Privacy policy

Account, access, and payment records

We process your Firebase user ID, verified email address, social sign-in provider, and any display name or profile photo URL that provider makes available, together with session status, subscription status, credit allocations and usage, payment-provider transaction or event identifiers, and consent timestamps to secure your account and deliver purchased access. We do not receive your social-account password or store full card details.

If you delete your account, the identity fields used to sign in are anonymized. Billing, credit, refund, chargeback, dispute, and tax ledger records may be retained for the period required to meet legal, accounting, fraud-prevention, and payment-provider obligations.

Chart photos and analysis results

Uploaded chart photos are processed transiently and are not retained on ChartDoum servers. They and the analysis instructions are sent to the configured AI route to generate the report.

A completed report may be kept on the server for up to 10 minutes solely to redeliver it if the network response is lost; it is then removed. The completed report and a reduced chart image are saved automatically in that browser on that device. Only the 10 most recent reports are kept; older reports are removed automatically.

If you choose to send a report with “Report this analysis”, the report text, the reason and any note you add, and your account ID when you are signed in are kept on ChartDoum servers for review for up to 12 months, without the chart photo.

Security and optional attribution

We process security events, account usage records, and rate-limit identifiers made from IP addresses with a one-way keyed hash to prevent abuse and operate the service. The application rate-limit table does not store the raw IP address.

When the app offers a free first analysis, it checks the device once through Apple DeviceCheck (iPhone) or Google Play Integrity (Android) so the offer is given only once per device. On Android, the app sends a one-way hash of the device identifier, and ChartDoum stores only a keyed hash of that value, separate from your account, for up to three years to prevent repeat claims; the identifier itself is not sent to us. These checks are used only for fraud prevention, not for advertising or tracking.

If you consent to attribution measurement, we process ad source, medium, campaign name, a random session ID, and signup linkage. The visit cookie lasts 30 minutes, linkable server records are kept for up to 30 days, and aggregate date/source/count statistics are retained for five-year reporting and older archives. Photos and report content are not used for attribution.

Cookies and device storage

The essential sign-in session cookie lasts up to 5 days. A language cookie lasts up to 1 year. The optional attribution cookie lasts 30 minutes and is created only after consent. Browser local storage keeps your attribution choice and the 10 most recent completed reports; session storage holds short-lived login and attribution state.

Reports stored on the device do not sync with your account and may be lost if you clear browser data or change devices. You can sign out, withdraw optional attribution consent, delete locally saved reports, or clear browser storage. Blocking essential session storage may prevent sign-in or account features from working.

Processors and international transfers

Google Cloud processes hosting, database, secret-management, and operational data, and Firebase Authentication processes social sign-in and account sessions. Chart photos and analysis instructions may be processed through OpenRouter and the selected model provider, including Google Gemini where configured.

The app store or payment provider used for a purchase processes checkout, tax, refund, and dispute data under its own privacy terms. These providers may process data outside your country using the safeguards available under applicable law.

Retention, deletion, and contact

Account identity data remains while the account is active. You can delete the account from the Account page. Security and billing records are kept only for their stated operational or legal purpose; optional linkable attribution records follow the periods above. Backups and legally required records may expire on a delayed schedule.

You may request access, correction, deletion, restriction, or other rights available under applicable law. Privacy contact: support@chartdoum.com.