This Privacy Policy explains how the Chaaga mobile application (“Chaaga”, the “App”, “we”, “us”) handles information when you use it. Chaaga lets you build small single-file web apps (“sub-apps”) on your device and edit them with the help of an AI chat assistant.
The short version.
Your sub-apps, their chat history, and your settings are stored on your device, not on our servers.
When you use the AI chat, the content of the sub-app you are editing and the message you send are transmitted to an AI model provider so a response can be generated.
We don’t serve ads, we don’t use third-party advertising or analytics SDKs, and we don’t sell your personal information.
By default, Chaaga keeps your content locally on your device and does not upload it to us. This includes:
This data stays on the device until you delete the sub-app, use the reset function, clear the app’s data, or uninstall the App. If your device has a system backup enabled (for example iCloud or Google backup), the operating system may include the App’s data in that backup under its own terms.
When you send a message in the AI chat, Chaaga transmits your message together with the current HTML of the sub-app you are editing (and relevant recent chat context) to the AI provider you have selected, so that a reply can be generated. Please avoid putting sensitive personal information into your prompts or sub-apps.
If you sign in with Apple or Google to use a Chaaga plan, we receive a user identifier and, depending on your choices, your email address and name from that provider. We use this to create and secure your account and to associate your plan and remaining balance with it.
If you choose “bring your own key”, the key you enter is stored only in your device’s secure storage and is sent only to that provider’s API when you make a request. We do not receive or store your own API keys on our servers.
Chaaga does not run AI models itself. Depending on your settings, your prompts and sub-app content are sent either directly from your device to a third-party model provider, or through Chaaga’s hosted gateway (see section 4) to that provider. Supported providers include Anthropic, OpenAI, DeepSeek and OpenRouter. Each provider processes the data it receives under its own privacy policy and terms:
We encourage you to review the policy of whichever provider you use.
If you use a Chaaga plan or included allowance instead of your own API key, your AI requests are routed through our gateway, which forwards them to the model provider on your behalf using our credentials. In connection with this we process:
Account and balance records are stored on infrastructure operated by us and our hosting and database providers (for example Cloudflare and a managed Postgres/Supabase database).
Purchases and subscriptions are processed by Apple’s App Store or Google Play, not by us. We receive the transaction and entitlement information needed to unlock and validate your purchase (such as a purchase token or receipt). We do not receive your full payment card details.
Chaaga includes an optional feature that lets a sub-app exchange data with an http client. If you enable it, the relevant sub-app data is sent to that client, which is operated by you or a third party you choose and is outside our control. If you do not configure it, this data stays on your device.
To provision an anonymous allowance, deliver purchases correctly, and limit abuse, the App may process basic device information such as a device identifier, operating system version and device model. Chaaga does not embed third-party advertising or analytics SDKs and does not track you across other apps or websites.
We share information only:
We do not sell your personal information and we do not share it for cross-context behavioural advertising.
Device-stored content is retained until you remove it or uninstall the App. Account, plan and purchase-validation records are retained for as long as your account is active and as needed for legal, accounting and anti-abuse purposes. Gateway request logs are kept for a limited period for security and troubleshooting and then deleted or aggregated.
We use reasonable technical and organisational measures to protect information, including transport encryption for network requests and secure device storage for credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Chaaga is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.
Chaaga is available in multiple countries. Information may be processed in countries other than your own, including by the providers listed above, which may have different data-protection laws. Where required, we rely on appropriate safeguards for such transfers.
Depending on where you live, you may have rights to access, correct, delete or export your personal information, or to object to or restrict certain processing. You can:
To exercise any right, email us using the contact details below. We may need to verify your identity before responding.
We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice in the App. Continued use of the App after an update means you accept the revised Policy.
Questions or requests regarding this Policy:
Chaaga
Email: [email protected]