This policy explains what data the Tchalam app and website process, why, and what your rights are. It applies wherever you are, including the European Union, the United Kingdom, the United States and Canada.
1. Data controller
Tchalam is published by Ermano Nicolas Joseph, Port-au-Prince, Haïti. For any question about your data: support@tchalam.com.
2. Data we process
- Account: an anonymous identifier created automatically. If you link your account to Google or Apple: your name, email address, profile photo and the provider you chose.
- Preferences: language, favorite lotteries, notification settings, visit streak and visit dates.
- Content you create: your dreams (text of up to 200 characters, suggested numbers and their interpretation) and your tracked numbers.
- Tchala searches: searched words are counted in aggregate, without being linked to your account.
- Feedback: rating, optional message, app version, device model, system version, language, number of app launches and time since install.
- Notifications: a device token (Firebase Cloud Messaging) and the result topics the device is subscribed to.
- Measurement and stability: usage events (screens opened, actions, ads shown) through Firebase Analytics, without your name or email, and crash reports through Firebase Crashlytics.
- Advertising: the device advertising identifier and technical information, processed by Google AdMob according to your consent choice. On iPhone, the advertising identifier is only used if you allow it.
- Results requests: to show history, statistics and Tchala, the app sends your anonymous identifier, your platform and your search filters to our results service.
We do not collect your location, contacts, photos or payment data. Tchalam processes no payments.
3. Why we use it
- To provide the service: results, statistics, Tchala, tracked numbers, account sync.
- To send the notifications you chose (results, numbers that hit, dreams).
- To measure usage, fix errors and improve the app.
- To show ads, which keep Tchalam free.
- To keep the service secure and prevent abuse.
Legal bases (GDPR): performing the service you ask for; your consent for personalized ads and notifications; our legitimate interest in security, audience measurement and improving the service.
4. Who we share it with
- Google (Firebase, AdMob), which hosts the data and provides authentication, notifications, measurement, crash reports and advertising.
- Alwaysdata (France), which hosts our results service.
- Authorities, only when the law requires it.
We do not sell your data. When ads are personalized, California law may treat this as "sharing" for cross-context behavioral advertising: you can opt out at any time (see "Your rights").
5. Where your data is
Account and content data are hosted by Google in the United States (Firestore "United States" multi-region). The results service is hosted in France. These providers apply the safeguards the law requires for international transfers, such as the European Commission's standard contractual clauses.
6. How long we keep it
Your data is kept as long as your account exists.
When you ask to delete your account, it is deactivated right away and permanently deleted after 30 days. During that period, an account linked to Google or Apple can be restored by signing in again.
- After deletion, we only keep aggregate, anonymous statistics (for example the number of accounts deleted per month), which cannot identify you.
- Your feedback is kept without any personal data: only the rating, app version, platform and language remain.
- A technical deletion log (technical identifier, request date, deletion date) is kept for 1 year, for security and to prove the deletion happened, and is then erased.
Measurement data and crash reports are kept for the periods applied by Google.
7. Your rights
Depending on where you live, you have the right to access your data, have it corrected, have it deleted, receive it in a reusable format, object to some processing, ask for it to be restricted and withdraw your consent. California residents can also ask to know what data is processed and opt out of sharing for targeted advertising. We will not treat you differently for exercising your rights.
- Delete your account: in the app, Me tab, then "Delete". See also the "Delete your account" page.
- Advertising: in the app, Me tab, then "Privacy" (where your region requires it), and in your phone's ad settings.
- Notifications: in the app or in your phone's settings.
- Any other request: support@tchalam.com. We reply within 30 days.
You can also contact the data protection authority of your country (for example the CNIL in France, the Office of the Privacy Commissioner of Canada, Quebec's Commission d'accès à l'information or the California Privacy Protection Agency).
8. Minimum age
Tchalam is for people aged 18 or over. We do not knowingly collect data from minors. If you believe a minor is using Tchalam, write to us and we will delete their data.
9. Security
Traffic is encrypted (HTTPS) and access to data is limited by security rules: each user can only read and change their own data. No system is perfectly secure; if an incident affects your data, we will inform you as the law requires.
10. Changes
We may update this policy. The last update date is shown at the top of the page. If a change is significant, we will tell you in the app.