Chimpo
Log inSign up

Privacy policy

Last updated: March 31, 2026

This Privacy Policy explains how Chimpo ("we," "us," or "our") handles personal information when you use our websites, apps, and related services (collectively, the "Services"). It should be read together with our Terms of service.

Who we are

Chimpo operates the Services and acts as the data controller for personal information described in this policy, unless we state otherwise for a specific processing activity. Contact us about privacy at privacy@chimpo.com or via our Contact page.

1. Scope

This policy covers our websites, web and mobile applications, APIs, support channels, and any feature that processes personal data. It applies together with our Terms of service, Community guidelines, and Safety page. Third-party sites or apps that we do not operate are not covered by this policy.

2. Categories of data we collect

What we collect depends on how you use the Services, which features you enable, and your choices. The following list is illustrative and not exhaustive.

  • Identifiers and account data. Email, username, user ID, authentication tokens, OAuth identifiers from identity providers, session identifiers, and similar account credentials.
  • Profile and preferences. Display name, bio, avatar URL, interests, gender or pronouns if offered, language, notification settings, and marketing preferences.
  • Location data. Country and city you enter; optional device latitude and longitude when you grant permission; approximate location from IP address; coarse region for compliance or fraud signals. Where the law treats location as sensitive, we rely on consent or other permitted bases as required.
  • Audio, video, and session data. Live video and audio for matching; signaling metadata (for example room IDs, connection stats); timestamps; duration; and related session events. Such data is ephemeral by default unless we record, transcribe, retain thumbnails, or run additional processing—in which case we use it only as described at collection or in product settings.
  • Electronic network activity. App or web events, feature usage, performance and crash diagnostics, error logs, device identifiers where allowed, browser type, OS version, carrier or ISP class information, and similar telemetry used for reliability and security.
  • Communications with us. Support tickets, emails, abuse reports, and metadata needed to respond (for example time sent).
  • In-app social data (if applicable). Friends lists, blocks, match history references, sparks or virtual currency balances, and related transaction records.
  • Payment and billing (if applicable). Limited billing identifiers, subscription status, and references returned by payment processors. We do not store full payment card numbers on our servers when the processor tokenizes cards.
  • Derived or inferred data. Risk scores, fraud signals, coarse interest segments, or abuse flags generated from usage patterns.
  • Sensitive or special categories. We do not seek to collect health data, biometric templates used to identify you, or other special categories unless a feature explicitly requires it and we provide a lawful basis and any required separate notice or consent.

Voluntary provision. Where data is optional, declining it may limit certain features (for example matching without location). Providing inaccurate information may affect safety and matching quality.

3. Sources of data

We obtain personal data directly from you, automatically from your device and our servers, from identity and payment providers you choose, and in limited cases from public sources or partners where permitted by law and contract.

4. Purposes of processing

We process personal data to:

  • Create and manage accounts; authenticate; personalize the experience.
  • Operate matching, video sessions, and real-time infrastructure.
  • Improve proximity and relevance using location and interests as described.
  • Maintain safety, integrity, and security; detect fraud, spam, and policy violations.
  • Send transactional, service, and (where permitted) marketing messages.
  • Analyze aggregate or de-identified usage to improve the Services.
  • Comply with law; respond to lawful requests; establish or defend legal claims.
  • Complete corporate transactions as described below.

Where the law requires a legal basis, we rely on appropriate bases such as performance of a contract, legitimate interests (balanced against your rights, with opt-out where required), consent where mandated, or legal obligation, as applicable to the processing.

5. Automated decision-making and profiling

We may use automated means for matching queues, risk scoring, spam filtering, or content signals. Automated processing may affect who you are paired with or whether an account is restricted. Where applicable law gives you rights to human review or to object to certain solely automated decisions with legal or similarly significant effects, you may contact us as described in the "Your rights" section below.

6. Legal bases (where required)

In jurisdictions that require an articulated basis, we process personal data only where permitted—for example to perform our contract with you, based on legitimate interests balanced against your rights (with opt-out where required), with consent where mandated, or to comply with legal obligations. You may withdraw consent where processing is consent-based, subject to exceptions.

