Privacy Policy

Email address — provided when you sign in with Google. Used for authentication and to identify your account.

Skin type and concerns — entered during the skin quiz or routine builder. Used to personalize product recommendations and AI-generated routines.

Product favorites — saved when you heart a product. Synced to your account so they appear across devices.

Routines — your AM/PM routine steps, stored so you can view and share your routine from your profile.

Product reviews — submitted voluntarily. Your display name and review text are visible on product pages.

Photos — uploaded to the Skin Analyzer or Scan My Shelf tools. Photos are sent to OpenAI for analysis and are not stored permanently by ChokChok. OpenAI does not use API submissions to train its models.

Newsletter email — provided optionally if you subscribe to our newsletter.

To authenticate you and maintain your session.

To personalize AI-powered recommendations (routines, skin analysis, product suggestions).

To save your favorites, routines, and reviews so they persist across sessions.

To display your public profile (if you choose to set one up) at /u/[username].

To send you our newsletter (only if you opted in — you can unsubscribe anytime).

We never sell, rent, or trade your personal data to third parties.

Supabase — database and authentication provider. Your data is stored in Supabase-hosted PostgreSQL databases in the United States.

Google — used for OAuth sign-in. We receive your email and display name; we do not access your Google contacts, calendar, or other data.

OpenAI — powers our AI features (chat, routine builder, skin analyzer, shelf scanner, ingredient checker). Text prompts and uploaded photos are sent to OpenAI's API for processing. OpenAI does not store or use API data to train models.

PostHog — used for mobile app analytics. Collects anonymous usage events to help us improve the app experience.

On the web, we use Umami, a privacy-friendly analytics tool. Umami does not use cookies, does not collect personal data, and does not track you across sites. All data is aggregated and anonymous.

On the mobile app, we use PostHog for anonymous event analytics to understand feature usage and improve the app.

ChokChok uses minimal cookies:

Authentication session — maintains your login state across page visits.

Beauty origin preference — remembers your selected beauty origin (K-Beauty, J-Beauty, or French Beauty).

We do not use advertising cookies, tracking cookies, or any third-party cookie-based analytics.

Your data is stored in Supabase-hosted PostgreSQL databases located in the United States. All connections use TLS encryption in transit. Supabase applies Row Level Security policies to ensure users can only access their own data.

You can view and edit your profile, routines, and favorites at any time from within the app.

You can delete your account and all associated data (profile, routines, favorites, reviews) by contacting us at [email protected]. We will process deletion requests within 30 days.

If you are located in the EU, UK, or California, you may have additional rights under GDPR or CCPA, including the right to access, correct, or port your data. Contact us to exercise these rights.

ChokChok is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of ChokChok after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or your data, reach out to us at [email protected].