Privacy Policy

This Privacy Policy describes how Chasky, operated by Code Craft Nexus LLC ("Chasky", "we", "us"), collects, uses, shares, and protects your information when you use our application and our website.

By using Chasky, you accept the practices described here.

1. Information We Collect

1.1 Information You Provide

• Profile and account: username and profile information.
• Phone number and contact details.
• Messages, media, and content you share in conversations.

1.2 Information Collected Automatically

• Device information: model, operating system, identifiers.
• IP address and approximate location.
• Usage and diagnostic data from the application.

1.3 Location

With your permission, the application accesses your location for two distinct features.

Single-point location. You share a specific place in a conversation. That point becomes part of the message — like a photo or a text — and is what is drawn on the map. If the place has a name or address, they are saved along with it.

Real-time location. You share your position continuously with the people in a conversation, for a duration you choose: 15 minutes, 1 hour, or 8 hours.

• Background sharing. From one hour of duration onward, the application needs background location permission to keep sending your position even when the app is minimized or closed. We request it explicitly at that moment; if you decline, the feature still works while the app is open.
• We do not keep a record of your route. From a real-time share we retain only two points: where you started and the last one sent. Each update replaces the previous one, so intermediate points are never stored. There is no record of where you went.
• Why that last point remains. It is what is shown on the message's map when someone opens it after you stopped sharing, so they can see where the location ended. This is the same behavior as other messaging applications.
• When you stop sharing, or when the time you chose expires, the application stops accessing your location.
• All of the above lives inside that conversation's message: it is deleted when that message is deleted or when you delete your account.
• You can revoke the location permission at any time from your device settings.

1.4 Camera, Microphone, Photos, and Files

With your permission, the application accesses:

• Camera: to take photos and videos you share in conversations and, where applicable, for identity verification (document and selfie capture).
• Microphone: to record voice notes and video audio.
• Photos and gallery: so you can select and share images and videos.
• Files and documents: so you can share documents in conversations.

Each permission is requested only when you use the corresponding feature and can be revoked at any time from your device settings. We access only the content you select or produce at that moment.

1.5 Contacts

With your permission, the application accesses your device contacts to help you find people from your address book who already use Chasky.

How we protect your privacy:

• Phone numbers from your address book are transformed into codes on your own device, before leaving it.
• Only those codes are sent to our servers — never the numbers or the names of your contacts.
• The codes are used solely to identify matches with Chasky users.
• The names and numbers in your address book never leave your device. Our servers neither receive nor store your contact list.
• Chasky does not write, modify, or delete anything in your address book.

The permission is requested only when you use the contact discovery feature, and you can revoke it at any time from your device settings. The rest of the application works normally without granting it.

1.6 Notifications

With your permission, the application sends you notifications (for example, new messages, wallet activity, or important alerts). To deliver them we use OneSignal, which receives a technical identifier associated with your device and the content of the notification to be delivered; it does not receive your conversation history. You can disable notifications at any time from your device settings or from the application itself.

1.7 Biometric Unlock

You can enable fingerprint or face unlock to protect access to your wallet and to conversations you mark as locked. This verification is performed entirely by your device's operating system, which only tells us whether it was successful; Chasky does not access, collect, or store your biometric data.

This is different from identity verification (section 1.8), where a selfie is in fact captured to confirm who you are.

1.8 Identity Verification (KYC)

To enable financial features, we collect:

• Government-issued identification documents.
• Selfie / biometric verification data to confirm your identity.

This process is carried out by Plaid. The selfie and the document constitute sensitive data: you are not obliged to provide them, and they are only necessary to access financial features. Messaging works without completing this process.

1.9 Transaction and Wallet Data

We collect information related to transactions, wallet identifiers, and payment activity metadata. Of the payment methods you register, the application receives only the card brand and its last four digits; capture of the full number occurs on our payment provider's side.

1.10 Usage Data and Behavioral Analytics

We use PostHog to understand how the application is used and improve it. It receives events about the features you use and technical information about your device and installed version. It does not receive the content of your messages, your financial data, or your identity verification information.

When session recording is enabled:

• All text fields are masked automatically, including passwords.
• Images are not masked automatically. Screens showing sensitive information are masked explicitly.

You can disable analytics at any time from Profile → Privacy. When you do, we stop sending this information.

1.11 Website and Cookies

This policy also governs chasky.io and the web version of the application (web.chasky.io).

On chasky.io — the informational site — we do not use analytics cookies.

