Privacy Policy

Last updated: August 31, 2026

Chispot Inc. ("Chispot", "we", "us") is a corporation based in Ottawa, Ontario, Canada. This policy explains what we collect when you use the Chispot app, why we collect it, who else sees it, and what you can do about it.

What we collect

When you create an account:

• Your username and email address.
• Your password, which we store only as a salted hash — we never hold the password itself and cannot recover it for you.
• Your date of birth. Chispot is for people aged 16 and over, and we ask for a date rather than a yes/no answer so the question is a neutral one. We keep the date itself, not just a pass/fail result, because if a question later arises about an account's age the only honest answer is what was actually declared, and when.
• The fact that you accepted these terms, the moment you accepted them, and which version you accepted.

When you use the app:

• Content you post — photos, videos, text, comments and messages — and who you posted it to.
• Your device's location, when you grant permission. Chispot is built around physical places, so features like nearby places and the map need it. You can withdraw the permission at any time in your device's settings; those features stop working, the rest of the app does not.
• The places you create, join, or save, and the people you befriend or block.
• A device token, if you turn on push notifications, so we can deliver them.
• Basic technical and diagnostic data — app version, device model, OS version, and crash reports. Crash reports go to Sentry and are tied to your account id so we can tell whether a bug affects one person or everyone. They never include your email address.

What we do with it

• Operate the app: show you content, deliver messages, run the map.
• Keep accounts secure and sessions valid.
• Review reports of objectionable content and abusive behaviour, and enforce our Terms of Service.
• Fix crashes and diagnose problems.
• Send you service email — verification and password-reset codes.

We do not sell your personal information. We do not show third-party advertising, and we do not share your information with advertisers.

Who else sees it

Other users see what you post, according to the privacy settings on your account and on the place you post to. Your username and profile pictures are visible to people who can see your content. Your email address and date of birth are never shown to other users.

Service providers process data on our behalf and only on our instructions:

• Amazon Web Services — storage and delivery of photos and videos, and video transcoding (United States).
• Render — application servers and databases (United States).
• Sentry — crash and error reporting.
• Apple and Google — delivery of push notifications to your device.

We may also disclose information where we are legally required to, or where it is necessary to protect someone's safety or our rights.

Where your data is held

We are based in Canada and our servers are in the United States. If you use Chispot from outside those countries, your information is transferred to and processed there, under contractual protections with each provider.

How long we keep it

• Account data, for as long as your account exists.
• Content, until you delete it or delete your account.
• Deleted media is removed from our storage, though copies may persist briefly in caches and backups.
• Verification and reset codes expire within minutes. An abandoned registration is discarded automatically.
• Records relating to safety reports and enforcement may be kept longer where we need them to prevent repeat harm or to meet a legal obligation.

Deleting your account

Settings › Manage account › Delete account. This is permanent. It removes your account and the places you own, along with those places' posts, members and messages. Posts and comments you made elsewhere remain but are detached and shown as coming from a deleted user.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict how we use it, and to withdraw consent. Email admin@chispots.com and we will respond.

If you are in Canada you may complain to the Office of the Privacy Commissioner of Canada; if you are in the EEA or UK, to your local data protection authority.

Children

Chispot is not for children. You must be at least 16 years old to hold an account. We do not knowingly collect personal information from anyone under 16.

If you are a parent or guardian and believe your child has created an account, email admin@chispots.com. We will terminate the account and delete the associated information.

Security

Passwords are stored as salted hashes. Traffic between the app and our servers is encrypted in transit, and media is served over signed, expiring URLs. No system is perfectly secure, but if a breach affects you we will tell you and the relevant authority as the law requires.

Changes to this policy

When this policy changes we will update the date at the top of this page, and for material changes we will tell you in the app.

Contact us

Chispot Inc., Ottawa, Ontario, Canada — admin@chispots.com.

← Back to home