privacy Protection
ChoppedFork is intended for users aged 13 and older.
ChoppedFork is not directed to children under the age of 13.
ChoppedFork does not knowingly seek to collect personal data from children under 13.
Consent requirements for minors may differ depending on the country in which the user lives. Where applicable law requires authorization from a parent or guardian for particular processing, such authorization may be required before that processing can take place.
Some optional features, including external AI integrations, may be restricted where necessary to comply with applicable age and consent requirements.
If you believe that a child has provided personal data to ChoppedFork in circumstances where it should not have been collected, please contact:
Email:[email protected]
ChoppedFork may use automated or AI-assisted systems to help provide features requested by users.
ChoppedFork does not currently use solely automated decision-making that produces legal effects or similarly significant effects concerning users within the meaning of applicable data-protection law.
ChoppedFork may update this Privacy Policy from time to time.
Changes may be necessary because of:
The updated Privacy Policy will include a new effective date.
Where appropriate, ChoppedFork may notify users of significant changes through the Service, by email, or by other reasonable means.
Where a change introduces materially different processing that requires consent, ChoppedFork will obtain consent where required by applicable law.
Where personal data will be processed for a materially new purpose, ChoppedFork will provide appropriate information before that processing where required by applicable law.
Questions or requests concerning this Privacy Policy or your personal data may be sent to:
Data Controller: Gustav Jansson
Email:[email protected]
ChoppedFork is currently operated as a private, independent project in Sweden and does not currently operate through a registered company or organization.
© 2026 ChoppedFork. All rights reserved.