Privacy

1. Who looks after your data

Chiche is published by Florian Pichard, a private individual based in France. He is the controller of your data.

For any question: support@getchiche.app. Chiche has no data protection officer (one isn’t required here): write directly to that address.

This policy covers the Chiche iPhone app and the getchiche.app website. It is a translation: if it differs from the French version, the French version prevails.

2. What we process, and why

Chiche only collects what it needs for the game. Here is everything, category by category.

Your account

What it is: The first name you choose, an account ID, the creation date, the date and time of your last visit (updated at most once a day) and an access token. The token stays on your iPhone: the server only keeps a fingerprint of it (it is hashed), which can’t be turned back into the token.
Why: To recognise you when the app talks to the server, to show your name to your group, and to delete your account after 12 months without a visit.
Who sees it: Members of your challenges see your first name.
Legal basis: Performance of the contract, meaning the terms of use. You can’t play without a first name.

Your challenges

What it is: The template (Sport, Tidy flat, Revision, Reading), the title, each person’s goal, the forfeit settings, the season dates, the invite code, and up to 6 forfeits written by the group (40 characters each, moderated).
Why: To run the challenge: who aims for what, and what happens if someone cracks.
Who sees it: Challenge members. The invite page, open to anyone who has the link, shows the title, members' first names and goals, the forfeit and the dates. Only share that link with your group.
Legal basis: Performance of the contract.

Your proofs and the votes

What it is: Two photos taken in the app (back camera and a selfie), or one image you pick from your photo library (a Strava screenshot, for instance). An optional caption (80 characters at most) and the time it was sent. Then members' votes: approve or challenge, with who voted and when.
Why: To prove a session and have the group approve it.
Who sees it: Challenge members, and nobody else. Photos are never public: the app shows them through signed links that expire after 1 to 2 hours. With the photo library, Chiche only sees the image you pick, not the rest of your photos.
What we don’t do: No photo analysis, no facial recognition. If someone else appears in your photo, ask them first.
Legal basis: Performance of the contract.

Verdicts and forfeits

What it is: Each week’s results (sessions done, sessions missed), the length of your forfeit, the forfeit drawn and its times. The draw starts from a random number the server keeps: it is reproducible, so the result is the same for the whole group and can be checked.
Why: To announce Sunday’s verdict and apply the forfeit.
Who sees it: Challenge members.
Good to know: The draw and the automatic approval of a proof after 12 hours are automated. They have no legal effect: it’s a game.
Legal basis: Performance of the contract.

Notifications

What it is: A notification token, issued by Expo, that identifies your iPhone.
Why: To let you know about a proof to approve, Sunday’s verdict, a forfeit starting, a member leaving the challenge.
Who sees it: Notifications go through Expo (650 Industries, Inc., in the United States), then Apple’s notification service. Their text may include a first name and a challenge title. Expo doesn’t keep that text after sending, and deletes its delivery receipts after 24 hours.
Legal basis: Your consent, given when iOS asks you to allow notifications. You can withdraw it at any time in the iPhone’s Settings.

Reports

What it is: When you report a proof: which one, who reported it and when. Nothing else.
Why: To remove offensive content (every report is reviewed within 24 hours), and to hide the proof from whoever reported it.
Who sees it: The publisher only. Neither the proof’s author nor the group knows who reported it.
Legal basis: Our legitimate interest: keeping the game safe for everyone.

Technical data

What it is: Your IP address, when the app contacts the server. And Cloudflare’s logs: the time of a request, the address requested, the response, errors, and the connection details Cloudflare attaches.
Why: To curb abuse (at most 10 accounts created per minute from the same IP address), fix outages and protect the service. Your IP address is not stored with your account.
Legal basis: Our legitimate interest in a service that is safe and works.

What Chiche doesn’t do

No advertising, no trackers, no audience measurement.
No selling or renting of data, to anyone.
No access to your contacts, your location or the Health app.
No health data requested: no weight, no heart rate. A workout photo only shows what you choose to put in it.
Never any money between players, so no bank details.

3. Screen Time

With the "without your apps" forfeit, Chiche uses Apple’s Screen Time (Family Controls) to pause the apps you chose, on your own iPhone.

What stays on your iPhone

The apps you pick in Apple’s picker, how many there are, and your usage time. Chiche never sees your apps’ names, and the server receives none of it.

What the server receives

a yes or no: "has chosen their apps";
the "Unlock anyway" event, if you tap it during a forfeit (with the time);
the "forfeit no longer active" event, if you removed Screen Time access (the app notices when you reopen it).

