Chercha Privacy Policy
Version 1.0.2. Effective date: 28 September 2026. This policy explains what personal data we process, why, on what legal basis, who we share it with, how long we keep it and what rights you have.
1. Who is responsible
Smart Dynamic Systems LTD, a company registered in England and Wales under number 16430324, registered office at 66 Paul Street, London, England, EC2A 4NA (United Kingdom), is the controller. Privacy contact: support@getchercha.com or ayuda@getchercha.com, or “Data complaint” in Help in the app.
2. The essentials
- We process what we need to teach you the English of your region, to run the service and to improve Chercha. Every data item has a purpose stated here.
- In third-party tools (analytics and error reporting) we only use a pseudonymous account ID, never your name or email.
- We never store your immigration or visa status, how you arrived in the country, documents, health, religion, sexual orientation, political opinions or your country of origin. If you mention them in the AI call or in a text, we do not add them to your profile. From “Where are you from?” we only keep the variety of Spanish used for explanations (for example, Dominican or neutral), not the country.
- The AI call is recorded. The recording, the text of the conversation and its analysis are kept for 30 days at ElevenLabs and then deleted; they are not used to train models. If you would rather it is not kept, you answer in writing instead.
- We do not store your IP address in our database or in analytics, and we do not use your iPhone’s location (GPS). From the IP we only derive an approximate location, the network and an encrypted abuse-prevention hash (section 3), and we never infer your country of origin or immigration status from it.
- We do not sell your data. We do not use your data for advertising without your separate permission.
3. What data we process, why and for how long
| Data | Purpose | Legal basis | Recipients | Retention |
|---|---|---|---|---|
| Account: pseudonymous ID and link to Apple (Sign in with Apple and, if you share it, your email or Apple’s private relay email) | Running the service and restoring your progress | Contract | Supabase (London); Apple | While the account exists |
| Email for trial-ending and renewal reminders (the one on your Apple account, which may be Apple’s private relay email) and, only if you separately agree, news. For each reminder we keep the type, the charge date, the date sent, the language, the subject and the price it stated, without the address | Reminding you before your trial ends, before each annual renewal and, on the monthly plan, every 6 months, and being able to prove we did; news with your consent | Legal obligation and contract; news: consent | Supabase; Resend (email delivery) | While the account exists; news consent can be withdrawn with one tap |
| Profile: Spanish variety, interface language, time zone, age confirmation, sign-up method, pace and vulgar/offensive filter | Personalising your learning | Contract | Supabase | While the account exists; deleted automatically 12 months after your access ends |
| Regions and their weight, sector and difficult situations | Choosing each day’s expressions | Contract | Supabase | Same as profile |
| Your English goal (from a fixed list, never the details) and, if you say it, in how many months | Preparing expressions for your goal and showing its path in Your progress | Contract | Supabase | Same as profile |
| Learning data: expressions seen, saved and “I know it”, review answers, activity days and upcoming daily plan | Spaced review, feed, streak and progress | Contract | Supabase | Same as profile |
| Your answers to “Have you heard it here?” and “Is the explanation clear?” for each expression, and the status of your reports (whether what you reported was fixed or removed) | Deciding which content is opened to everyone and which is removed; telling you what happened to your report | Contract and legitimate interests | Supabase | While the account exists; if you delete it, the answers are kept with no link to you so the counts are not lost |
| AI call, what we keep at Chercha: country and region where you live, city, relationship with the place, level, offer outcome and objection (fixed lists), duration and drop-off minute | Preparing your plan and aggregated research to improve the product | Contract (plan) and legitimate interests (research) | Supabase | 12 months; then only anonymous aggregates |
| AI call, what ElevenLabs keeps: the recording, the text of the conversation and its analysis (topics, tone, evaluation criteria, interest and moment of hesitation) | Finding problems and complaints, and improving the script, the content and the offer; aggregated analysis | Consent: it is a condition of the call; without it, you answer in writing | ElevenLabs (section 4) | 30 days; then deleted |
| Device fingerprints (salted hash of an iPhone keychain identifier): the one for the device you make the call on and the ones for each account, with first and last seen | Abuse prevention: one welcome call per device and an alert if an account uses more than 3 devices | Legitimate interests | Supabase | Your account’s, while it exists; the call one, 12 months after it was last used |
| Network log: per account and day, an irreversible encrypted hash of your IP address (HMAC with a secret key; the IP is not stored), the IP’s country, the network organisation and the network type (mobile, residential, university, business or public body, hosting or VPN) | Abuse prevention: detecting shared accounts, use from many countries or networks, VPNs or hosting. Alerts are reviewed by a person; there are no automated decisions | Legitimate interests | Supabase (London); Cloudflare (receives the IP only to report the network and country, without storing it) | 30 days; sooner if you delete your account |
| Consents: type, text version and date | Proving you gave permission | Legal and contractual obligation | Supabase | Pseudonymised AI-call consent log: 5 years even if you delete your account (required by ElevenLabs’ terms) |
| Subscription: plan, status, trial and renewal dates, founder price, environment and your plan’s price in your currency | Giving you access and reminding you about charges | Contract | Supabase; RevenueCat (US); Apple | While the account exists; deleted automatically 12 months after your access ends |
| What you write: personal dictionary, content reports and support messages | The features you use | Contract | Supabase | While the account exists |
| Your own audio in My dictionary (optional): what you record yourself, up to 15 seconds, of how an expression you heard sounds. Only you can hear it; it is not sent to any AI or third party | Letting you hear how what you heard sounded | Contract | Supabase (London), in a private space in your account | Until you remove it or delete the expression; at most, while the account exists |
