Privacy Policy
Last updated: 6th May 2025
1. Introduction
This Privacy Policy explains how Grandma Apps (trading name of Jon Corp OÜ, "we," "us," or "our") collects, uses, and protects your personal information when you use Chik ("the Service").
Company information
- Legal Entity: Jon Corp OÜ
- Trading As: Grandma Apps
- Address: Sepapaja tn 6, 15551 Tallinn, Estonia
- Contact: team@chik.app
2. Information we collect
We collect information you directly provide to us: full name, email, profile image (if uploaded), task related files and content, messages sent through live chat feature, team and collaboration data.
We also automatically collect: Functional cookies necessary for the Service to operate, Basic analytics data through Fathom Analytics (privacy-focused, cookieless), Conversion tracking through Meta (Facebook) Pixel for advertising attribution.
We do not collect IP addresses, device or browser information, Payment information (handled by our merchant of record, Lemon Squeezy).
3. How we use your information
We use your information to: Provide and maintain the Service, Process your registration and manage your account, Enable collaboration features between teams, Send service-related communications (login codes, notifications), Send marketing emails about our products (with your consent), Respond to your requests and provide customer support, Improve and develop our Service, Track advertising conversion rates (via Meta Pixel)
4. Data Sharing and Sales
We do not sell or share your personal data with third parties. We have a strict policy against selling user data.
We only share data with: Service providers necessary to operate Chik (as listed in Section 5), Law enforcement when legally required
5. Third-Party Services
We use the following third-party services:
- Lemon Squeezy: Our merchant of record, handles all payment processing
- Resend: Email delivery for login codes and communications
- Fathom Analytics: Privacy-focused, cookieless analytics
- Meta (Facebook) Pixel: Conversion tracking for advertising
- Cloudflare: Hosting and infrastructure
- Supabase: Database and backend services
6. Data Storage and Security
Your data is stored on servers located in Germany and We operate within the EU to ensure GDPR compliance.
- Data is encrypted in transit (HTTPS) and at rest
- We implement Row Level Security (RLS) policies
- Regular security reviews and updates
While we use industry-standard security measures, please note: We do not use end-to-end encryption, Our authorized personnel can access your data when necessary for support or legal compliance
7. Your Rights
Under GDPR and CCPA, you have the right to: Access your personal data, Correct inaccurate data, Request deletion of your data, Export your data in a portable format, Object to certain processing activities, Opt-out of marketing communications, Withdraw consent where applicable.
To excersise your rights, please send an email to team@chik.app. You may delete your account directly within the app.
8. Data Retention
- Active Accounts: We retain data as long as your account is active
- Deleted Accounts: Data is deleted immediately upon request
- Backups: Retained for maximum 30 days after deletion
- Shared Data: Task data shared with other users may be retained if those users remain active
9. International Data Transfers
While we operate from Estonia (EU) and our servers are in Germany We serve customers globally, and some service providers may process data outside the EU/EEA, all transfers comply with GDPR requirements using appropriate safeguards.
10. Cookies
We only use functional cookies essential for the Service to operate. We do not use:
- Tracking cookies
- Third-party advertising cookies
- Persistent analytics cookies
11. Contact Us
For privacy-related questions or to exercise your rights, contact us at team@chik.app.
This Privacy Policy is effective as of the date stated above and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.