Privacy Policy

1. Introduction

ChalPals is committed to protecting your privacy. This policy explains how we collect, use, and protect your information.

2. Data We Collect

• Your name, email, and optional phone number when you sign up.
• Your notification preferences (email, SMS, and push reminder settings).
• Challenge rules defined by its creator.
• Check-in dates and any photos or videos you attach to check-ins. Media is stored in cloud storage and visible to other participants in your challenge.
• An optional profile photo uploaded in Settings. It is stored in cloud storage and displayed to other participants in your challenges.
• Chat messages you send in a challenge, including your display name, profile photo (if set), message text, and timestamp. Messages are stored per challenge and visible to all participants in that challenge.
• Emoji reactions you give or receive on check-ins and join events. Reactions are stored and visible to all participants in the challenge.
• Payment method information (last 4 digits of card and billing details) stored securely by Stripe when you add a payment method. ChalPals does not store full card numbers. Stripe's privacy policy governs how payment data is handled.
• Payment records including penalty charges, give-up fees, and payout amounts for challenges with payments enabled. These records are stored securely and only accessible to you and ChalPals administrators.
• Challenge invitations sent to you or by you, including who sent the invite, the challenge it relates to, the invitation status (pending, accepted, or declined), and timestamps. Invitation records are only readable by the person who was invited.
• Email addresses entered by challenge creators when inviting someone who does not yet have a ChalPals account. These are stored on the challenge record solely to prevent duplicate invitations and are not used for marketing or shared with third parties.
• Usage analytics through Google Analytics and Amplitude to understand how you navigate and interact with our platform.
• Session recordings and heatmap data through Microsoft Clarity to help us identify usability issues. Clarity may record mouse movements, clicks, and scrolling behavior. No passwords or payment information are captured.
• Push notification tokens if you enable notifications.

3. How We Use Your Data

• To store account information for authentication.
• To manage challenges and check-in records.
• To track and process penalty charges and payouts for challenges with payments enabled.
• To send reminders and notifications, including challenge check-in reminders, invite notifications, and automated pre-start reminders for pending invitations.
• To link email invitations to your account when you sign up, so pending invites appear on your dashboard automatically.

4. Sharing Your Information

We do not sell your personal data. Your data is stored securely using Google Firebase (Firestore and Firebase Storage). Payment processing is handled by Stripe — we share only the information necessary to process charges and payouts. Transactional emails (welcome, verification, payment notices, challenge invitations, and reminders) are delivered via Amazon Web Services Simple Email Service (AWS SES). We use Google Analytics and Amplitude for usage analytics, and Microsoft Clarity for session recording and heatmaps to improve the platform experience. We only share necessary details with essential third-party services to operate the platform.

5. Data Security

We take reasonable steps to protect your data but cannot guarantee absolute security.

6. Your Rights

• You can request access to your data.
• You can request deletion of your account and associated data.

7. Changes to This Policy

ChalPals may update this policy. Continued use of our service means you accept the changes.