doingthings.

CHISPA · LEGAL

Privacy policy

Last revised: August 31, 2026.

Summary

You can use Chispa without an account. History is created and stored primarily on your device. If you sign in and enable sync, Chispa encrypts history on your device before sending it; Doing Things stores the encrypted content but does not hold the key to read it.

Data stored in the app

The app stores sessions and fast edits, protocol, time‑reference, preferences, onboarding state, and safety responses locally. On iOS it shares a minimal summary with its widget and Live Activity; on Android it shares that with its widget and active notification inside the app’s private storage. Safety responses remain local and are not part of any synced backup. Chispa does not access Apple Health, Health Connect, location, contacts, photos, microphone, or camera, and does not record weight, hydration, calories, activity, notes, or metabolic measurements.

Account and encrypted sync

The account is optional. When you sign in with Apple or Google we receive the provider identifier and, depending on what they share, name, email, verification status, and image. We retain access sessions, technical security data, and linked providers. If you enable sync, we store an encrypted vault, encrypted recovery envelopes, version and update date, and device technical info such as platform, app version, and a random identifier. History leaves the device only as end-to-end encrypted text.

Site and technical data

When visiting this site, Cloudflare may process IP address, date and time, requested URL, technical security identifiers, and basic browser data to deliver content, prevent abuse, and maintain availability. Doing Things does not add third-party analytics or advertising cookies.

Support messages

If you write to support or privacy, we will process your address, message content, and any data you provide to respond, investigate the issue, and meet legal obligations. Do not send unnecessary medical information.

Purposes and choice

We use account data to authenticate you, link providers, maintain sessions, sync the encrypted vault, allow recovery and deletion, prevent abuse, and handle support. Technical data is used to operate and protect the app and site. We do not use it for advertising, commercial profiling, or selling data. You can continue using local features without creating an account.

Notifications

If you grant permission, Chispa schedules local device alerts. Doing Things does not receive their content or scheduling; you can disable them in Profile or system settings.

Purchases and stores

Apple or Google process Chispa Plus through their respective stores. Doing Things does not receive your card details; the store only communicates the status needed to enable the purchase. Their policies govern account, payment, and refunds.

Providers and communications

Cloudflare provides the API, database, hosting, delivery, and protection for the app and site. Apple and Google provide sign-in and, where applicable, the store and payment. These providers may process data in other countries under their terms and applicable mechanisms. We share data only when necessary to provide, protect, or support the service, or when legally required. We do not sell personal data.

Retention

Local data remains on the device until you delete it or uninstall the app. Account data, devices and encrypted sync are retained while you keep the account and are deleted once you confirm account deletion, except where a legal obligation requires retention. Sessions are time-limited and technical logs and support messages are kept for as long as operational, security or legal needs require.

Your rights

You can request access, correction, deletion or objection, revoke consent, or limit use and disclosure by emailing the privacy address with your name, the specific request, the data affected and a way to receive a response. We may ask for the minimal information needed to verify your identity and will respond within applicable legal timeframes.

Export and deletion

You can export your history, delete local data and delete your account from Profile. Confirmed account deletion removes the profile, sessions, devices, linked providers and all encrypted content stored by Chispa. It does not cancel an App Store or Google Play subscription. Doing Things cannot recover deleted data, decrypt the vault or access the destination you choose for an export.

Security and minors

We apply data minimization, platform private storage, HTTPS transport and reasonable protective measures. No system is infallible. Chispa is not directed at minors and the safety questionnaire disables the timer where appropriate.

Changes and contact

We will publish any changes at this same URL and show the revision date. The identity of the responsible entity, its address and the email for privacy and ARCO rights appear at the end of this policy.

Controller and contact

Holder
ZONK MEDIA, CORP
Tax identifier (EIN)
32-0846732
Address
7345 W Sand Lake Rd, Ste 210, Office 8164, Orlando, FL 32819, United States
Registration
2026-001910870
Country
United States
Law and jurisdiction
Leyes de México y tribunales mexicanos competentes, sin perjuicio de los derechos imperativos del consumidor.