Privacy policy
Choner pairs you with another person so neither of you has to keep a habit alone. That only works if we hold some information about you. This page says exactly what, why, who else sees it, and how to make us delete it.
We do not sell your data. We never have, and the business does not depend on selling it.
Who we are
Choner is operated from Sri Lanka. For anything on this page, including a request to see or delete your data, write to hello@choner.io and a person will answer.
What we collect
Because you gave it to us
- Your account. Name and email address.
- Your profile. Age range, gender, your main goal, what has stopped you before, the kind of accountability you respond to, and your stress level. You can change or clear any of these in Edit profile.
- Your photo, if you add one.
- Your area. The neighbourhood you pick so we can match you with someone nearby. A neighbourhood, never your exact position: the app does not ask for or read device location.
- What you write. Your reasons for starting, messages to your partner, community posts and comments.
Because you used the app
- Your activity. Challenges you start, sessions you plan, what you complete and what you miss.
- Check-in photos, if you send one to your partner.
- Safety records. If you report someone, the category and anything you write. If you block someone, that you did.
- Your device. A push notification token and your platform, so a notification can reach the right phone.
What your partner sees
Your first name, your photo if you added one, the activity you both agreed, the area you chose, and whether you showed up. That is the point of the product: showing up only means something if someone can see it.
They do not see your email address, your full name unless you use it as your name, your stress level, your reasons for starting, or anything you have reported.
Reports and blocks are private. A report is read by a person on our team and ends the match. The person you reported or blocked is never told who did it or why. They see only that the match has ended.
Who else processes it
Choner is a small team. These companies handle data on our behalf, and nobody else does:
- Supabase. Stores your account, profile and activity. Hosted in Singapore.
- Resend. Sends the emails: verification, invitations and notices.
- Apple and Google. Deliver push notifications to your device, if you turn them on.
- Cloudflare. Counts visits to our web pages. No cookies, nothing that identifies you.
That is the complete list. There is no AI in Choner and nothing you write is sent to an AI company. If that ever changes we will say so here first, and tell you in the app.
How long we keep it
- Check-in photos are deleted as soon as your partner has seen them, and in every case within 7 days. They are not an archive.
- Match offers expire after 24 hours. Invitations expire after 48.
- Your account and its history are kept while the account exists, so your streak and your past challenges still mean something.
- Safety records are kept after a match ends, so a pattern of behaviour stays visible to us and so you are never matched with a blocked person again.
- Push tokens are replaced each time you reinstall and removed with your account.
Deleting everything
Settings, then Delete account. It is in the app, it does not require emailing us, and it removes your profile, your challenges, your photos and your messages. Records of reports made about you are kept, because deleting an account is not a way to erase a complaint.
You can also ask us for a copy of what we hold, ask us to correct it, or ask us to stop using it. Email hello@choner.io. We will not make you explain why.
Your rights under Sri Lankan law
The Personal Data Protection Act No. 9 of 2022 gives you the right to access your data, correct it, have it erased, object to how it is used, and complain to the Data Protection Authority. Everything above is how we meet those rights in practice rather than in theory.
Children
Choner is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, email us and we will remove it.
Security
Data is encrypted in transit and at rest. Access to the production database is limited to the people who build Choner. Your partner can only ever see the fields listed above, and that is enforced by the database itself rather than by the app remembering to be careful.
Changes
If this policy changes in a way that affects you, we will tell you in the app rather than quietly editing this page and moving the date.