Chikoh privacy & data

Account Information: Email address, name, password

Alerts: Your phone number if you turn on SMS or WhatsApp alerts, and your Discord id if you connect Discord

Payment Information: Billing details processed through Stripe (we do not store full payment card details)

Location Data: Your country and, in the US, your state, as reported by Cloudflare from your IP address

Usage Data: Requests to our servers (pages and features used) in server logs, and page-view and click totals that carry no identifier

Device Information: IP address, browser type, operating system, device identifiers

Communications: Messages sent through our AI chat feature, files and screenshots you upload (for example a roster screenshot), and support messages

Provide and maintain the Service

Generate AI-powered recommendations and insights

Process payments and manage subscriptions

Detect and prevent fraud or abuse

Send marketing communications (with your consent)

Account data: Retained while your account is active.

Copies in our database provider's backups are removed when those backups expire, within 7 days

Page-view and click totals: Daily counts with no identifier, deleted after 90 days

AI chats: Kept while your account exists so you can see your history; deleted with your account

our database is operated by Supabase in the EU (Frankfurt)

Our servers are operated by Hetzner Online GmbH in Germany, behind Cloudflare

Standard Contractual Clauses (SCCs) for transfers outside the EU/EEA where applicable

Each one, what it receives and where it is located is listed on our subprocessors page

For data processing terms, see our Data Processing Agreement

You can download a copy of your data (a JSON file) and delete your account yourself, in Settings, at any time — no request to us is needed.

Access: Request a copy of your personal information

Correction: Update or correct inaccurate information

Deletion: Request deletion of your account and data

Data Portability: Request your data in a portable format (JSON or CSV)

Object to Processing: Object to processing based on legitimate interests

Restrict Processing: Request that we limit how we use your data

We do not sell your personal information and do not share it for cross-context behavioral advertising.