Privacy Policy
Last updated: December 20, 2025
1. Introduction
Welcome to ChoCho ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "Service").
By using ChoCho, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.
2. Information We Collect
2.1 Personal Information
When you register and use our Service, we may collect the following personal information:
- Account Information: Email address, username, password (encrypted), and profile information
- Profile Data: Profile photo, bio, location (city/region), and preferences
- Identity Verification (KYC): Government-issued ID, selfie photos, and verification documents when you complete our KYC process
- Contact Information: Phone number for account verification and security
2.2 Content You Create
- Posts: Videos, images, descriptions, and metadata about items you share
- Communications: Messages, comments, and interactions with other users
- Feedback: Ratings, reviews, and feedback you provide
2.3 Automatically Collected Information
- Device Information: Device ID, model, operating system, and unique device identifiers
- Usage Data: App features used, posts viewed, search queries, and interaction patterns
- Location Data: Approximate location based on IP address or GPS (with your permission) to show nearby items
- Log Data: IP address, browser type, access times, and pages viewed
- Cookies and Tracking: Session tokens and analytics data
2.4 Communications
- Chat Messages: Real-time messages exchanged between users
- Audio Calls: Voice call metadata (duration, participants) - calls are not recorded
- Push Notifications: FCM tokens for sending notifications
3. App Permissions
To provide our services, the ChoCho app may request the following permissions from your device:
3.1 Camera Permission
- Purpose: To allow you to capture photos and videos of items you want to share, take selfies for KYC verification, and scan QR codes
- When requested: When you create a post, update your profile photo, or complete KYC verification
- Can be declined: Yes, but you won't be able to capture new photos/videos directly in the app. You can still upload from your gallery
3.2 Location Permission
- Purpose: To show you items available near your location and help you find nearby donors/receivers
- When requested: When you first use the app or browse items
- Can be declined: Yes, but the app will use your IP address for approximate location. You can manually set your location preferences
- Background location: We do not collect location data when the app is not in use
3.3 Microphone Permission
- Purpose: To enable audio calls between users for transaction coordination
- When requested: When you initiate or receive an audio call
- Can be declined: Yes, but you won't be able to use the voice call feature. You can still use text chat
3.4 Photo/Media/Files Storage
- Purpose: To allow you to upload photos and videos from your device gallery and save received images
- When requested: When you select photos/videos from your gallery or save media
- Can be declined: Yes, but you won't be able to upload existing photos/videos or save images from the app
3.5 Notifications Permission
- Purpose: To send you important updates about messages, item claims, and app activities
- When requested: When you first install or open the app
- Can be declined: Yes, but you may miss important notifications. You can manage notification preferences in app settings
Managing Permissions: You can review and change these permissions at any time through your device settings (Settings > Apps > ChoCho > Permissions).
4. How We Use Your Information
We use the collected information for the following purposes:
- Provide Services: Create and manage your account, facilitate posting and claiming items, enable communication between users
- Personalization: Customize your feed based on location and preferences, recommend relevant items
- Safety and Security: Verify user identity through KYC, prevent fraud and abuse, monitor compliance with our Terms
- Communication: Send notifications about transactions, messages, and app updates, respond to your inquiries and support requests
- Analytics: Understand how users interact with our Service, improve features and user experience
- Legal Compliance: Comply with legal obligations and enforce our policies
5. Information Sharing and Disclosure
5.1 Public Information
The following information is visible to other users:
- Your profile information (username, photo, bio)
- Posts you create (videos, images, descriptions)
- Comments and likes on public posts
- Your approximate location (city/region only)
5.2 Third-Party Service Providers
We may share your information with trusted third parties who assist us in operating our Service:
- Cloud Storage: Supabase for data storage and real-time features
- Communication: Agora for audio call functionality
- Analytics: Service providers for app analytics and performance monitoring
- Hosting: Cloud infrastructure providers
These third parties are obligated to protect your information and use it only for the purposes we specify.
5.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).
5.4 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
6. Data Security
We implement appropriate technical and organizational security measures to protect your personal information:
- Encryption of data in transit and at rest
- Secure authentication with password hashing
- Regular security assessments and updates
- Access controls and authentication mechanisms
- Secure backup procedures
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
7. Your Rights and Choices
7.1 Access and Update
You can access and update your account information through the app's settings at any time.
7.2 Delete Account
You may request deletion of your account by contacting us. Upon deletion:
- Your profile and personal information will be removed
- Your posts may be anonymized or deleted
- Some information may be retained for legal compliance
7.3 Communication Preferences
You can opt out of promotional notifications through app settings, but you will still receive essential service-related communications.
7.4 Location Data
You can disable location services through your device settings. Note that this may limit certain app features.
8. Children's Privacy
Our Service is not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.
9. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce our agreements
When you delete your account, we will delete or anonymize your information within 30 days, except where we are required to retain it for legal purposes.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
11. Third-Party Links
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last updated" date
- Sending you a notification through the app (for material changes)
Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
- Email: support@chocho.global
- Website: https://chocho.global
14. Specific Rights by Region
14.1 For Users in Vietnam
Under Vietnamese data protection laws, including the Law on Cybersecurity and related regulations, you have the right to:
- Access your personal information that we collect and process
- Request correction of inaccurate or incomplete personal data
- Request deletion of your personal information when it is no longer necessary or when you withdraw consent
- Object to the processing of your personal information for certain purposes
- Request restriction of processing in certain circumstances
- Withdraw your consent at any time, where processing is based on consent
- File a complaint with the relevant Vietnamese authorities if you believe your rights have been violated
We are committed to complying with Vietnamese data protection requirements and ensuring the security of your personal information.
14.2 For Users in Other Regions
Regardless of your location, you have fundamental rights regarding your personal information:
- Access and review your personal data
- Request correction of inaccurate information
- Request deletion of your account and associated data
- Opt-out of certain data processing activities
- Contact us with privacy concerns or questions
We respect your privacy rights and will work with you to address any concerns. Please contact us at support@chocho.global to exercise any of these rights.