| Ideas box: the text of your idea (never the audio, which your iPhone turns into text), language, whether you started by speaking or typing, status and the team’s reply, votes and, only if you allow it, your alias | Improving the product with your suggestions, telling you where they stand and giving you the free month if your idea launches | Contract; alias: consent | Supabase | Up to 24 months or until you delete the idea or your account |
| Contact us: topic, message, reply email, interface language and, only if you tick the box, app and iOS version, iPhone model and environment | Replying in your language and solving the problem | Contract | Supabase; Resend (forwarding to the support inbox) | While the account exists |
| Referrals: the referrer’s offer code, who redeemed it, the invitee’s first payment date and the reward granted or the reason it was cancelled. Never your contacts | Giving the free month, keeping to the yearly cap and preventing fraud | Contract | Supabase | For as long as the programme runs and 24 months afterwards |
| Data export log: the date of each export, without the file (the file is created on your iPhone) | Limiting exports to 10 a day (abuse prevention) | Legitimate interests | Supabase | While the account exists |
| App usage events (no free text), with the region you declare and your App Store country (codes only); your network type, number (ASN) and organisation, looked up with Cloudflare when you open the app; and the approximate location PostHog derives from your IP (country, region, city, postcode, approximate coordinates and time zone). PostHog discards the IP. Never your iPhone’s location (GPS) | Improving the product and learning experience, and aggregated analysis | Legitimate interests | PostHog (EU, Frankfurt), pseudonymous ID only | 12 months |
| App errors and crashes (no IP address or personal data) | Fixing bugs | Legitimate interests | Sentry (EU) | Up to 90 days |
| Website waiting list: email, platform (iPhone or Android), website language, country as reported by Cloudflare (never the IP), the version of the text you accepted and the dates the confirmation email was sent and confirmed | Telling you when we launch on the platform you choose and measuring demand by platform and country | Consent (unticked box and email double opt-in) | Supabase; Resend (confirmation email) | Unconfirmed: 30 days; confirmed: until we notify you or until you unsubscribe with the link in the email |
| Native reviewers: name, email, regions and verdicts | Reviewing content (they have their own contributor terms) | Contract | Supabase | While they contribute |
Automatic deletion: 12 months after your access ends, your account is deleted automatically, just as if you deleted it yourself in Settings. Only the pseudonymised proof of your AI-call permission (5 years) and the call device fingerprint, with no link to the account, remain. Encrypted backups may keep deleted data for up to 12 more months.
4. The AI welcome call
- Before the call we ask for your explicit permission and tell you that you are talking to an AI. Your voice is sent in real time to ElevenLabs, our AI provider, and to its language model so it can understand and answer you.
- The call is recorded. The recording, the text of the conversation and its analysis (topics, tone and whether the call went well) are kept for 30 days at ElevenLabs to find problems and improve Chercha, then deleted. They are not used to train models.
- Keeping it is a condition of the call. If you would rather it is not kept, you use the written form instead.
- At Chercha we only keep the fixed-list answers in the table above. You see them and can change them at the end. The AI does not ask about your immigration status, your health or your country of origin; if you mention them, they do not go into your profile, although they remain in the recording until it is deleted.
- We keep proof of your permission (type, text version and date, without your name) for 5 years.
5. Who we share data with
With processors acting on our behalf under data processing agreements, and with Apple: Supabase (database, accounts and files; London), ElevenLabs (real-time voice, recording and analysis of the AI call, kept for 30 days, and generation of expression audio, the latter with no personal data; US, EU or Singapore), RevenueCat (subscription status; US), Apple (download, sign-in and payment), PostHog (usage analytics; EU, Frankfurt), Sentry (errors and crashes; EU), Resend (email delivery; US, sending from Ireland) and Cloudflare (the getchercha.com website, network organisation lookups and encrypted backups; Cloudflare’s global network, backups in the EU). We may also disclose data where the law requires it, and to a buyer if the company is sold, with the same safeguards.
6. International transfers
Where a provider processes data outside the UK or the European Economic Area, we rely on the safeguards the law allows: adequacy regulations (for example, the UK Extension to the Data Privacy Framework), the ICO Addendum to the standard contractual clauses or the International Data Transfer Agreement (IDTA).
7. Advertising
Chercha does not currently use your data for advertising or track you across apps. If we measure campaigns in the future (for example, on Meta), we will only send app events (install, paywall, subscription) for people who allow it in Apple’s tracking prompt and give separate consent, never your profile or what you learn. We will update this policy first.
8. Children
Chercha is not intended for anyone under 18, and we do not knowingly process their data. If you believe a minor has given us their data, email support@getchercha.com and we will delete it.
9. Your rights
- Access and portability: in the app, Settings > Export my data.
- Rectification: change your profile and regions in the app or email us.
- Erasure: delete your account in the app. We delete your data except what the law requires us to keep (for example, proof of consent).
- Objection: you can object to processing based on legitimate interests, such as product research or analytics.
- Withdraw consent at any time, without affecting earlier processing.
- Restriction of processing where the law provides for it.
To exercise them, use the app or email support@getchercha.com. We reply within one month. We do not make automated decisions with legal effects about you: the price is the same for everyone in the same situation.
10. Complaints
If you are unhappy, please contact us first. You can also complain to the Information Commissioner’s Office (ICO), ico.org.uk, or to the data protection authority in your country.
11. Security
We encrypt data in transit and at rest, restrict database access per user, use short-lived sessions and log access.
12. Website cookies
getchercha.com only uses what is strictly necessary. See the cookie policy.
13. Changes
If we make important changes to this policy, we will tell you in the app before they apply. Previous versions are at getchercha.com/legal/history.