Privacy Policy

• Account details. Your email address, and a display name if you set one. Email is how you sign in and how we reach you about your events.
• Photos and videos. Whatever you capture or upload to an event, along with any caption you add.
• Event content. Events you create or join, their schedule and location as entered by the host, and your reactions or messages within an event.
• Push token. If you allow notifications, a device token so we can send them. It identifies a device, not a person.
• Basic technical logs. Request logs kept briefly for debugging and abuse handling.

We do not track you across other apps or websites, we do not run advertising, and we do not sell personal data.

All of it is to run the product: authenticate you, show you the events you belong to, store and serve the media in them, and notify you when something happens in an event you are part of. We do not use your content to build advertising profiles.

• Supabase — authentication, database, and file storage. This is where your account and media live.
• Firebase Cloud Messaging (Google) — delivery of push notifications only.
• Resend — transactional email, such as backup links and account notices.

Each acts as a processor on our instructions. We do not share your content with anyone else except where the law requires it.

Media uploaded to an event is visible to that event’s members. A host may make an event public, in which case its approved gallery can be viewed by anyone with the link. Private events require membership — holding an event code is not by itself enough to view its photos.

Files in storage are served through short-lived signed links rather than public URLs.

Event media is kept for the retention period attached to the event’s package, after which it is purged automatically. Hosts can download a full backup before that point. Account data is kept until you delete your account.

You can delete your account from inside the app, under Settings → Delete Account. Your account stops working immediately: you are signed out, you cannot sign back in, and your events and photos disappear from the app for everyone.

The underlying data is then permanently erased after a 30-daygrace period, including the files in storage. The delay exists so that an accidental deletion — yours, or a co-host’s — can be undone by contacting support within that window. After 30 days it cannot be recovered by anyone, including us.

If you host an event, deleting your account also deletes that event and everything in it, including photos other guests contributed. There is no way to keep an event alive without a host, so download a backup first if anyone still wants the photos.

You may also request access to, or correction of, your data by writing to support@chakap.com.

Chakap is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has given us information, write to us and we will remove it.

If this policy changes materially we will update the date above and notify you in the app before the change takes effect.

Questions about this policy, or about your data: support@chakap.com.

See also our Terms of Service.