PRIVACY POLICY
Last updated: January 2025
Important: This Privacy Policy applies to all applications and services provided by Chally Labs. By using our services, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Information You Provide
- Account Information: When you create an account, we collect your email address, username, and password (encrypted)
- Profile Information: Name, profile picture, and other information you choose to provide
- Content: Information and content you create, upload, or share through our services
- Communications: Messages you send to us or other users through our services
- Payment Information: For in-app purchases, payment details are processed by third-party payment processors
1.2 Information We Collect Automatically
- Device Information: Device type, operating system, device identifiers, and mobile network information
- Usage Data: How you interact with our services, features used, and time spent in the app
- Location Data: Approximate location based on IP address and precise location (with your permission) for location-based features
- Log Data: Server logs, including IP address, browser type, and pages visited
- Crash Reports: Technical information about app crashes and errors to improve performance
- Advertising Identifiers: Device advertising IDs for personalized advertising (with your consent)
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Create and manage your account
- Process transactions and send purchase confirmations
- Send push notifications (with your permission)
- Provide customer support and respond to your inquiries
- Analyze usage patterns to improve user experience
- Personalize content and features
- Detect, prevent, and address technical issues and fraudulent activity
- Comply with legal obligations
- Send marketing communications (with your consent)
3. Information Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
3.1 Service Providers
- Supabase: Backend database and authentication services
- PostHog: Analytics and product insights
- Google Maps: Location services and mapping functionality
- Meta (Facebook/Instagram): Advertising and marketing services
- Push Notification Services: Apple Push Notification Service (APNs) and Firebase Cloud Messaging
3.2 Legal Requirements
We may disclose your information if required by law, regulation, legal process, or governmental request.
3.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
4. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication
- Secure cloud infrastructure through Supabase
However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
5. Data Retention
We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Specific retention periods include:
- Account Data: Until you delete your account
- Usage Analytics: Up to 2 years
- Crash Reports: Up to 1 year
- Marketing Data: Until you withdraw consent
6. Your Rights and Choices
6.1 Account Controls
- Update your account information through app settings
- Delete your account and associated data
- Control push notification preferences
6.2 Privacy Rights (GDPR/CCPA)
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal information
- Rectification: Correct inaccurate or incomplete information
- Erasure: Request deletion of your personal information
- Portability: Receive your data in a portable format
- Restriction: Limit how we process your information
- Objection: Object to processing for direct marketing
- Withdraw Consent: Withdraw consent for processing
6.3 Advertising Choices
- Opt out of personalized advertising through device settings
- Use "Limit Ad Tracking" (iOS) or "Opt out of Ads Personalization" (Android)
- Visit aboutads.info/choices for web-based opt-out
7. International Data Transfers
Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:
- EU-US Data Privacy Framework compliance
- Standard Contractual Clauses
- Adequacy decisions by relevant authorities
8. Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete such information promptly.
9. Third-Party Services
Our applications may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you use.
9.1 Third-Party Privacy Policies
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending an in-app notification
- Emailing registered users (for significant changes)
Your continued use of our services after any changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
- Email: hello@challylabs.com
- General Inquiries: hello@challylabs.com
For GDPR-related requests, please include "GDPR Request" in your subject line. For CCPA-related requests, please include "CCPA Request" in your subject line.
12. Jurisdiction
This Privacy Policy is governed by the laws of the United States. Any disputes arising from this policy will be resolved in accordance with US federal and state laws.