Privacy Policy
This Privacy Policy explains how CHUD, operated by Hubert Phan and Khoi Tran doing business as CHUD (“CHUD,” “we,” “us,” or “our”), collects, uses, shares, and protects information when you use CHUD, chudapp.com, and related services.
For privacy questions, data access requests, correction requests, deletion requests, or privacy-rights requests, email [email protected].
Scope
This Policy applies to CHUD’s app, website, support channels, account features, meal logging features, AI processing features, group features, subscription features, moderation workflows, analytics, diagnostics, and related services.
This Policy does not replace the Terms of Service. Your use of CHUD is also governed by the Terms of Service. Some third-party services, app stores, payment processors, identity providers, and AI providers may also process information under their own terms and privacy policies.
Age restriction
CHUD is intended only for users who are at least 18 years old. Do not create an account or use CHUD if you are under 18.
If we learn that a person under 18 has provided personal information to CHUD, we may delete the account and related information where reasonably possible, subject to legal, safety, security, billing, fraud-prevention, backup, and dispute-resolution needs. If you believe a person under 18 has provided information to CHUD, contact [email protected].
Information we collect
We collect information you provide directly, including account details, email address, username, password-authentication information handled through our authentication provider, profile information, profile photo, phone number if provided, meal photos, meal titles, captions, meal type, Meal Source labels, place or source context, notes, reactions, group activity, support messages, beta application details, moderation reports, and other content you submit.
We collect meal-related information needed to operate CHUD, including uploaded meal images, image paths, thumbnails, analysis images, timestamps, captured local time, timezone, capture-time source, meal identifiers, user identifiers, meal-source identifiers, analysis status, generated or structured meal-analysis data, CHUD metrics, reason codes, verdicts, roasts, weekly report data, group roundup data, and related app-history records.
We collect app activity and technical information needed to run, secure, debug, and improve CHUD, including login activity, uploads, feature usage, subscription status, device type, operating system, app version, browser type, crash reports, performance logs, diagnostic events, security logs, IP address, approximate region inferred from IP address, timestamps, push notification tokens, and analytics events.
We collect payment and subscription information from payment processors and app stores, including subscription status, plan type, purchase path, receipts, transaction identifiers, renewal state, cancellation state, limited billing metadata, and information needed to provide paid features, handle billing support, prevent fraud, and comply with tax, accounting, and legal obligations. CHUD does not store full payment card numbers.
We may collect information from third-party login, app-store, payment, analytics, infrastructure, support, error-monitoring, AI, and notification providers when needed to operate CHUD. This may include identifiers, authentication status, payment status, technical logs, diagnostic information, and service-operation records.
Camera, photos, notifications, and device permissions
CHUD may request access to your camera, photo library, media library, notifications, or other device features only as needed for app features you choose to use. For example, CHUD uses camera or gallery access to let you capture or select meal photos, and notification permissions to send push notifications if enabled.
You can usually change device permissions through your device settings. If you disable permissions, some CHUD features may stop working or may work with reduced functionality.
On-device safety checks
Before CHUD uploads a selected meal image, the app checks the image on your device before upload for prohibited sexual content.
The image used for this check stays on your device before upload. A prohibited result or repeated classifier failure stops the upload.
Meal photos and visible information
Meal photos may contain more than food. They may include people, faces, hands, receipts, addresses, payment details, packaging, screens, background objects, restaurant names, workplace details, home details, location clues, dietary information, health-related context, or other personal or sensitive information.
Do not upload meal photos, notes, receipts, screenshots, or other content containing private, sensitive, confidential, unlawful, or non-consensual information that you do not want processed by CHUD, its service providers, AI providers, or other users who can access the content through group features.
CHUD is not designed to identify people in meal photos, perform facial recognition, infer protected traits, or make medical, health, dietary, or nutrition decisions. However, if you include visible personal or sensitive information in a meal photo or note, that information may still be stored, processed, reviewed, or displayed as part of the app features you use.
