Privacy Policy

1. Introduction & Our Privacy Commitment

Welcome To Chọcho — A Platform Built On The Spirit Of "Give – Receive – Give Forward", Connecting Real People, Enabling Meaningful Acts Of Kindness, And Fostering A Safe, Respectful, And Compassionate Community.

We Are Committed To Protecting Your Privacy And Handling Your Personal Data Responsibly, Based On The Following Principles:

• We Collect Only The Information Necessary To Ensure Safety And Operate Our Services.
• We Do Not Sell Your Personal Data To Third Parties.
• We Do Not Use Your Data For Behavioral Advertising.
• We Do Not Track You Outside The Platform.
• We Do Not Exploit Sensitive Groups Or Children For Commercial Purposes.
• We Act Transparently And Comply With All Applicable Data Protection Laws (GDPR – EU/EEA/UK, CCPA – US, PDPA – Singapore, PDPD – Vietnam).

If You Do Not Agree To This Privacy Policy, Please Discontinue The Use Of The Platform.

2. Scope of This Policy

This Privacy Policy Applies To The Following:

• Chọcho Mobile Application
• Chọcho Website
• APIs, Features, And Tools Provided By Chọcho
• Online/Offline Community Activities, Giving/Receiving Events, Surveys, And Campaigns

3. Data Processing Principles

We Process Personal Data According To Internationally Recognized Principles:

• Transparency – You Have The Right To Know What We Collect And Why.
• Data Minimization – We Collect Only What Is Strictly Necessary.
• Purpose Limitation – Your Data Is Used Only For Legitimate, Clearly Defined Purposes.
• Accuracy – We Maintain Data Accuracy And Integrity.
• Storage Limitation – We Do Not Keep Data Longer Than Needed.
• Security – We Protect Data With Strong Technical And Organizational Measures.
• Accountability – We Comply With Applicable Laws And Take Responsibility For Our Actions.

4. Information We Collect

We Collect Only The Data Required To Provide A Safe, Trustworthy, Real-Identity Environment For Giving And Receiving.

4.1. Information You Provide Directly

A. Account Registration & Identity Verification (KYC)

We May Collect:

• Full Name
• Email Address
• Phone Number
• Profile Photo
• Selfie For Identity Verification
• Date Of Birth
• National ID / Passport (When Necessary)
• Face Liveness Detection (Anti-Spoofing)

Purpose: Prevent Fraud, Impersonation, Scams, Illegal Item Posts, And Protect Vulnerable Individuals.

B. Profile Information

• Profile Photo
• Gender (Optional)
• Optional Details Added By You

C. Content You Upload

• Photos And Videos Of Items
• Captions, Descriptions, Hashtags
• Optional Location Tags Added By You

D. Messages

Messages Between Givers And Receivers Shared Through Our In-Platform Chat.

We Process Messages Only For:

• Community Protection,
• Preventing Harassment Or Illegal Activity,
• Resolving Disputes Where Allowed By Law.

E. Support & Communication

Including The Content Of Communications, Images, And Documents You Submit To Chọcho.

4.2. Information Collected Automatically

A. Technical Data

• Device Model And OS
• IP Address
• Device Identifiers
• Crash Logs
• Basic Operational Cookies
• Login Timestamps

B. Location Data (With Permission)

• Approximate Location (IP/SIM)
• Precise Location (GPS), Only If You Enable It

You May Turn Off Location Services At Any Time.

C. Content Safety Signals

To Protect The Community, We May Analyze Your Photos/Videos Only To Detect:

• Weapons
• Illegal Substances
• Dangerous Items
• Harmful Or Violent Content
• The Presence Of Children (To Request Proof Of Rights To Upload)

We Do NOT Use Facial Recognition To Identify Individuals.

4.3. Information From Third Parties

A. Social Login

If You Log In Via Google/Apple/Facebook, We Receive Only:

• Email
• Display Name
• Profile Picture

B. User Reports

When Another User Reports Content Or Behavior, We Receive Information Relevant To The Report.

C. Verification Providers

KYC/Identity Services Return:

• Verification Outcome
• Anti-Fraud Analysis
• Risk Signals

5. How We Use Your Information

We Use Your Information To:

A. Operate The Platform

• Create And Maintain Your Account
• Display Content And Manage Giving/Receiving
• Enable Communication And Connections

B. Ensure Community Safety

• Verify Real Identity
• Detect Fraud, Impersonation, And Prohibited Items
• Prevent Harassment And Harmful Behavior
• Assist Vulnerable Individuals
• Process Reports And Appeals

C. Improve User Experience

• Suggest Relevant Content
• Optimize App Performance
• Develop New Features

D. Support & Communication

• Customer Support
• Service Announcements
• Account Notifications

E. Legal Compliance

• Respond To Lawful Requests
• Enforce Our Terms Of Use

6. Anonymous Data for Human-Centered AI Development

(New Section Added According To Your Request)

We Believe The Positive Actions And Kindness Demonstrated By Our Community Can Contribute To Building More Human-Centered, Ethical, And Compassionate AI Systems.

