Privacy Policy

1. Introduction

Welcome to CHilli ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience with our application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Information We Collect

2.1 Information You Provide to Us

CHilli does NOT require registration or account creation. We may collect information when you:

• Create custom card decks (questions/dares) - stored anonymously with a shareable link
• Contact us for customer support via external channels
• Leave reviews or ratings on the App Store/Play Store

Custom Card Decks:

• When you create custom cards, they are stored on our servers with a unique short ID
• No personal information is attached to these cards
• You receive a shareable link to access your deck
• Anyone with the link can access the deck (anonymous sharing)

We do NOT collect:

• ❌ Player names or user accounts
• ❌ Email addresses
• ❌ Personal identification information
• ❌ Contact information of any kind

2.2 Analytics Data (Firebase Analytics Only)

We use Firebase Analytics to understand app usage and improve your experience:

• Device Information: Device type, OS version, app version
• Usage Patterns: Features used, session duration, screen views
• Performance Data: Crashes, errors, loading times
• Technical Data: Anonymous identifiers for analytics purposes only

Important:

• ✅ Analytics data is anonymous and aggregated
• ✅ Not used for advertising - we don't show ads or sell data
• ✅ Not shared with advertisers - only used internally to improve the app
• ✅ No cross-app tracking - we don't track you across other apps or websites

2.3 Purchase Information

In-app purchases are processed entirely by Apple App Store or Google Play Store. We only receive:

• Purchase confirmation (to unlock features)
• No payment details or personal information

2.4 What We Do NOT Collect

To be completely transparent, CHilli does NOT collect:

• ❌ Names, usernames, or player identities
• ❌ Email addresses or contact information
• ❌ User accounts or passwords
• ❌ Questions and answers from your games
• ❌ Location data
• ❌ Contacts or address book
• ❌ Photos, camera, or microphone (unless you explicitly grant for specific features)
• ❌ Advertising identifiers (IDFA/AAID) - we don't request or use these
• ❌ Cross-app tracking data
• ❌ Any personally identifiable information

3. How We Use Your Information

The limited data we collect is used solely to:

• Improve the App: Understand usage patterns to build better features
• Fix Issues: Identify and resolve crashes, bugs, and performance problems
• Custom Card Storage: Store and provide access to custom decks you create
• Provide Support: Help you when you contact us
• Ensure Security: Detect and prevent abuse or technical issues

We do NOT use your data for:

• ❌ Advertising or marketing
• ❌ Selling or sharing with third parties
• ❌ Cross-app or cross-site tracking
• ❌ Building user profiles for any purpose

4. Data Storage and Security

4.1 Local Storage

Most of your game data (preferences, game history, player setup) is stored locally on your device only. This means:

• ✅ Game sessions and player information never leave your device
• ✅ Your gameplay history remains private
• ✅ No personal information is required or stored
• ✅ Uninstalling the app removes all local data
• ✅ You have complete control over your local data

4.2 Server Storage for Custom Card Decks

Custom card decks you create are stored on our servers to enable sharing and access across devices. Here's how it works:

• Anonymous Storage: Cards are stored with a unique short ID (e.g., "abc123")
• No Personal Info: No name, email, or account is linked to your cards
• Shareable Link: You get a link (e.g., chilli.io.vn/deck/abc123) to access your deck
• No Authentication: Anyone with the link can view/use the deck
• Content Only: Only the questions/dares you write are stored, nothing else

Other cloud-related data:

• Purchase receipts (handled by Apple/Google, not by us)
• Anonymous analytics data (no personal information)

We do NOT sync or backup your game sessions, player names, or gameplay history.

4.3 Security Measures

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit and at rest
• Secure authentication methods
• Regular security assessments
• Limited access to personal information

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5. Third-Party Services

CHilli uses minimal third-party services:

5.1 Firebase Analytics (Google)

• Purpose: App analytics and crash reporting only
• Data Collected: Anonymous usage data, device info, performance metrics
• Not Used For: Advertising, cross-app tracking, or data selling
• Your Control: Analytics data is anonymous and aggregated
• Privacy Policy: firebase.google.com/support/privacy

Note: We do NOT use Firebase for advertising or any ad-related services.

5.2 Apple App Store / Google Play Store

• Purpose: App distribution and in-app purchases
• Payment Processing: All payment info is handled by Apple/Google, not by us
• Privacy Policies:
  • Apple: apple.com/privacy
  • Google: policies.google.com/privacy

5.3 What We Don't Use

Unlike many apps, CHilli does NOT integrate:

• ❌ Ad networks or advertising platforms
• ❌ Social media tracking SDKs
• ❌ Third-party analytics for advertising
• ❌ Data brokers or marketing platforms

6. Children's Privacy

CHilli is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under the age of 18. The app contains mature content including alcohol references and adult themes.

If you are a parent or guardian and believe we have collected information from someone under 18, please contact us immediately so we can delete such information.

7. Your Privacy Rights and Control

You have full control over your data:

• Local Data: Delete by uninstalling the app or clearing app data
• Custom Decks: Contact us to remove specific decks from our servers
• Analytics: Firebase analytics is anonymous - no personal profile to delete
• No Marketing: We don't have your contact info, so no marketing emails

7.1 California Privacy Rights (CCPA)

California residents have specific rights. Since we don't collect personal information:

• ✅ We don't sell personal information (we don't collect it)
• ✅ We don't share personal information with third parties for their marketing
• ✅ Analytics data is anonymous and not tied to you

7.2 European Privacy Rights (GDPR)

For users in the European Economic Area (EEA):

• We process minimal data, only what's necessary for the app to function
• Analytics data is processed anonymously and cannot identify you
• You can request deletion of custom card decks you created
• We don't engage in profiling or automated decision-making

7.3 Contact for Privacy Requests

To exercise your privacy rights, contact us at: privacy@chilli.io.vn

8. International Data Transfers

CHilli may store custom card decks and anonymous analytics data on servers located in different countries. Since we don't collect personal information, international data transfer regulations have minimal impact on you.

• Firebase services may process data in Google's global infrastructure
• All data transferred is either anonymous or custom content you choose to share
• We comply with applicable data protection laws including GDPR for European users

9. Advertising and Tracking

9.1 No Advertising

CHilli does not display advertisements. We do not integrate any ad networks or advertising platforms. This means:

• ✅ No ad tracking
• ✅ No advertising identifiers (IDFA/AAID) requested or collected
• ✅ No data shared with advertisers
• ✅ No personalized advertising profiles

9.2 No App Tracking Transparency (ATT) Prompt

We do NOT request tracking permission through Apple's App Tracking Transparency (ATT) framework because we don't track you for advertising or share data with data brokers.

10. Data Retention

We don't retain personal information because we don't collect it.

• Local Data: Stored on your device until you uninstall the app or clear app data
• Custom Card Decks: Stored on our servers indefinitely (accessible via your unique link) unless you request deletion
• Analytics Data: Anonymous usage statistics retained for up to 14 months for app improvement
• Purchase Data: Handled by Apple/Google per their retention policies

Important: If you lose your custom deck link, we cannot recover it as we don't link decks to any user identity. Save your link to keep access to your custom cards.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you a notification through the app (for material changes)

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

13. Your Consent

By using CHilli, you consent to this Privacy Policy and agree to its terms. If you do not agree, please do not use the app.