DiscoverPlus
Log in

Privacy Policy

Last Updated: December 24, 2025

At Chievos, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services.

Please read this Privacy Policy carefully. By using Chievos, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

Account Information:

  • Name and email address (from Google OAuth)
  • Profile picture (from Google OAuth, optional)
  • Authentication credentials

Achievement Data:

  • Achievement titles and descriptions
  • Personal notes and reflections
  • Dates and timestamps
  • Difficulty and enjoyability ratings
  • Tags

Media Content:

  • Photos you upload to document achievements
  • Videos (if supported)
  • Other media files you attach to your chievos

1.2 Automatically Collected Information

Browser and Device Information:

  • Browser type and version
  • Operating system
  • Device type (desktop, tablet, mobile)
  • Screen resolution
  • IP address

Usage Data:

  • Website usage statistics
  • Features accessed
  • Time spent on the platform
  • Navigation patterns
  • Error logs and crash reports
  • Referring website

Location Data:

  • We do NOT collect precise location data
  • General location may be inferred from IP address for analytics

1.3 Information from Third Parties

Google OAuth:

  • Basic profile information (name, email, profile picture)
  • Google account ID for authentication purposes

We only request the minimum permissions necessary to provide authentication services.

2. How We Use Your Information

We use your information to:

2.1 Provide the Service

  • Create and manage your account
  • Store and display your achievements
  • Process and store your uploaded media
  • Track your badge progress
  • Generate statistics and insights
  • Sync your data across your devices

2.2 Improve the Service

  • Analyze usage patterns
  • Fix bugs and technical issues
  • Develop new features
  • Optimize performance and user experience
  • Conduct research and analytics

2.3 Communicate with You

  • Send service-related notifications
  • Respond to your inquiries and support requests
  • Notify you of updates and new features
  • Send important account information

2.4 Security and Safety

  • Prevent fraud and abuse
  • Protect against security threats
  • Enforce our Terms of Service
  • Comply with legal obligations

3. How We Share Your Information

We do NOT sell your personal information. We may share your information only in the following circumstances:

3.1 Service Providers

We may share information with third-party service providers who assist us in:

  • Supabase: Database hosting and backend services
  • Google Cloud Platform: Authentication services
  • Cloud Storage: Media file storage
  • Analytics Services: Website usage analytics (anonymized)

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

3.2 Legal Requirements

We may disclose your information if required by law or in response to:

  • Court orders or legal processes
  • Government requests
  • Protection of our rights or property
  • Safety concerns or emergencies

3.3 Business Transfers

If Chievos is involved in a merger, acquisition, or sale of assets, your information may be transferred to the new owner.

3.4 With Your Consent

We may share your information with your explicit consent for specific purposes not covered above.

4. Data Storage and Security

4.1 Data Storage

Your data is stored on secure servers provided by Supabase, with the following measures:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest
  • Regular security audits
  • Access controls and authentication
  • Automated backups

4.2 Data Retention

We retain your data for as long as:

  • Your account is active
  • Necessary to provide the Service
  • Required by law or legitimate business purposes

When you delete your account:

  • Your achievements and media are permanently deleted
  • Some data may be retained for legal compliance (e.g., 30-90 days)
  • Anonymized analytics data may be retained indefinitely

4.3 Security Measures

We implement industry-standard security measures, including:

  • Secure authentication protocols
  • Regular security updates
  • Monitoring for suspicious activity
  • Employee access restrictions

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

  • Keep you logged in
  • Remember your preferences
  • Analyze usage patterns
  • Improve website performance

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features.

For detailed information, see our Cookie Policy.

6. Your Privacy Rights

6.1 Access and Control

You have the right to:

  • Access: View all your personal data
  • Update: Edit your profile and achievements
  • Export: Download your data in a portable format
  • Delete: Remove individual achievements or your entire account

You can exercise these rights through your Account Settings.

6.2 Privacy Settings

You can control:

  • Whether achievements are visible to others (if future sharing features are added)
  • Notification preferences
  • Data collection preferences

6.3 Additional Rights (Depending on Your Location)

For EU/EEA Users (GDPR):

  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent

For California Users (CCPA):

  • Right to know what information is collected
  • Right to delete personal information
  • Right to opt-out of sale (we don't sell data)
  • Right to non-discrimination

For Other Jurisdictions:

Similar rights may apply under local privacy laws.

To exercise these rights, contact us at privacy@chievos.app.

7. Children's Privacy

Chievos is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will delete such information from our systems.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws.

We ensure appropriate safeguards are in place, including:

  • Standard contractual clauses
  • Adequacy decisions
  • Other legally approved mechanisms

9. Third-Party Links and Services

Chievos may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10. Do Not Track

Some browsers include a "Do Not Track" feature. Our website does not currently respond to "Do Not Track" signals. You can control tracking through your browser settings and our Cookie Policy preferences.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be communicated through:

  • Website notifications
  • Email notifications (if provided)
  • Updated "Last Updated" date at the top

Material changes will be highlighted and may require your acknowledgment.

Your continued use of Chievos after changes indicates acceptance of the updated Privacy Policy.

12. Your Consent

By using Chievos, you consent to:

  • The collection and use of information as described in this Privacy Policy
  • The processing of your data for the purposes outlined
  • The transfer of data to third-party service providers

You may withdraw consent at any time by deleting your account.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: privacy@chievos.app

Response Time: We aim to respond within 7 business days

14. Data Protection Officer

For users in the EU/EEA, you may contact our Data Protection Officer at: dpo@chievos.app

15. Supervisory Authority

If you are in the EU/EEA, you have the right to lodge a complaint with your local supervisory authority if you believe we have violated your privacy rights.

Summary:

  • We collect only necessary information to provide the Service
  • We do NOT sell your data
  • You have control over your information
  • We use industry-standard security measures
  • You can delete your account and data at any time

Thank you for trusting Chievos with your achievements!