Chóca — privacy policy

Version of 12 October 2026. The app is in testing.

Who we are

Chóca is a networking game: you set a goal, and the app looks for which of your contacts gets you closest to it, and suggests steps and message texts. The service is developed by Code+Service (codeservice.pro). Questions about data: greg@codeservice.pro.

What data we receive

• Sign-in data. When you sign in with Telegram, Google, Yandex, Facebook or email — the account ID, name and email address, if the provider shares it. We never receive passwords for these services.
• Your contacts. Only what you add yourself: from the phone book — the contact’s name, company, job title and note (phone numbers and emails from the phone are not sent to the server); from files and CRM exports, the LinkedIn archive and the notebook — people’s names, companies, job titles and notes about them; from the Facebook archive — only friends’ names and the year you became friends. We do not receive your friends list through Facebook sign-in.
• “About me”. The text you wrote, or data from your public LinkedIn profile if you provided a link to it.
• Goals, paths and moves you create, and marks that you made a move.
• Service data: time of sign-ins and actions, time zone — for day streaks and reminders.
• City and country. Your city and the places you are looking at — only what you confirmed or chose yourself. We suggest the city based on your IP address and time zone, and with the “Refine with GPS” button the phone determines it itself. IP addresses and coordinates are not stored: only the name of the place stays in the database.

Why

Only to make the game work: to find paths to your goals, suggest moves and message texts, remind you about moves and show your progress. We do not sell data, do not show ads and do not write to your contacts — only you send messages.

Processing with AI

To find paths and prepare messages, data about your contacts and goals is sent to Anthropic’s Claude model through its API. Under the API terms, Anthropic does not use this data to train its models.

Where and how long data is stored

Data is stored on our server and transmitted only over a secure connection (HTTPS). It is kept while you have an account. Each player sees only their own data; the administrator sees only anonymised statistics (counters without names or contacts).

How to delete your data

In the app: Settings → “Delete all my data” — contacts, lists, goals, paths and the whole account are deleted for good. A single list can be deleted with the cross on the “My contacts” screen. You can also write to greg@codeservice.pro.

Superpower

When you turn on the superpower at a step of a path, we search for people in public LinkedIn profiles through the anysite.io service: we send only the company, job title and city from your path, without your contacts. Only you see the names, job titles and profile links found; we do not search for emails or phone numbers.

Participants ranking

You are not in the ranking by default. If you turn it on in the “Community” section, other members will see the name you choose (by default your first name and last-name initial from sign-in), your level, experience, day streak and number of badges. Your contacts, goals and paths are never shown. You can turn it off at any time: your name disappears from the list immediately.

Sources of place data

The directory of cities and countries is GeoNames, city detection by IP is IP Geolocation by DB-IP; both databases are distributed under the CC BY 4.0 licence.

Controller, legal basis and your rights

Controller. For users in the European Union and other countries except Russia and Kazakhstan: Grigory (Greg) Petrov, autónomo, Avinguda Diagonal, 29, 3-3, 43880 Coma-ruga, El Vendrell, Tarragona, Spain, greg@codeservice.pro. For users in Russia and Kazakhstan: CodeService LLP (TOO “CodeService (КодСервис)”), BIN 221040026299, 130000, Republic of Kazakhstan, Mangystau Region, Aktau, microdistrict 12a, building 12, office 203; same email.

Legal basis. Providing the service you ask for (GDPR Art. 6.1.b) and your consent when you upload contacts yourself, add a LinkedIn link or switch on the “superpower” (Art. 6.1.a). You can withdraw consent at any time by deleting your data in the app. When you upload other people’s contacts, you confirm that you are entitled to do so for personal use.

Transfers outside the EU. AI answers are processed by Anthropic (USA) and public-profile search by anysite.io. Transfers follow the terms of those services, including the EU standard contractual clauses.

Your rights. To know what data we hold about you, correct or delete it, restrict processing, get a copy, object to processing and withdraw consent. Write to greg@codeservice.pro; we reply within 30 days. You can complain to the Spanish Agencia Española de Protección de Datos (aepd.es), to the supervisory authority of your country or, for users in Russia, to Roskomnadzor.

Changes

If the policy changes, we will update this page and the version date at the top.