Privacy Policy
Last updated: October 30, 2026
This policy explains what TCHAZO collects, why, where it goes, and how long we keep it. It covers the tchazo.com website and the TCHAZO app. Today, only the website is live: what it collects is described in section 11. Sections 3 to 10 describe the app, which will be available at launch.
We wrote it to be read in a few minutes. If anything seems unclear, write to us and we’ll answer.
1. Who we are
TCHAZO is a social intelligence coaching app published by TCHAZO Labs Inc., a corporation incorporated under the Canada Business Corporations Act, 1338 Wellington St W, Unit 10, Ottawa, Ontario K1Y 3B7, Canada.
TCHAZO is only for people 18 and over.
Our privacy officer can be reached at [email protected], or by mail at the address above.
2. Our principle
What’s about you stays on your phone. What you send for an analysis is used for that analysis and then disappears: TCHAZO doesn’t keep it. On our servers, we keep only what’s strictly needed to run your account, and all of it is listed in section 5.
We don’t sell any information and we don’t do targeted advertising.
3. What stays on your phone
- Your answers from the first launch (your goal, the people you talk to most) and your language.
- Your analysis reports.
- The record of your consent (version and date).
- Your follow-up reminders (the first name you choose, the date, the suggested message). They’re scheduled on your phone; we receive none of it.
This data is kept in an encrypted database on your phone. It disappears if you delete the app. When you delete your account, the app offers to erase it too.
4. What is sent for an analysis, without being kept
For an analysis, the app sends only:
- the conversation screenshots you choose, after masking on your phone: the top banner is covered with a solid block, and you can mask other areas. Images are reduced and stripped of their metadata, such as location or device;
- the conversation text you paste or share to TCHAZO, after masking on your phone of the names, numbers, addresses and links the app finds and any passages you mask yourself, with who wrote what;
- the message you’re about to send, when you ask for the other person’s possible reactions;
- your goal, your chosen audience, the tone you picked and, if you specify it, your relationship with the other person, to tailor the response.
Never your name or your email address.
This content goes through our server, which sends it to our artificial intelligence provider and then erases it. It’s never saved in our database or in our logs: the logs of Supabase, which hosts our server, only record that a request took place, never its content.
On your phone, working copies are deleted after the analysis; the original stays untouched in your photo library. If you share a screenshot or text to TCHAZO from another app, it stays on your phone until you mask it and send it. If you cancel, or do nothing for 24 hours, it’s deleted.
Automatic masking can miss a name or a number: always check before you send. Only send your own conversations; you’re responsible for what you submit.
5. What we keep on our server
| Information | Why | How long |
|---|---|---|
| Your email address and account ID | To sign you in | As long as your account exists |
| Proof of your consent: version, date given and, if applicable, date withdrawn | The law requires us to be able to show it | As long as your account exists |
| Your subscription status: active, on trial, end date | To give you access to paid features | As long as your account exists |
| Purchase notices sent by RevenueCat | To process your purchases and avoid duplicates | 90 days; made anonymous if you delete your account |
| Your daily usage counters (analyses and reaction previews) | To apply your plan’s limits | 35 days |
| The date and time of your last analysis, without its content | To check that a request for reactions relates to an analysis less than 24 hours old | As long as your account exists; replaced with each analysis |
| Your phone’s time zone (for example America/Toronto) and, if it changes, the new time zone | To reset your limits at midnight, your time | As long as your account exists |
| Your problem reports: the feature and the category, with no content | To improve the service | 12 months; detached from your account if you delete it |
| Our hosting provider’s (Supabase) technical logs: account and session IDs, IP address, and approximate location (city, postal code) of each request | To protect the service and fix outages | 7 days, then automatically erased |
Apart from these temporary logs, we keep no messages, no screenshots, no conversation text, and no reports.
6. The companies that help us
| Company | What it does for us | What it receives |
|---|---|---|
| Anthropic (Claude models) | Producing the analyses | The content in section 4, without your name or email address. Anthropic deletes it automatically within 30 days, unless its safety systems flag content as violating its usage policies (kept for up to 2 years) or the law requires otherwise. Its commercial terms forbid it from using this content to train its models. |
| Supabase | Hosting your account and our server | The information in section 5 and the waitlist information (section 11). Hosted in Canada (Montreal); technical logs kept in the European Union. |
| Apple, Google and RevenueCat | Handling purchases and subscriptions | Your account ID and your purchases |
| PostHog | Measuring app usage, anonymously | Events with no content (for example “analysis shown”), language, platform, and app version |
| Sentry | Alerting us to crashes | Filtered technical reports, with no content and no screenshots |
| Cloudflare | Hosting the tchazo.com website, managing its domain name and protecting it from attacks | Like any web server, your IP address and the pages requested, processed to display the site and block malicious traffic, under its own retention rules |
Only Anthropic receives your content. None of these companies may use it for its own purposes. If we add a company, for example an email delivery service, we list it here before it receives anything.
Some of these companies process information outside Canada, including in the United States and the European Union. It may then be subject to the laws of those countries.
7. Your consent
In the app, we ask for your consent before your very first analysis, on a screen that explains what will be sent and to whom. Without it, nothing is sent: you can use the demo, which works without sending anything. You can withdraw your consent at any time in Settings; the app then goes back to the demo. If what we send changes, we ask for your consent again.
On the website, we only add you to the waitlist if you check the box yourself.
8. Your rights
At any time, you can:
- find out what information we have about you and get a copy of it, including in a structured, commonly used format;
- have it corrected;
- delete your account from the app (Settings › Delete my account). The information in section 5 is then erased, except your problem reports and purchase notices, which become anonymous, and the hosting provider’s technical logs, which erase themselves within 7 days. Deleting your account does not cancel your subscription: cancel it in the App Store or Google Play;
- withdraw your consent. Here too, your subscription continues until you cancel it;
- unsubscribe from the waitlist (section 11);
- file a complaint with the Office of the Privacy Commissioner of Canada or, in Quebec, with the Commission d’accès à l’information.
To exercise a right, write to [email protected]. We reply within 30 days. We may ask you to confirm that you’re the person concerned, never asking for more than we need.
9. Age
TCHAZO is only for people 18 and over. If we learn that an account or a sign-up belongs to a minor, we delete it.
10. Security
Connections are encrypted (HTTPS), the database on your phone is encrypted, access to our server is limited by rules that let each account see only its own data, and our access keys are never written in the code. If an incident creates a risk of significant harm to you, we let you know and notify the appropriate authorities.
11. The tchazo.com website and the waitlist
The website uses no advertising or audience-measurement cookies.
If you join the waitlist, we keep:
- your email address;
- your language;
- the date of your consent and the text you agreed to;
- if the link that brought you to the site indicates it, where your sign-up came from (for example “instagram”), which helps us see which channels work.
We only write to you about the launch of TCHAZO. We keep this information until six months after launch, or until you unsubscribe. You can unsubscribe at any time using the link in each of our emails, or by writing to [email protected]: your information is then erased immediately.
To block abusive sign-ups, your IP address is turned, when you submit the form, into a fingerprint that can’t be traced back to it; that fingerprint is erased after 24 hours. The technical logs of Supabase, which hosts our server, also keep your IP address and approximate location for 7 days, then erase them automatically.
12. Changes
If we change this policy in a significant way, we announce it on this page and in the app before the change applies, and the date at the top of the page changes.
This policy is available in French and English; both versions are equally valid.
Contact us
TCHAZO Labs Inc. Privacy Officer 1338 Wellington St W, Unit 10, Ottawa, Ontario K1Y 3B7, Canada [email protected]