Privacy Policy

YOUR DATA, YOUR CONTROL

Last updated: March 2025. Chalked (“we”, “us”, “our”) operates the Chalked mobile application (“App”). This Privacy Policy explains how we collect, use, share, and protect your personal information, and describes the rights you have regarding your data.

1. Data We Collect

When you create an account and use Chalked, we collect:

  • Account information: display name, email address, and date of birth (required for age verification).
  • Optional profile data: Venmo username, golf handicap, and profile photo.
  • Contest activity: contests created or joined, results, entry fees, and prize history.
  • Proof uploads: photos you submit as proof of contest completion.
  • Location data: approximate location when you opt in to venue tagging or nearby contest discovery. Background location is used only for automatic contest activation when all participants arrive at a venue.
  • Voice recordings: short audio clips you voluntarily record as in-contest trash talk.
  • Device information: device identifiers and operating system version for crash reporting and app integrity checks.
  • Usage data: feature interactions, screen views, and session duration collected through analytics (see Section 4).

2. How We Use Your Data

We use your data to:

  • Operate the Chalked platform — create and manage contests, track results, and enable friend connections.
  • Verify that you meet the 18+ age requirement.
  • Send push notifications about contest invitations, results, and payment reminders.
  • Improve the app through aggregated analytics and crash diagnostics.
  • Prevent fraud, abuse, and cheating through app integrity checks.
  • Respond to support requests and communicate service updates.

We do not sell your personal data to third parties, and we do not use your data for advertising targeting.

3. Payment Information

Chalked does not process, hold, or transmit payments. All financial transactions occur directly between users through Venmo, a third-party service. Chalked only stores your Venmo username if you choose to provide it, and uses it solely to generate Venmo deep-links that open the Venmo app on your device. We do not store payment card numbers, bank account details, or any other financial credentials.

4. Third-Party Services

Chalked uses the following third-party services that may process your data. Each service has its own privacy policy:

  • Better Auth / Expo: authentication and secure session management. Your sign-in credentials (via Sign in with Apple or Google) are handled by the respective identity provider and then managed through Better Auth.
  • Convex: cloud database and backend infrastructure. All Chalked application data (user profiles, contest records, chat messages) is stored in Convex. Data is hosted in the United States. See convex.dev/privacy.
  • PostHog: product analytics. PostHog records feature interactions and session events to help us improve the app. It does not record financial transactions or sensitive personal data fields. See posthog.com/privacy.
  • Sentry: crash reporting and error monitoring. Sentry receives stack traces and device context when the app encounters an error. Crash reports are not linked to your identity by default. See sentry.io/privacy.
  • Resend: transactional email delivery (e.g., account notices). See resend.com/privacy.
  • Apple Sign In / Google Sign In: identity providers for sign-in. Your use of these services is governed by Apple’s and Google’s respective privacy policies.

5. Data Sharing

We share your data only in the following circumstances:

  • With other Chalked users: your display name, avatar, and contest history are visible to participants in shared contests and to users you add as friends.
  • With service providers: the third-party services listed in Section 4, acting as data processors under our instruction.
  • Legal compliance: if required by law, subpoena, or court order, or to protect the rights, property, or safety of Chalked, our users, or the public.
  • Business transfers: if Chalked is acquired or merges with another entity, your data may be transferred as part of that transaction. You will be notified beforehand.

6. Data Retention

We retain your personal data for as long as your account is active. Specific retention periods:

  • Account and profile data: retained until you delete your account.
  • Contest history: completed contest records are retained indefinitely for integrity and audit purposes, but are anonymized when the associated user account is deleted.
  • AI chat history: retained until you delete your account, or until you manually clear your chat history within the app.
  • Proof and voice recordings: retained until you delete your account or the associated contest is deleted.
  • Crash reports: Sentry retains crash data for 90 days.
  • Analytics events: PostHog retains event data for 12 months on our plan.

7. Your Rights and Account Deletion

You have the right to:

  • Access: request a copy of the personal data we hold about you.
  • Correction: update your profile information at any time within the app (Profile → Edit).
  • Deletion: permanently delete your account and associated data directly in the app (Profile → Delete Account). Deletion removes your profile, contest participations in active contests, AI chat history, friend connections, and uploaded media. Completed contest records are anonymized rather than deleted to preserve the integrity of other participants’ histories.
  • Portability: request an export of your data by emailing privacy@getchalked.app.
  • Objection / restriction: contact us to restrict certain processing activities.

To exercise any right not available in-app, contact us at privacy@getchalked.app. We will respond within 30 days.

8. Children’s Privacy (COPPA)

Chalked is strictly for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 13. If we learn that we have inadvertently collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal data, please contact us at privacy@getchalked.app.

9. California Residents (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. Chalked does not sell personal information. To exercise your rights, contact us at privacy@getchalked.app.

10. International Data Transfers

Chalked is operated in the United States. Your data is stored on Convex infrastructure located in the United States. If you access Chalked from outside the United States, your data will be transferred to and processed in the United States. By using Chalked, you consent to this transfer. We currently do not offer service in the European Economic Area; if we expand, we will implement appropriate data transfer safeguards (such as Standard Contractual Clauses) at that time.

11. Age Requirement

Chalked is for users 18 and older. We collect date of birth during onboarding to verify age compliance. If age verification fails, access to the App is denied.

12. Security

We use industry-standard security measures including encrypted connections (TLS), secure token storage, and app integrity checks to protect your data. However, no system is perfectly secure. If you discover a security vulnerability, please report it responsibly to privacy@getchalked.app.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notice or email. Your continued use of the App after the effective date of any change constitutes acceptance of the updated policy.

14. Contact

Questions, requests, or concerns? Contact us at privacy@getchalked.app.