Short version: Choco is a non-custodial app. We never see your private keys or seed phrases. Your wallet address and on-chain transactions are public by design (Celo Mainnet). We collect minimal off-chain data — only what is needed to run the service.
1. Who we are
Choco ("we", "us", "our") is a non-custodial remittance tool built on the Celo blockchain. It is operated by Choco, a company registered in Colombia. You can reach us at support@usechoco.app.
2. What data we collect and why
Email address — if you sign in with email using Privy (our wallet infrastructure provider), your email is stored and managed by Privy under their own privacy policy. Choco receives a user identifier from Privy but does not store your email on our servers.
Wallet address — your Celo wallet address is used to read your USDC balance, prepare transfer actions, and query your on-chain history. Wallet addresses on Celo are public by nature.
On-chain transaction data — all schedules, transfer runs, and receipts are recorded on Celo Mainnet in ChocoLedger and ChocoGateway contracts. This data is permanently public on the blockchain. Choco reads it to display your history inside the app.
Recipient contact labels — if you add a name or label to a recipient wallet address, that label is stored in Supabase (our database provider, listed in §4) linked to your user identifier. It is not shared with third parties. A future update may migrate this to device-local storage only.
Support messages — when you use the contact form, your message is composed into a mailto link and sent via your email client. Choco only receives what you include in the email. We store support correspondence for up to 12 months for service quality purposes.
3. What we do NOT collect
- Private keys or seed phrases — ever
- Message signatures (MiniPay disables message signing by design)
- Government-issued identity documents or biometrics
- Payment card numbers or bank account information
- Browsing history or cross-site tracking data
- Contact books or address books
4. Third-party services
- Privy — embedded wallet and email authentication for non-MiniPay browser users. Privy stores email addresses and cryptographic wallet keys (in their secure enclave). See Privy's privacy policy for details.
- Supabase — database provider used to store recipient contact labels. Supabase is hosted in the EU (AWS Frankfurt) and processes data per their privacy policy.
- Celo Mainnet — a public EVM blockchain. All on-chain activity is visible to anyone. Choco cannot delete on-chain records.
- Mento Protocol — on-chain FX protocol used for USDC ↔ KESm conversion. Interactions are on-chain and public.
- Uniswap V3 (via Mento) — Mento's on-chain BiPools are built on Uniswap V3 infrastructure. When Mento executes a USDC ↔ KESm swap on your behalf, it routes through these pools. All interactions are on-chain and public. Choco does not call Uniswap directly.
- Forno (cLabs RPC) — Celo public RPC endpoint used to read blockchain state. cLabs may log RPC requests per their own policy.
- Vercel — hosts the Choco web app. Vercel may collect standard web server logs (IP address, user agent, timestamp).
5. Cookies and local storage
Choco uses browser localStorage to cache your wallet session (via Privy) and any recipient labels you set. We do not use advertising cookies or cross-site tracking. We use one session cookie from Privy to keep you logged in.
6. Your rights
Depending on where you are located, you may have the following rights:
- Access — request a copy of off-chain data we hold about you
- Deletion — request deletion of off-chain data (email, support correspondence). Note: on-chain data on Celo is permanently public and cannot be deleted by anyone.
- Portability — your on-chain data is already fully portable — it is on a public blockchain and readable by any tool.
- Objection / restriction — contact us to discuss any specific concern.
To exercise any right, email support@usechoco.app. We will respond within 30 days.
7. Data retention
Off-chain data (support emails) is retained for up to 12 months. Privy session data is retained per Privy's policy (typically until you disconnect the wallet). On-chain data on Celo is permanent and outside Choco's control.
8. Security
Choco is non-custodial — funds and private keys remain in your wallet at all times. Our smart contracts are open-source and publicly verifiable on Celoscan. We do not operate servers that hold your funds or private keys.
9. Children
Choco is not directed to users under 18. We do not knowingly collect data from minors. If you believe a minor has used our service, contact us and we will delete any off-chain data promptly.
10. Changes to this policy
We may update this policy as the app evolves. Material changes will be noted with an updated effective date at the top of this page. Continued use of Choco after an update constitutes acceptance of the revised policy.
11. Contact
Questions about this policy? Email us at support@usechoco.app or use the contact page.