Privacy Policy
This Privacy Policy describes how ChapHaus LLC ("ChapHaus," "we," "us," or "our") collects, uses, and shares information when you use our websites, applications, and services (together, the "Services"). Individual applications may maintain their own product-specific privacy policies that apply in addition to this one.
1. Information we collect
Account information. When you create an account with a ChapHaus Service, we collect information such as your email address, username, password (stored as a cryptographic hash — never in plain text), and date of birth (used for age verification).
Profile information. Information you voluntarily add to your profile, such as a display name, biography, profile photo, location, and social media handles.
Content you submit. Content you submit through our Services, including ratings, reviews, comments, images, and other user-generated content.
Usage information. Information about how you use our Services, including pages visited, features used, interactions with content, and session duration. This may include device information such as IP address, browser type, operating system, and device identifiers.
Payment information. If you purchase a paid Service, payment card information is collected and processed by our payment processors (Stripe and RevenueCat). We do not store full payment card details on our servers. We retain billing-related metadata such as customer ID, subscription status, and renewal dates.
Communications. If you contact us by email, we retain that correspondence to respond and, if needed, to follow up.
2. How we use information
We use the information we collect to:
- Provide, maintain, and improve our Services
- Authenticate users and secure accounts
- Verify compliance with age requirements
- Process payments and manage subscriptions
- Communicate with you about your account, our Services, and policy changes
- Respond to requests, questions, and feedback
- Detect, prevent, and address fraud, abuse, and security issues
- Comply with legal obligations
3. How we share information
With other users. If you use a Service that includes public profiles, posts, or social features, information you choose to make public will be visible to other users and, in some cases, the general public.
With service providers. We share information with third parties that help us operate our Services, including cloud hosting (Supabase, Vercel), email delivery (Resend), payment processing (Stripe, RevenueCat), and analytics providers. These providers may only use the information to perform services on our behalf.
For legal reasons. We may disclose information if required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, protect user safety, or address fraud or security issues.
In a business transaction. If ChapHaus is involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction. We will provide notice before information is transferred and becomes subject to a different privacy policy.
We do not sell your personal information to third parties.
4. Cookies and tracking
Our Services use cookies and similar technologies to keep you logged in, remember your preferences, and understand how our Services are used. You can control cookies through your browser settings. Some features of our Services may not function properly if you disable cookies.
5. Data retention
We retain personal information for as long as your account is active or as needed to provide the Services. When you delete your account, we delete or anonymize your personal information within a reasonable period, unless we are required to retain it for legal, tax, accounting, or security purposes.
We permanently delete account data for users identified as under 13 years old, in accordance with the Children's Online Privacy Protection Act (COPPA).
6. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your personal information
- Object to or restrict certain processing
- Receive a copy of your data in a portable format
- Withdraw consent where processing is based on consent
To exercise these rights, email hello@chaphaus.com. We will respond within a reasonable period, typically within 30 days.
California residents: You have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and to request deletion. We do not sell personal information.
EU and UK residents: You have rights under the General Data Protection Regulation (GDPR) and UK GDPR, including the rights listed above. Our legal bases for processing include contract performance, legitimate interests, consent, and legal obligations, depending on the purpose.
7. Children's privacy
Our Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that a user is under 13, we will delete the account and associated data promptly. If you believe a child has provided information to us, contact hello@chaphaus.com.
For users ages 13 to 17, certain Services may require parental or guardian consent. Those Services will disclose such requirements at signup.
8. Security
We use reasonable technical and organizational measures to protect your information, including encryption in transit, hashed passwords, and access controls. However, no system is perfectly secure. We cannot guarantee the absolute security of your information.
9. International transfers
Our Services are operated from the United States. If you access our Services from outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate. By using our Services, you consent to these transfers.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. For material changes, we will provide reasonable notice by email or in-app notification.
11. Contact
Questions about this Privacy Policy or our data practices can be sent to hello@chaphaus.com. For copyright-related inquiries, contact dmca@chaphaus.com.