Privacy Policy
Chooose is a group decision app made by CER LLC, a limited liability company registered in Kansas, United States (“we”, “us”). This policy explains what we collect, why, and what you can do about it.
The short version. We collect the little we need to run the app. We do not sell your information, we do not use it for advertising, and we do not track you across other apps or websites. If you vote in a Chooose from your browser, you do not need an account at all.
Two kinds of people use Chooose
What we hold depends on which one you are, and the difference is significant.
Voters — people who open a shared link
If someone sent you a link and you voted, you have no account with us and we do not know who you are. We store:
- Your vote — which option, tier, or bucket you chose.
- A display name, only if you type one. If the Chooose was set to anonymous, we never store it — your vote is labeled “Voter 2” and so on.
- A random device identifier, generated in your browser and kept in that browser’s local storage. It exists so one device cannot vote twice in the same Chooose. It is a random string, not tied to you or to any other Chooose you have voted in, and clearing your browser data removes it.
We do not ask voters for an email address, a phone number, or a login, and there is nothing in the voting page that would let us build a profile of you.
Creators — people with an account in the app
If you create an account to start Choooses, we also store:
| What | Why we have it |
|---|---|
| Sign-in identifier | A user ID from Sign in with Apple or Google, and the email address that provider shares with us. Used to sign you in and to reach you about your account. Apple’s Hide My Email is supported and works normally. |
| Display name and avatar | Both are chosen by you. The avatar is an emoji, not a photo — we never ask for or store pictures of you. |
| Your groups | The group name and the member names you type in. These are labels you write for your own use; we do not contact anyone in a group and we do not treat those names as accounts. |
| Your Choooses | The question or items you chose, the settings you picked, the votes that came in, and the result. |
| Subscription status | Whether you have Chooose Pro and when it renews. Payment is handled by Apple or Google — we never see your card details. |
| Preferences | Your theme, and a notification token if you turn notifications on. |
Usage and reliability data
Two kinds of record are kept about how the app behaves rather than about you. Both apply whether you have an account or arrived from a link.
| What | Why we have it |
|---|---|
| Usage events | That something happened, and what kind: a topic was shown in a picker, a topic was picked, a vote landed, a Chooose was shared or finished. Each record holds the mode, which rows from our shared topic library were involved, a device identifier, and — only for the events our server witnesses itself — the account that owns the Chooose. We use it to see which topics are worth keeping and whether the app is being used at all. It never contains the words in a topic, a question, a group name or anybody’s name. |
| Crash reports | When the app fails, a report of what went wrong: the error and where in the code it happened, plus the device model, operating system version and app version needed to reproduce it. It is deliberately configured not to attach personal information, and we do not collect a trail of the screens you visited — that would be enough to reconstruct a private Chooose. |
What we do not collect
- Your contacts, photos, location, microphone, or camera.
- Advertising identifiers. There is no advertising in Chooose.
- Any tracking that follows you to other apps or websites, by us or by anyone else.
Why we are allowed to hold it
We process this information to provide the service you asked for — running a Chooose is not possible without storing the votes. We also process a small amount to keep the service working and honest: preventing duplicate and automated votes, and diagnosing errors. Where the law requires consent, such as for notifications, we ask first and you can withdraw it at any time.
Who else is involved
We use a small number of service providers, and only ones that process data on our instructions:
- Google Firebase (Google LLC) hosts the app’s database, sign-in, server code, and this website. Data is stored on Google Cloud servers in the United States.
- Google reCAPTCHA checks that votes come from a real browser rather than a script. Google receives information about the request in order to make that judgment, subject to Google’s Privacy Policy.
- Sentry (Functional Software, Inc.) receives the crash reports described above so we can find and fix the failure. It is set up to exclude personal information.
- Apple and Google handle sign-in and any subscription payment. We receive confirmation that a subscription is active, and nothing more.
- RevenueCat manages subscription state on our behalf if you subscribe.
We do not sell or share your personal information, and we never have. We would only disclose it if the law required us to, or to protect someone from harm.
How long we keep it
- Individual votes — who picked what, and the random device identifier behind each one — are deleted 30 days after a Chooose finishes, along with the list of who voted. This happens automatically and cannot be turned off.
- The result — the question, the options and the final tally — is kept for one year after a Chooose finishes, so you can look back at what your group decided. A link you shared keeps working for that year. After it, the whole Chooose is deleted.
- Voter device identifiers live in your own browser and are never copied anywhere else. Clear your browser data and they are gone.
- Your account is kept until you delete it.
Deleting everything
In the app, open Settings → Delete account. This removes your sign-in, your profile, your groups, and every Chooose you created, including the votes in them and the links you shared. It happens immediately and it cannot be undone. We do not keep a shadow copy.
If you cannot reach the app, email support@choooseit.com from the address on your account and we will do it for you.
Your rights
Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email support@choooseit.com and we will respond within 30 days. We will not treat you differently for asking.
If you are in the European Economic Area or the United Kingdom, you also have the right to object to or restrict processing, to receive your data in a portable format, and to complain to your national data protection authority. If you are in California, you have the right to know, delete, and correct, and the right not to be discriminated against for exercising those rights; note again that we do not sell or share personal information, so there is nothing to opt out of.
Because our servers are in the United States, using Chooose from outside the US means your information is transferred there.
Children
Chooose is not for children under 13, and we do not knowingly collect anything from them. If you believe a child under 13 has given us information, email support@choooseit.com and we will delete it.
Security
Connections to Chooose are encrypted in transit, and data is encrypted at rest by our hosting provider. Access to the database is restricted by server-side rules: the votes in a Chooose can only be read through the app’s own tallying code, which is what makes an anonymous Chooose genuinely anonymous rather than merely unlabeled. No system is perfectly secure, but we do not collect anything we do not need, which is the most effective protection available.
Changes
If we change this policy we will update the date at the top. If the change is significant, we will tell you in the app before it takes effect.
Contact
CER LLC
Kansas, United States
support@choooseit.com