Privacy Policy — ChidChat

Last updated 6 August 2026 · Provider: JPVK Team · Contact: admin@chidchat.com

ChidChat is a chat app for field-service teams, with a job-handover feature (photograph the site, fill in the form, produce the handover document). This page says what we collect, why, who else sees it, and how you delete it.

1. What we collect

Kind	Detail	Why
Account	Email, display name, profile picture, username and phone number if you provide them, language, status, and the identifier from your sign-in provider (Google / Apple)	To create your account, let people find you, and sign you in
Messages and files	Messages, photos, videos, files, stickers, read receipts, and which conversations you belong to	To deliver messages and let you read them again later
Location	GPS coordinates and capture time are stamped onto photos taken for a job handover only, and stored with that job	It is the evidence of where and when the work was done, which is the point of a handover document. Ordinary chat photos are not stamped.
In-app contacts	People you add in the app, nicknames you give them, and anyone you block	The friends list and the anti-scam controls
Numbers from your contacts (only if you turn it on)	If you turn on “Find friends from your contacts”, the app sends only the phone numbers from your contacts to be matched against ChidChat accounts. We never read the names in your contacts. The numbers sent are turned into a check value and discarded as soon as the match is done. The only thing kept is “account A has account B's number” — a pair of user ids with no phone number in it — and only when both people are ChidChat users and the other person allows being found by their number. Numbers belonging to people who are not ChidChat users are not stored at all.	So you can find people you already know without typing numbers one by one
You can turn it off at any time, and the matches involving you are deleted when you do — if you never turn it on, the app does not touch your contacts at all.
Notifications	One push token per device (Firebase / Apple)	To deliver message and incoming-call notifications
Calls	Who called whom, when, for how long, and how it ended. We do not record call audio.	To make calls work on both ends and show call history
Payments	Stripe customer and subscription identifiers, your plan, and any extra storage purchased. We never see or store card numbers.	To bill you and unlock what you paid for
Account security	A one-way hash of your password (scrypt) and your 2FA secret if you enable it	To authenticate you

2. AI features (opt-in)

The AI features — chat summaries, link summaries, receipt reading, and screening of public posts — send only the message or file that the request is about to Anthropic (Claude), which is a transfer outside Thailand. The app asks for your consent before the first use, and you can simply not use them: the rest of the app works normally. Content unrelated to an AI request is never sent.

3. Processors we use

Provider	For
Cloudflare R2	Storing photos, videos, files and handover documents
Google Firebase	Push notifications and Google sign-in
Apple	Sign in with Apple and incoming-call notifications on iPhone
LiveKit (self-hosted)	Carrying call audio between participants; not recorded
Anthropic	The AI features in section 2 only
Stripe	Taking payment and holding card details (we never see them)
Resend	System email such as verification and password reset

We do not sell your data, and there are no ads in the app.

4. How long we keep it, and how to delete it

We keep your data while your account exists. You can delete the account yourself in the app under Profile → Delete account, or by writing to admin@chidchat.com. Deleting removes your account, your contacts, the files you uploaded and your notification tokens.

Two things deliberately survive, and we say so plainly: messages you sent into a conversation stay with the other people in it (detached from your account), because the conversation is theirs too; and handover documents already delivered to a customer stay with that customer, because they are that business's record of work received.

5. Your rights (Thailand's PDPA)

You may request access to, a copy of, correction of, or deletion of your personal data, object to its processing, and withdraw AI consent at any time. Write to admin@chidchat.com; we reply within 30 days.

6. Children

ChidChat is a work tool, not designed for anyone under 13, and we do not knowingly collect data from children.

7. Changes

We will announce any significant change in the app before it takes effect, and update the date at the top of this page.