doingthings.

CHISPA · LEGAL

Privacy Policy

Last reviewed: August 31, 2026.

Summary

You can use Chispa without an account. History is created and stored primarily on the device. If you sign in and enable sync, Chispa encrypts history on your device before uploading; Doing Things stores the encrypted content but does not hold the key to read it.

Data stored in the app

The app stores sessions and fasting edits, protocol, time reference, preferences, onboarding status, and safety responses locally. On iOS it shares a minimal summary with its widget and Live Activity; on Android it shares with its widget and active notification within the app’s private storage. Safety responses stay local and aren’t included in synced backups. Chispa does not access Apple Health, Health Connect, location, contacts, photos, microphone, or camera, nor does it record weight, hydration, calories, activity, notes, or metabolic measurements.

Account and encrypted sync

The account is optional. When you sign in with Apple or Google we receive the provider identifier and, depending on what they share, name, email, verification status, and image. We retain access sessions, security technical data, and linked providers. If you enable sync, we store an encrypted vault, encrypted recovery envelopes, version and update date, and device technical info such as platform, app version, and a random identifier. History leaves the device only as end-to-end encrypted text.

Site and technical data

When visiting this site, Cloudflare may process IP address, date and time, requested URL, security technical identifiers, and basic browser data to deliver content, prevent abuse, and maintain availability. Doing Things does not add third-party analytics or advertising cookies.

Support messages

If you write to support or privacy, we will process your address, message content, and any data you provide to respond, investigate the issue, and meet legal obligations. Do not send medical information unless necessary.

Purposes and choice

We use account data to authenticate you, link providers, keep the session, sync the encrypted vault, allow recovery and deletion, prevent abuse, and handle support. Technical data is used to provide and protect the app and site. We do not use it for advertising, commercial profiling, or selling data. You can continue using local features without creating an account.

Notifications

With permission, Chispa schedules local device alerts. Doing Things does not receive their content or scheduling; you can disable them in Profile or system settings.

Purchases and stores

Apple or Google process Chispa Plus through their respective stores. Doing Things does not receive your card details; the store only shares the status needed to enable the purchase. Their policies govern the account, payment, and refunds.

Providers and communications

Cloudflare provides the API, database, hosting, delivery, and protection for the app and site. Apple and Google provide sign-in and, where applicable, store and payment. These providers may process data in other countries under their terms and applicable mechanisms. We only disclose data when necessary to provide, protect, or support the service, or when legally required. We do not sell personal data.

Retention

Local data stays on your device until you delete it or uninstall the app. Account, device, and end-to-end encrypted sync data are kept while your account exists and are removed when you confirm deletion, except for exceptional legal obligations. Sessions are time-limited and technical logs and support messages are retained as long as operationally, for security, or legally required.

Your rights

You may request access, correction, deletion, or objection, withdraw consent, or limit use and disclosure by emailing the privacy address with your name, the specific request, the data affected, and a way to receive a response. We may ask for the minimum information needed to verify your identity and will respond within applicable legal timeframes.

Export and deletion

You can export your history, delete local data, and delete your account from Profile. Confirmed account deletion removes the profile, sessions, devices, linked providers, and all encrypted content stored by Chispa. It does not cancel an App Store or Google Play subscription. Doing Things cannot recover deleted data, decrypt the vault, or access the destination you choose for an export.

Security and minors

We apply data minimization, platform private storage, HTTPS transport, and reasonable protective measures. No system is infallible. Chispa is not directed at minors and the safety questionnaire disables the timer when appropriate.

Changes and contact

We will publish any changes at this same URL and indicate the revision date. The identity of the responsible entity, its address, and the email for privacy and ARCO rights appear at the end of this policy.

Controller and contact

Owner
ZONK MEDIA, CORP
Tax identifier (EIN)
32-0846732
Address
7345 W Sand Lake Rd, Ste 210, Office 8164, Orlando, FL 32819, United States
Registration
2026-001910870
Country
United States
Governing law and jurisdiction
Leyes de México y tribunales mexicanos competentes, sin perjuicio de los derechos imperativos del consumidor.