Privacy Policy

Chof ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application, whether as an account holder or a guest user.

1. Information We Collect

Account Information

When you create an account, we collect your email address and password. If you use Sign in with Apple, we receive your Apple ID identifier and optionally your name and email.

Guest & Usage Data

You may use certain features of Chof, such as scanning chocolate bars, without creating an account. In these cases, we may collect a unique device identifier or "fingerprint" to enforce daily scan limits and ensure service quality.

User's Content

We collect photos of chocolate bars that you scan using your camera or select from your photo library. These images are uploaded to our servers to identify the product. If you are not signed in, these scans are temporarily associated with your device identifier.

Usage Activity

We track interactions such as the chocolate bars you scan, rate, and add to your lists to provide and improve our services.

2. How We Use Your Information

• To provide and maintain the Chof service
• To identify chocolate bars using AI analysis
• To personalize your chocolate collection
• To improve our product identification accuracy
• To send service-related communications

Emails We Send

We send email to the address on your Chof account. If you use Chof without an account and ask for updates about a bar, we email the address you give us for that.

Account emails. We send these because they are part of using your account, and they cannot be turned off:

• Password reset
• A confirmation when you change your email address

Emails about your use of Chof. We send these on the basis of our legitimate interest in helping you get value from Chof and in keeping its chocolate data accurate:

• A welcome email shortly after you sign up
• Up to two emails in your first week that help you get started, depending on whether you have scanned or saved a bar yet
• An email shortly after your first scan
• A reminder to rate a bar you scanned but did not rate, at most once a week
• A monthly recap of your own month on Chof, if you have 3 or more bars in My Bars. It covers your scans and ratings, the bars you added to Chof and what happened to them, new bars from makers in My Bars, and new details on your bars. We send it at most once a month, between the 3rd and the 7th, and not at all in a month with nothing new for you.
• A short email when a bar your scan added to Chof gets its first rating from someone else or reaches a community score. We send at most one a week.
• Now and then, a one-off email about a new Chof feature

Apart from the welcome email and the email after your first scan, we send at most one of these every 48 hours.

What these emails are built from.Your bars, scans and ratings, the bars your scans added to Chof, and new bars and details in the Chof catalog. When you rate a bar that another person's scan added, that person may get an email saying another Chof user rated it. We never tell them who you are.

Bar updates. If you ask to follow a bar, we email you once when the details you were waiting for are added. If you are not signed in, we first send a confirmation email, and nothing else is sent until you confirm it.

Chof Monthly. A monthly email about what is new in the Chof catalog. If you have a Chof account, we add you on the basis of our legitimate interest, unless you have unsubscribed from Chof Monthly or from our other emails before. Anyone else can subscribe at chof.nl/newsletter and confirms by email first. It has no advertising, and nobody pays to be in it.

Unsubscribing.Every email except account emails lets you unsubscribe. Some do it with one click. Others open an email to us, from a link in the email or your mail app's unsubscribe button, and we process those by hand. Unsubscribing from the emails about your use of Chof also stops Chof Monthly. Unsubscribing from Chof Monthly stops only Chof Monthly. You can also reply to any of these emails and ask us to stop.

Link tracking. In every email except Chof Monthly, our email provider Resend records when you click a link. Most links in our emails also carry a short tag naming the email, not you, so our analytics can count visits that came from it. We do not use open-tracking pixels.

3. Subscription and Payment Data

If you purchase Chof Premium, your payment is processed directly by the Apple App Store or Google Play Store. We do not collect or store your full credit card details.

We receive subscription metadata (such as subscription status, product ID, and expiration dates) to provision your Premium access, managed via our provider RevenueCat.

4. Third-Party Services

Google Gemini AI

We send image data to Google's Gemini AI for the sole purpose of identifying chocolate bars. Google does not use this data to train their models.

Supabase

We use Supabase for authentication and database services. Your data is stored securely on Supabase infrastructure.

Sentry

We use Sentry to monitor app crashes and errors to improve the user experience. This may include device information and error context.

Braintrust

We use Braintrust to monitor and debug AI identification quality. We log operational metadata about AI calls. We do not store raw scan images in Braintrust.

RevenueCat

We use RevenueCat to manage cross-platform subscriptions and in-app purchases. RevenueCat receives anonymized app user IDs and purchase receipts to validate and provision your Premium access.

PostHog

We use PostHog for product analytics to understand how users interact with our app and to improve the user experience.

Resend

We use Resend to send email, including password reset emails. Resend receives your email address and the content of each email, and records delivery, bounces, and link clicks as described in Section 2.

Mapbox

When you view our interactive maker map on the website, we use Mapbox to render the map. Mapbox may receive your IP address and map interaction data (such as the area you view and your zoom level) to deliver and improve the mapping service.

5. Data Security

We implement appropriate security measures to protect your personal information. All data transmission is encrypted using HTTPS.

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data
• Opt out of non-essential emails, and object to processing based on our legitimate interest

You can stop the emails in Section 2 at any time, as described there.

7. Account Deletion

You can delete your account at any time through the mobile app's Settings page. This will permanently remove all your data including scans, ratings, and personal information.

Email history (which emails we sent you, when, and whether you unsubscribed): retained while your account is active, and deleted when you delete your account. Resend keeps its own delivery and click records under its own retention terms. An address you gave for bar updates without an account is kept until you unsubscribe or ask us to delete it.

8. Children's Privacy

Chof is not intended for children under 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

support@chof.nl