Privacy Policy
Last updated: 1 October 2026
Controller and contact
ChozUp is provided by BIWORK TEKNOLOJI HIZMETLERI TICARET LIMITED SIRKETI. Privacy and support requests: support@chozup.com.
Information we process
For accounts and sign-in, we process names, email addresses, usernames and identity-provider account identifiers. Profile information includes the birth year, gender, country/city, employment status, industry, education and interests you provide. We store decisions, choices, photos, votes, follows, saves, reshares and notification preferences. Push notifications use a device notification token. For security and legal incident review, we process the verified session’s full IP address, the country code reported by Cloudflare, and limited session, activity and error records. We do not upload your entire photo library; we process the photo you choose or take.
Purposes and legal grounds
We use information to operate your account and the service, display decisions, calculate votes, apply notification preferences and personalize the feed. Safety and moderation protect the community and prevent abuse. Where applicable, processing relies on the service contract, legitimate interests, legal obligations or consent for a particular activity. You can manage camera, photo and push permissions in your device settings.
Visibility and photo safety
Your username, profile photo, published decisions and social profile information may be visible to other service users. Email, private names and private demographic profile fields are not public profile fields. Photos undergo automated safety checks before publication. Authorized moderators may review the question and images when necessary to identify inappropriate content or cases requiring review.
Service providers and transfers
We use Supabase for authentication and database services; Cloudflare for APIs, storage and queues; Google Cloud for automated image safety checks; and Apple APNs and, depending on the platform, Firebase services for notifications. If you choose Apple or Google sign-in, the provider also processes information under its own privacy policy. The production database is in Frankfurt; global providers may process information across borders. Information sent to a provider is limited to the scope needed for the relevant service.
Retention and deletion
User decision-history settings default to 10 days and can be changed up to 90 days. This visibility setting is separate from purpose-based safety and audit retention. The current baseline is 30 days for operational records, and 1,095 days for authentication evidence containing a verified session IP address and country code, as well as selected decision-lifecycle and administration audit records. Only authorized security administrators can access full IP and country data, and access is audited. A scoped legal hold may delay disposal. Passwords and access tokens are not written to audit records. Account deletion can be requested in Settings; access is blocked, private profile/device information is removed and content is hidden. Records required by law or a limited safety purpose follow separate retention rules.
Your rights and controls
Under applicable KVKK/GDPR rules, rights may include access, correction, erasure, restriction, objection, portability and withdrawal of consent. Change profile and notification settings in the app or contact support@chozup.com. We may need to verify account ownership to fulfill a request securely. You can contact the relevant data protection authority.
Children and changes
ChozUp is not designed for children under 13; additional age or consent requirements in your location apply. Material changes to this policy will be communicated through appropriate service channels. The current policy date is shown on this page.