Therefore:

We May Use Fully Anonymized, Non-Identifiable Data To Study Positive Behavioral Patterns And Develop Or Collaborate On Technologies That Promote Kindness, Respectful Communication, And Safe Interactions.

This May Include Insights Such As:

• Ways People Help Each Other Respectfully
• Patterns Of Supportive Communication
• Examples Of Ethical Decision-Making
• Community Behavior Norms Promoting Safety And Dignity

Important Clarifications:

• We Never Share Personal Data Or Identifiable Content For AI Training.
• Anonymous Data Cannot Be Traced Back To Any Individual.
• This Is Not Considered Selling Data.
• This Is Solely To Contribute To The Development Of Ethical AI For Social Good.

7. What We Do NOT Do

We Strictly Do NOT:

• ❌ Sell Your Personal Data
• ❌ Share Data With Advertisers For Behavioral Targeting
• ❌ Track You Across The Internet
• ❌ Use Biometric Recognition To Identify Individuals
• ❌ Use Children's Data For Any Commercial Purpose
• ❌ Train AI On Your Identifiable Videos Without Explicit Consent
• ❌ Share Your Contacts With Third Parties

8. When We Share Your Information

We May Share Limited Data Only In The Following Cases:

A. With Other Users (Limited Information)

To Facilitate Giving/Receiving (E.G., Phone Number Or Meeting Location Only When Necessary).

B. Service Providers

• Cloud Hosting
• Security
• Content Moderation
• Identity Verification (KYC)
• Analytics For Platform Improvement

C. Safety & Protection

When We Detect Potential Danger, Fraud, Or Violations Of Law.

D. Legal Obligations

When Required By Courts, Regulators, Or Law Enforcement.

E. Business Transfers

In Mergers, Acquisitions, Or Restructuring, Your Data Will Remain Protected Under This Policy.

9. Cookies & Tracking Technologies

We Use Only:

• Operational Cookies
• Authentication Cookies
• Security Cookies

We Do Not Use:

• Behavioral Advertising Cookies
• Cross-Site Tracking Pixels

10. Data Security

We Protect Your Data Using:

• Encryption (In Transit And At Rest)
• Firewalls And Intrusion Monitoring
• Strict Access Controls
• Role-Based Permissions
• Regular Audits
• Incident Response Procedures
• Compliance With Standards Such As ISO 27001 (Or Equivalent)

No System Is Completely Secure, But We Take Reasonable Steps To Minimize Risk.

11. International Data Transfers

We May Store Or Process Data In:

• Singapore
• Vietnam
• EU
• Other Secure Data Centers

Transfers Comply With:

• GDPR SCCs
• Singapore PDPA
• Vietnam PDPD
• US Privacy Regulations

12. Your Rights

EU/EEA/UK (GDPR)

• Access
• Rectification
• Erasure
• Restriction
• Objection
• Data Portability
• Withdrawal Of Consent
• Complaint To Data Protection Authority

United States (CCPA/CPRA And State Laws)

• Right To Know
• Right To Delete
• Right To Correct
• Right To Opt-Out Of Data Sales (We Do Not Sell Data)
• No Discrimination

Singapore (PDPA)

• Access
• Correction
• Consent & Withdrawal

Vietnam (PDPD)

Rights To Be Informed, Consent, Access, Delete, Restrict, Object, Complain, And Request Compensation.

You May Contact Us To Exercise Your Rights.

13. Children's Privacy

The Platform Is Not Intended For Children Under The Minimum Legal Age (E.G., 13 Or As Required By Local Law).

• If A Minor Uses The Platform, Parental/Legal Guardian Consent May Be Required.
• We Delete Unlawfully Collected Children's Data When Discovered.
• We Do Not Use Children's Data For Commercial Purposes.

14. Data Retention

We Retain Data Only For:

• The Duration Of Your Account,
• Legitimate Business Needs,
• Legal Obligations,
• Dispute Resolution.

Upon Account Deletion, We Remove Or Anonymize Data Unless Retention Is Required By Law.

15. Policy Updates

We May Update This Policy To Reflect Changes In Law Or Services.

The "Last Updated" Date Shows The Latest Version.

For Significant Changes, We Will Notify You Clearly (E.G., In-App Notice, Email).