How CHUD uses information
CHUD uses information to create and manage accounts, authenticate users, store meal history, upload and display images, generate signed image access, identify visible food items, create meal analysis, calculate CHUD metrics, generate verdicts and roasts, prepare weekly reports, operate profile and dossier features, operate group features, provide subscriptions, send notifications, respond to support requests, process privacy requests, investigate abuse, enforce terms, maintain security, debug failures, improve reliability, analyze product usage, and comply with legal obligations.
CHUD may use meal photos, meal metadata, captions, Meal Source labels, meal type, timestamps, timezone, prior meal history, structured analysis results, and related account activity to produce app features. These features may include Chudness metrics, reason codes, verdict labels, roasts, weekly reports, group roundups, group bulletins, profile stats, history views, and other product surfaces.
Exact scoring formulas, factor weights, model prompts, internal moderation rules, abuse-detection logic, and proprietary implementation details are part of CHUD’s product system and may not be disclosed in full. This Policy describes the categories of information used and the purposes for which they are processed.
Meal photos and AI processing
CHUD may use third-party AI providers, including Google Gemini, to process meal photos, captions, Meal Sources, timestamps, meal types, prior meal history, structured meal data, and related context. AI processing may be used to identify visible food items, extract structured evidence, support CHUD metrics, generate verdicts and roasts, prepare reports, operate group features, retry failed analysis, and improve reliability.
AI-generated and AI-assisted output may be wrong, incomplete, delayed, repetitive, unexpected, offensive to some users, or based on limited visual evidence. CHUD does not guarantee that AI output, scores, labels, verdicts, roasts, reports, or summaries will be accurate, complete, appropriate, safe, or suitable for any particular person or situation.
CHUD’s AI and scoring features are for entertainment and product functionality. They are not medical, health, nutrition, allergy, food-safety, weight-loss, dietary, mental-health, legal, financial, employment, housing, insurance, credit, or other professional advice.
CHUD’s public production build is intended to use paid AI API services where available. When CHUD uses paid Google Gemini API services, Google states in its Gemini API terms that it does not use prompts, files such as images, or generated responses to improve Google products, while still processing data as needed to provide, secure, monitor, debug, and comply with the service and applicable law.
At the time this Policy is published, CHUD may use Google Gemini through unpaid API quota in beta, test, development, or pre-launch environments. For unpaid Gemini API use, Google’s applicable terms may permit Google to use submitted content and generated responses to provide, improve, and develop Google products and services, and human reviewers may review API input and output. If you are using a beta, test, development, or pre-launch version of CHUD, do not upload sensitive, confidential, or personal information that you do not want processed under those provider terms.
CHUD does not currently use meal photos to train CHUD-owned AI models. CHUD does not knowingly opt in to third-party provider programs that use production user meal photos for provider model training or provider product improvement. If this changes, we will update this Policy and provide any notice or choice required by applicable law.
Groups and visibility
If you join or use a CHUD group, other group members may see information associated with that group, depending on the feature and your settings. This may include meal posts, meal photos, captions, Meal Sources, meal type, profile information, username, profile photo, reactions, witnessed activity, group activity, generated commentary, summaries, roundups, bulletin-style content, and related activity.
Group content may be visible to other users in that group. Other users may save, screenshot, copy, discuss, or share what they can see. CHUD cannot control what other users do with information after they view it.
Group content and related activity may also be accessed by CHUD and its operators, contractors, service providers, or moderation systems when reasonably needed for support, safety review, abuse investigation, content moderation, legal compliance, security, service operations, or enforcement of the Terms of Service.
Moderation reports and safety reviews
If you send, receive, trigger, or are included in a moderation report, CHUD may collect and review report text, reported content, meal photos, generated commentary, group context, account identifiers, user identifiers, timestamps, technical logs, prior reports, actions taken, and supporting information needed to investigate and respond.
We use moderation information to enforce rules, protect users, investigate abuse, improve safety systems, respond to unlawful activity, preserve evidence, restrict features, remove content, suspend accounts, terminate accounts, and comply with legal obligations.
CHUD may use automated tools, manual review, user reports, provider safety signals, or a combination of these methods to detect, investigate, and respond to abuse, unsafe content, policy violations, security events, and misuse of CHUD.
