ChAPPover privacy policy

This is a courtesy translation. In case of discrepancies, the Italian version prevails.

Last updated: 29 October 2026 · ChAPPover app for Android and Web · Intended for people aged 18 and over

1. Data controller

Colle Vento Group S.r.l. — registered office: Via Bonanno 101, Misilmeri (PA), Italy. Privacy contact: [email protected]. Support and account deletion: [email protected].

2. Types of data processed

• Account and identifiers: unique nickname, display name, avatar, ChAPPover/Discovery identifier, phone number if optionally entered, profile data, Rooms and authorised devices, authentication and account recovery information (including encrypted elements where applicable). The phone number is not the key for recovering your identity.
• Technical data: IP addresses and metadata needed for discovery, signalling, WebRTC/STUN/TURN connectivity, presence, authentication, invitations and service protection.
• Notifications: tokens and technical information needed to send push notifications.
• Reports and security: identifiers involved, category, descriptions and evidence the user chooses to send, moderation measures and administrative records.
• Location: precise coordinates when sharing is explicitly enabled for a Room, including in the background.
• Contacts, photos, audio and files: content selected or captured by the user to use the related features. The app can use the device's contact picker without needing to upload the entire address book to the server automatically.

Messages, calls and files are designed to travel mainly between devices via P2P; they are not normally stored as chat content in the signalling service. Participants may keep copies, and exported files remain in the folders chosen by the user. Rooms and other features may keep history and data in the local storage of the phone or browser.

The Recovery Kit lets you restore the same identity and the same unique nickname on another device through an encrypted backup; the user must keep the Kit as a secret.

3. Purposes and legal bases

• Provision of the service (Art. 6(1)(b) GDPR): creating and managing accounts, identifying devices, pairing browsers, managing Rooms, invitations, messages and connections.
• Voluntary location sharing: carried out only after an explicit choice in the individual Room, revocable at any time; operating system permissions remain independent.
• Security and abuse prevention (Art. 6(1)(f) GDPR, where applicable and subject to assessment): protection of connections, blocks, reports and administrative activities.
• Legal obligations (Art. 6(1)(c) GDPR, where applicable): responses to legitimate requests from authorities and other required compliance.

4. Precise location, including in the background

When a user enables sharing for a Room, ChAPPover collects the device's precise location and sends it to that Room's participants to display it on the map, even while the app is in the background, the screen is off or the app is not in use. It is an optional feature and can be turned off in the Rooms section. The device may show a persistent notification while sharing is active.

The map uses external map resources: the servers delivering the maps may receive IP addresses, technical browser/device information and requests relating to the area displayed. The shared location may be seen or stored by the other participants.

5. Recipients and external services

Data strictly necessary for the service may be processed by the ChAPPover infrastructure and by the following external providers and services, within the limits of the features used:

• Cloudflare: delivery and protection of Web resources, connection brokering and, where used, the STUN service. It may receive IP addresses and technical metadata.
• Google Firebase Cloud Messaging (FCM): delivery of Android push notifications, processing device tokens and technical metadata. It is not an ordinary storage service for P2P messages.
• OpenStreetMap Foundation: map images are requested directly from tile.openstreetmap.org; the operator receives connection data and requests relating to the map area viewed.
• Netsplit.de and third-party IRC networks: the IRC network catalogue may request resources from Netsplit.de; when the user connects to an external IRC network, its operator processes data under its own terms.

Apple/APNs push notifications, if used by a future iOS version, will be described in the privacy policy applicable to that version.

Room participants receive the content and data shared with them. WebRTC connections may expose IP addresses or other connection metadata to the peers or relays used.

International processing and transfers

Google/Firebase and Cloudflare operate through infrastructure and entities that may process personal data outside the European Economic Area as well. Where relevant, these processing operations are covered by contractual data processing terms and the safeguards provided by law, including standard contractual clauses. Individual transfers and their legal bases must be checked against the contractual arrangements actually signed. IRC services chosen independently by the user may be operated in other countries and apply their own privacy policies.

6. Retention periods and criteria

• Profile, devices and Rooms: as long as the account or Room remains active, unless deleted, revoked or otherwise terminated.
• Unaccepted invitations: ordinary expiry of 7 days, under the current configuration.
• Security reports: open reports are kept until the procedure is concluded; closed reports or those leading to a measure follow the ordinary period of 180 days from conclusion, unless specific documented needs apply.
• Records of administrative operations: ordinary period of 180 days.
• Residual technical identifiers of deleted accounts: ordinary period of 180 days from deletion, for abuse prevention and service integrity.
• Technical logs: signalling log rotation is size-based, with a configured maximum of three 10 MB files per container. This is not an exact expiry in days; availability of the records depends on event volume and rotation.
• Backups: daily backups of the state on both nodes, with scheduled deletion of copies older than 30 days; the procedure was activated and tested on 29 October 2026.
• Files, messages and history on devices: according to the settings and actions of the persons concerned, until deleted locally. Copies received by other users are independent.

The periods indicated do not prevent retention strictly necessary in the presence of legal obligations, disputes or specific security events, which must be justified and limited to the specific case.

7. Account deletion

In the Android app: Settings → Profile → Delete account, with explicit confirmation. You can also request deletion without using the app: instructions and official contact. Removing the account deletes the Discovery profile and device authorisations from active systems, except for the residual identifiers and evidence that may lawfully be kept as specified above. Uninstalling the app alone does not automatically delete the account.

8. Rights, complaints and updates

Where provided for by law, you can request access, rectification, erasure, restriction, portability, objection and withdrawal of consent. To exercise your rights write to [email protected]. You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

ChAPPover is designed for users aged 18 and over. There is no advertising profiling and no solely automated decision-making with legal effects on users in the features reviewed. In the event of substantial changes, this page will be updated and the date indicated.