It never receives which apps, how many, or how long you use them. And it only keeps the yes or no, with its date, for each challenge, and the time of the last "Unlock anyway" alert sent to the group.

What your group sees

Only three things: that you chose your apps, whether you tap "Unlock anyway" before a forfeit ends, and whether your forfeit is no longer active.

Your consent

Before you choose your apps, the app shows you what your group will see. By tapping "J’accepte et je choisis mes apps" (I agree and choose my apps), you give your consent. That is the legal basis for this sharing.

You can withdraw it at any time by turning off Chiche’s Screen Time access in the iPhone’s Settings. Your next forfeits become surprise forfeits. If a forfeit was running, your group sees it is no longer active, as you had agreed. You can also say no from the start: you still join the challenge, with surprise forfeits.

4. Who has access

Members of your challenges, for what is described above.
Anyone with a challenge’s invite link, for the invite page (title, first names, goals, forfeit, dates).
Our service providers, who act only on our instructions:
- Cloudflare, Inc.: the server (Cloudflare Workers), the database (D1), photo storage (R2) and logs. The database and photos are stored in Western Europe. Each request goes through the Cloudflare data centre closest to you.
- Expo (650 Industries, Inc.): sending notifications.
- Apple: the notification service and the App Store.
Authorities, only where the law requires it.

Nobody else. We don’t sell anything, we don’t rent anything.

5. Outside the European Union

Cloudflare and Expo are American companies. When data passes through the United States, the transfer is covered by the EU–US Data Privacy Framework, which both companies have joined, and by the European Commission’s standard contractual clauses included in their terms.

6. How long

Proof photos: deleted 30 days after they’re sent.
Your account: for as long as you keep it. It is deleted automatically after 12 months without opening the app.
Challenges (title, goals, captions, votes, verdicts, forfeits): deleted 12 months after their season ends. Whatever concerns you goes sooner if you delete your account.
Reports: as long as the reported proof exists, so at the latest until its challenge is deleted. If you delete your account, your report stays, without your ID, so it can still be handled.
The notification token: until you delete your account, or as soon as Apple reports it invalid.
The anti-abuse counter tied to your IP address: 1 minute.
Cloudflare’s logs: 3 days (7 days at most if Cloudflare’s plan changes).
Database backups: deleted data disappears from them within 30 days at most.

7. Deleting your account

In the app: tap your name at the top of the home screen, then "Supprimer mon compte" (Delete my account). It’s immediate and permanent.

We then erase your first name, your token, your proofs and their photos, your votes, your goals, your Screen Time choice and your notification token. In verdicts already announced, your name is replaced by "Ancien membre" (Former member). A challenge where you were the last member is erased entirely. The members of your other challenges get a notification that you left, with your first name: that is its last use. Backups follow within 30 days at most.

Just want to leave a challenge? Do it in the app: your proofs, their photos, your votes and your forfeits there are erased, and you become "Ancien membre" (Former member) in its past verdicts. The other members get a notification that you left, with your first name. Your account and your other challenges stay.

Already deleted the app? Your account will be deleted after 12 months without being opened. You can also write to us with your first name and the challenge title. Since your account has no email or password, we’ll ask for something that shows it really is you.

8. Your rights

The GDPR and the French Data Protection Act give you the right:

to access your data and get a copy;
to have it corrected;
to have it erased;
to restrict its use, or object to it;
to get it back in a readable format (portability);
to withdraw your consent at any time, for whatever relies on consent;
to say what happens to your data after your death.

Deletion happens in the app. For everything else, write to support@getchiche.app. As your account is anonymous, we’ll ask you to show it’s yours, for instance with a screenshot from the app. We reply within one month.

If you’re not satisfied, you can complain to the CNIL, the French data protection authority: cnil.fr, or by post to 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France. You can also contact the authority where you live.

9. Minimum age

Chiche is for people aged 18 and over. If we learn that an account belongs to a minor, we delete it.

10. Security

All exchanges use HTTPS. The access token is only stored hashed. Photos are kept in private storage and only shown through signed links that expire quickly. Only the publisher has access to the admin tools.

No security is perfect. If a breach puts you at risk, we’ll tell you, and we’ll notify the CNIL within 72 hours.

11. This website

getchiche.app sets no cookies and doesn’t measure its audience. It calls no third-party service: even the font is served by the site. As with the app, Cloudflare processes your IP address to serve pages and protect the site.

12. Changes

If this policy changes significantly, we’ll let you know in the app before the change applies.

The essentials