Submitting a report creates one least-data moderation snapshot for that report. The snapshot may contain only the reported item, necessary identifiers and group context, the report reason, timestamps, and a reduced image when the reported item requires visual review.
Snapshots exclude unrelated thread history, full-resolution images, push tokens, device data, raw GIF searches, and unrelated account history.
Only allowlisted named moderation operators using multi-factor authentication may review permitted evidence. Every evidence read and moderation action is audited.
GIPHY processing
When you search for or post a GIF Comment, GIPHY receives the search or media request and related technical information under GIPHY's own terms and privacy practices.
CHUD stores the selected GIPHY ID and required attribution metadata for the GIF Comment. CHUD does not ordinarily copy GIPHY media into CHUD image storage or retain raw GIF search terms.
Payments and subscriptions
Payments and subscriptions may be processed by Apple App Store, Google Play, Stripe, or another payment provider depending on your purchase path, platform, and available checkout flow.
CHUD does not store full payment card numbers. Payment processors may provide us with subscription status, receipts, transaction identifiers, plan details, renewal state, cancellation state, refund state, chargeback information, tax information, and limited billing metadata needed to operate paid features, prevent fraud, comply with law, and support billing issues.
Deleting your CHUD account or uninstalling the app may not automatically cancel a subscription managed by Apple, Google, Stripe, or another payment provider. You may need to cancel through the platform or payment provider that processed your subscription.
Providers we use
CHUD may use service providers, processors, contractors, infrastructure providers, app platforms, and other third parties to operate the app and website. These may include Supabase for authentication, database, storage, realtime, and backend services; Google Gemini for AI processing; Stripe for some payments; Apple App Store for iOS subscriptions and app distribution; Google Play for Android subscriptions and app distribution; Sentry for error monitoring; PostHog for product analytics; Expo for push notification infrastructure; Giphy for GIF reaction features where enabled; Google and Apple for sign-in or platform services; and other hosting, support, security, email, analytics, or operational providers as needed.
Some providers process information on CHUD’s behalf. Other providers operate their own platforms, accounts, payment systems, app stores, identity services, or terms. Their privacy practices may be governed by their own policies depending on the service, platform, and your interaction with them.
We may add, remove, or replace providers as CHUD changes. If a provider change materially changes how personal information is collected, used, or shared, we will update this Policy as appropriate.
How we share information
We may share information with service providers and contractors who help us operate, host, secure, analyze, support, moderate, and improve CHUD. These providers may access information only as reasonably needed to provide their services, comply with law, protect their systems, or enforce applicable terms.
We may share information with other CHUD users when you use group features, reactions, witnessed activity, profile features, shared reports, or other features that are designed to display information to others.
We may share information with payment processors, app stores, and platform providers to process subscriptions, verify purchases, manage entitlements, handle refunds, prevent fraud, and comply with billing, tax, accounting, and legal obligations.
We may share information with AI providers to process meal photos, prompts, structured meal data, generated output, and related context as described in this Policy.
We may share information when we believe it is reasonably necessary to comply with law, legal process, court orders, subpoenas, government requests, regulatory obligations, tax requirements, or law-enforcement requests.
We may share information when we believe it is reasonably necessary to protect CHUD, users, other people, property, rights, safety, security, or service integrity; investigate fraud or abuse; enforce our Terms of Service; prevent harm; or respond to emergencies.
If CHUD is involved in a merger, acquisition, financing, reorganization, bankruptcy, asset sale, transfer, or similar transaction, information may be disclosed, transferred, or evaluated as part of that transaction, subject to appropriate confidentiality and legal protections where applicable.
We may use and share aggregated, anonymized, or de-identified information that does not reasonably identify you for analytics, research, product improvement, business planning, safety, or public reporting. We will not attempt to re-identify de-identified information except as permitted by law.
No sale of personal information
CHUD does not sell personal information for money. CHUD does not currently share personal information for cross-context behavioral advertising or targeted advertising as those terms are commonly used in U.S. state privacy laws.
If CHUD later uses advertising, tracking, data sharing, or analytics practices that qualify as a sale, sharing, or targeted advertising under applicable law, we will update this Policy and provide any required notice, opt-out, or consent mechanism.