On the web version of the application we use:

• Strictly necessary cookies, to keep you signed in and remember your language and theme preferences.
• Google Analytics, to understand how the site is navigated and improve it. It receives pages visited, technical information about your browser and device, and an approximate region. It does not receive the content of your messages, your financial data, or the information from your identity verification process. Its cookies (_ga) expire after two (2) years.

On neither site do we use advertising or cross-site tracking cookies, nor do we record web browsing sessions.

You can delete these cookies at any time from your browser settings.

2. How We Use Your Information

• Provide, maintain, and improve the app and its features.
• Enable chat, the wallet, and financial features.
• Verify your identity and prevent fraud and abuse.
• Send you service notifications and communications.
• Comply with legal and regulatory obligations.

3. Who We Share Your Information With

We also work with hosting, infrastructure, and security providers.

Our financial providers may rely on their own infrastructure and their own vendors to deliver the services. Those relationships are theirs and are governed by their privacy policies, which you may consult.

We do not sell your personal information.

OnePay and Plaid act as independent Controllers. They decide on the processing of the data they receive, in compliance with their own regulatory obligations, and not solely on Chasky's instructions. PostHog, OneSignal and Google Analytics act as Processors, handling data on Chasky's behalf and under its instructions.

What this means for you. When you use financial features or complete identity verification, those providers process your data under their own responsibility and in accordance with their own privacy policies, in addition to ours. We tell you who they are so you can consult them.

4. International Data Transfers

Part of your information may be processed outside Colombia by the providers listed in section 3, and the nature of that operation depends on each one's role:

• To OnePay and Plaid, who act as independent Controllers, this constitutes a transfer of data, subject to the conditions of article 26 of Colombia's Law 1581.
• To PostHog, OneSignal and Google Analytics, who act as Processors, this constitutes a transmission, covered by the transmission agreements set out in article 25 of Decree 1377.

In either case we adopt the safeguards required by applicable law.

The list of recipients and their countries is the one in the table in section 3 — the providers with whom Chasky has a direct relationship — and it will be kept up to date. The addition of new recipients will be communicated as set out in section 10.

5. Your Rights

You have the right to know, update, and correct your personal data, to request proof of the authorization you granted, to be informed about how it has been used, to revoke your authorization and request its deletion, and to access it free of charge.

How to exercise them:

• Access and correct your personal data: in the app, from Profile → Edit profile.
• Object to analytics: in the app, from Profile → Privacy. When you disable it we stop collecting usage data and recording sessions; we continue processing only what is strictly necessary to operate the service.
• Stop sharing your location: from the conversation itself, or by revoking the permission in your device settings.
• Request deletion of your account and your data: in the app, from Profile → Account → "Delete my account", or at web.chasky.io/account/support. As this is a financial service, we verify your identity before executing it, and we retain the information that regulations require us to keep (see section 6).
• Any other request: by email to support@chaskyapp.com.

We will respond to your inquiries within a maximum of ten (10) business days, extendable by five (5) further business days, and to your complaints within a maximum of fifteen (15) business days, extendable by eight (8), in accordance with articles 14 and 15 of Law 1581 of 2012. If you believe your rights have not been addressed, you may turn to the Superintendence of Industry and Commerce (SIC) once you have exhausted the process with us.

6. Data Retention

We retain your information for as long as necessary to provide the service and comply with legal obligations, including those of a tax, accounting, and anti-money-laundering nature.

Once the applicable period expires, the information is deleted or anonymized, unless a legal obligation requires us to keep it longer, in which case we will inform you.

7. Security

We apply reasonable technical, human, and administrative measures to protect your information. No system is completely secure, but we work to protect it against unauthorized access, use, or disclosure.

8. Minors

Chasky is intended exclusively for people over 18 years of age. This minimum age applies to the entire application, both to messaging and to financial features, and is consistent with the rating declared to the App Store and Google Play and with our Age Suitability Policy.

We do not knowingly collect data from anyone under 18. If we detect that we have done so, we delete the information and take the appropriate corrective measures.

9. Applicable Legal Framework

The processing of personal data is governed by the Political Constitution of Colombia (article 15), Statutory Law 1581 of 2012, Regulatory Decree 1377 of 2013 (compiled in Decree 1074 of 2015), and the circulars and guidance of the Superintendence of Industry and Commerce.

10. Changes to This Policy

We may update this policy. We will notify you of material changes through reasonable means (in-app notice and/or notification) with the advance notice required by law. Where the change entails processing that is different from or additional to what was disclosed, we will request a new authorization if the law so requires.

11. Contact