7. Disclosure, subprocessors, and onward transfers

We disclose personal data to vendors and partners who process it on our behalf (hosting, databases, authentication, real-time media, analytics, email, customer support, security tools). We use contractual terms that require appropriate protection of personal data. We may disclose data: (a) to professional advisers bound by confidentiality; (b) in connection with a merger, acquisition, or asset sale; (c) to law enforcement or regulators when we believe in good faith that disclosure is required by law or necessary to protect rights, safety, or the public; (d) to enforce our terms or policies; or (e) with your direction or consent. A summary of technology categories appears in Acknowledgements.

8. International transfers

Data may be processed in countries other than your own. Where cross-border transfer rules apply, we implement safeguards permitted in your region (for example standard contractual clauses, adequacy decisions, or other lawful mechanisms).

9. Retention

We retain personal data only as long as necessary for the purposes above, unless a longer period is required or permitted by law (for example tax, accounting, or litigation holds). Retention periods vary by category: account data may persist until deletion plus a reasonable backup window; ephemeral session metadata may be deleted shortly after a call; logs may be retained in rolling windows for security.

10. Security

We implement technical and organizational measures appropriate to the risk (access controls, encryption in transit where standard, monitoring, least privilege). No method of transmission or storage is completely secure. You are responsible for device security, strong passwords, and awareness of phishing. Our liability for unauthorized access is subject to applicable law and our Terms of service.

11. Your rights

Subject to applicable law, you may have rights to access, rectify, delete, restrict, export, or object to processing, and to lodge a complaint with a supervisory authority. Submit requests via our Contact page. We may verify identity before acting; we may deny or charge for manifestly unfounded or excessive requests where permitted. We will respond within statutory timeframes. Some rights may not apply to data we must retain for legal reasons or to information that no longer identifies you.

12. Children

The Services are not directed to children below the minimum age required in your jurisdiction. We do not knowingly collect personal information from ineligible children. If you believe we have, contact us and we will take appropriate steps, including deletion where appropriate.

13. Cookies and similar technologies

We use cookies, pixels, local storage, and similar technologies for essential functions, preferences, analytics, and (where allowed) marketing. Where consent is required, we obtain it before non-essential cookies. You can adjust browser settings; disabling certain cookies may affect functionality.

14. Marketing

We send promotional communications only where permitted and with a clear opt-out. Transactional and security messages may continue as needed to operate your account.

15. Do Not Track

Browser "Do Not Track" signals are not standardized. We currently do not respond to DNT signals in a uniform way; you can control cookies and similar technologies through your browser and, where available, our cookie or preference settings.

16. Breach notification

If we determine that a breach of security leading to accidental or unlawful destruction, loss, alteration, or unauthorized disclosure of personal data requires notification under applicable law, we will notify regulators and affected individuals as required.

17. Data you disclose to other users

Live video and chat features may allow you to reveal information about yourself to others. You choose what to share. We cannot control how other users record, remember, or redistribute information outside the Services where the law allows. Our obligations under this policy relate to data we process as a service provider, not to information you voluntarily disclose to other people in a session.

18. Corporate transactions

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal data may be transferred as part of that transaction. We will require the successor to honor this policy or provide notice of changes as required by law.

19. Regional variations

Additional rights or disclosures may apply depending on where you live. We may provide supplementary notices for specific regions or sectors where our processing or the law requires them.

20. Limitation of liability (privacy)

To the maximum extent permitted by applicable law, Chimpo and its affiliates will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for loss of profits, data, or goodwill, arising from or related to this policy, your use of the Services, or the processing of personal data, except where liability cannot be excluded by law. Our aggregate liability for privacy-related claims (where not prohibited) may be subject to the same caps as in our Terms of service. Some jurisdictions do not allow certain limitations; in those jurisdictions our liability is limited to the fullest extent permitted.

21. Third parties

We are not responsible for the independent privacy practices of other users, identity providers, payment processors, app stores, device manufacturers, or networks beyond our reasonable contractual and security controls. We encourage you to review their policies.

22. Changes to this policy

We may update this policy periodically. We will post the new version with an updated "Last updated" date and, where required, provide additional notice or obtain consent for material new uses of personal data.

23. Contact

For privacy questions and requests, use our Contact page or email privacy@chimpo.com.