Push notifications and communications
If you enable push notifications, CHUD may collect and store push notification tokens and related device information to send notifications, such as group invites, group removals, account notices, subscription notices, product notices, safety notices, or other app-related messages.
You can disable push notifications through your device settings. Some important account, billing, legal, security, or support communications may still be sent by email or other available contact methods where appropriate.
Location
CHUD does not currently collect precise GPS location. CHUD may collect timezone, captured local time, IP-derived approximate region, Meal Source text, place labels, receipt details, packaging details, background details, or user-provided notes that may reveal location-related context.
If you include location information in meal photos, captions, Meal Source labels, profile information, group content, support messages, or reports, that information may be processed and visible according to the features you use.
Sensitive information
CHUD is not designed to collect medical records, government identifiers, financial account numbers, precise geolocation, biometric identifiers, race or ethnicity, religion, sexual orientation, union membership, genetic data, or other sensitive personal information. However, users may accidentally or intentionally include sensitive information in meal photos, notes, receipts, backgrounds, profile content, support messages, or group content.
Do not upload sensitive information unless you understand that it may be stored, processed, reviewed, shared with providers, displayed to group members, or retained as described in this Policy and the Terms of Service.
Automated processing
CHUD uses automated systems, AI providers, structured extraction, deterministic scoring, ranking, rules, and product logic to generate app features such as meal identification, CHUD metrics, verdicts, roasts, reports, summaries, group roundups, and profile stats.
CHUD’s automated outputs are for entertainment and app functionality. They are not used by CHUD to make legal, credit, employment, housing, insurance, healthcare, or similarly significant decisions about you.
You may report generated output that you believe is offensive, unsafe, inaccurate, inappropriate, or otherwise problematic through available app reporting tools or by contacting [email protected].
Retention
We keep personal information for as long as reasonably needed to operate CHUD, provide requested features, maintain account history, support groups, provide subscriptions, generate reports, maintain safety and security, debug the service, comply with legal obligations, resolve disputes, prevent fraud, enforce agreements, and protect CHUD and others.
Meal photos, meal records, analysis records, generated output, profile information, group activity, and subscription records may be retained while your account is active or as needed for the features you use. Some technical logs, analytics events, security logs, provider logs, moderation records, support records, payment records, and backup copies may be retained for different periods depending on their purpose and legal, security, operational, or billing needs.
After account deletion or a verified deletion request, we will delete or de-identify personal information where reasonably possible, except where we need to retain information for legal compliance, safety, security, fraud prevention, billing, tax, accounting, dispute resolution, moderation history, abuse prevention, backup, service continuity, or enforcement reasons.
Backup systems may retain information for a limited period after deletion from active systems. Information in backups may not be immediately deleted but will be handled according to backup retention and security practices.
Ordinary moderation snapshots hard-delete no later than 90 calendar days after capture and may be deleted earlier with account deletion. A documented, bounded legal hold may preserve specific evidence only when applicable law requires it.
Deleted database records may remain in encrypted disaster-recovery backups for up to 7 days before those backups expire or are overwritten. Backups are not used for ordinary product access or moderation.
If a backup is restored, CHUD reapplies completed deletion requests and expired moderation-evidence deletions before returning restored data to ordinary use.
Account deletion and data deletion
You may request deletion of your account or personal information by using available in-app account deletion tools or by emailing [email protected].
We may need to verify your identity or account control before completing a deletion request. Deleting your account may delete or disable access to meals, photos, profile information, group membership, reports, roasts, subscription-linked entitlements, and other account features, subject to the retention exceptions described in this Policy.
Deleting your account may not cancel subscriptions managed by Apple, Google, Stripe, or another payment provider. You may need to cancel through the platform or payment provider that processed your subscription.
Account deletion removes eligible account rows, authored group content, meal and profile image objects, push tokens, active restrictions, notices, appeals, and ordinary moderation snapshots before the Auth identity is deleted.
Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These safeguards may include access controls, authentication, private storage, signed URLs, logging, monitoring, provider security controls, and other operational protections.
No internet service, mobile app, storage system, transmission method, or AI-processing workflow is completely secure. We cannot guarantee absolute security. You are responsible for using a strong password, protecting your account credentials, keeping your device secure, and promptly telling us about suspected unauthorized access.
International processing
CHUD and its providers may process, store, or transfer information in the United States and other countries where we or our providers operate. These countries may have privacy laws that differ from the laws where you live.
Where required, we rely on appropriate legal mechanisms for international transfers, such as contracts, data-processing terms, standard contractual clauses, adequacy decisions, or other transfer mechanisms recognized by applicable law.
Legal bases for processing
Where a legal basis is required, CHUD processes personal information based on one or more of the following legal bases: performance of a contract, including providing the app features you request; consent, including device permissions, optional notifications, or other choices where applicable; legitimate interests, including operating, securing, improving, supporting, moderating, and debugging CHUD; compliance with legal obligations, including tax, accounting, billing, consumer-protection, safety, and legal-process obligations; and protection of vital interests where necessary to protect people from harm.
Your privacy choices
Depending on where you live, you may have rights to access, know, correct, delete, export, transfer, object to, restrict, or limit the use of certain personal information. You may also have the right to withdraw consent, opt out of certain sharing or targeted advertising, appeal a denied request, or designate an authorized agent.
To make a privacy request, email [email protected]. We may need to verify your identity, account control, residency, or authority before acting on a request.
We aim to respond within 30 days where practical, or within a different period if required or permitted by applicable law. If we deny a request, you may be able to appeal by replying to our decision or contacting [email protected] with “Privacy Appeal” in the subject line.
You can control certain app permissions through your device settings, including camera, photo library, media library, and notifications. You can leave groups or use available group controls to reduce group visibility. You can contact support for help with account deletion, privacy requests, or subscription-related access issues.
U.S. state privacy notice
Depending on where you live and whether applicable law applies to CHUD, you may have additional rights under U.S. state privacy laws. These may include the right to know what categories of personal information we collect, use, disclose, sell, or share; the right to access specific pieces of personal information; the right to correct inaccurate information; the right to delete information; the right to obtain a portable copy; the right to opt out of sale, sharing, targeted advertising, or certain profiling; the right to limit certain sensitive-information uses; the right not to be discriminated against for exercising privacy rights; and the right to appeal a denied request.
In the preceding 12 months, CHUD may have collected or disclosed for business purposes the following categories of personal information: identifiers; account information; contact information; commercial or subscription information; internet or network activity; device and diagnostic information; approximate location information such as IP-derived region or timezone; visual information such as meal photos and profile photos; user-generated content; group activity; support and moderation information; inferences or generated app outputs; and sensitive information if you choose to include it in content you upload.
CHUD does not currently sell personal information for money and does not currently share personal information for cross-context behavioral advertising or targeted advertising. If that changes, CHUD will update this Policy and provide required opt-out mechanisms.
EEA, UK, and Switzerland rights
If you are in the European Economic Area, United Kingdom, or Switzerland, you may have rights under applicable data-protection laws, including rights to access, rectify, erase, restrict, object to processing, transfer data, withdraw consent, and lodge a complaint with a supervisory authority.
CHUD is not intended to make decisions that produce legal or similarly significant effects based solely on automated processing. CHUD’s AI and scoring features produce entertainment and app-functionality outputs.
Marketing
If CHUD sends marketing emails or promotional communications, you may unsubscribe using the instructions in those messages or by contacting support. We may still send transactional, account, security, billing, legal, support, or service-related messages where appropriate.
External links
CHUD may link to external websites, app stores, payment providers, support pages, or third-party services. CHUD is not responsible for the privacy practices of third-party sites or services that it does not control.
Changes to this Policy
We may update this Privacy Policy as CHUD changes. If we make material changes, we will take reasonable steps to notify users, such as by posting the updated Policy, changing the “Last updated” date, sending an email, providing an in-app notice, or using another reasonable method.
Updated versions apply when posted unless we say otherwise. Your continued use of CHUD after an updated Policy applies means you acknowledge the updated Policy.
Contact
Privacy and data requests: [email protected].
Safety, moderation, and generated-content reports: [email protected].
General support: Support.
See also: Terms of Service, Safety Rules, and Support.