Privacy Policy
Chiply teaches the decisions behind No-Limit Texas Hold’em in short lessons. This policy is written against what our website and waitlist actually do, line by line. Where something is planned but not built, we say so.
The short version: we collect very little, we sell nothing, the website sets no cookies and has no analytics or ad trackers, and one email from you deletes what we hold about you.
Who we are, and who to ask
Chiply is a product of Dalu Solutions, Calgary, Alberta, Canada. We have a designated privacy officer who is accountable for the personal information we hold and answers privacy requests. You can reach them at support@chiply.app.
- Privacy questions
- support@chiply.app
- Phone
- (587) 834-1595
- Location
- Calgary, Alberta, Canada
We aim to answer privacy requests within 30 days, which is the timeline Canadian privacy law works to.
What this policy covers
This policy covers three things:
- This website, chiply.app, including the waitlist.
- The emails we send to people who join the waitlist.
- The Chiply app, once it launches. It is not in the app stores yet; the section “The app” says what changes then.
It does not cover other companies’ sites that we link to, such as our TikTok, YouTube, Instagram and Facebook pages. Those platforms have their own privacy policies.
We follow the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA), and Canada’s anti-spam law (CASL) for the messages we send.
This website
The website sets no cookies, so there is no cookie banner to click. It has no analytics, no advertising, no advertising pixels and no third-party scripts. The only thing stored in your browser is what your browser keeps for itself.
The site is hosted by Vercel in the United States. To deliver a page, Vercel necessarily handles your IP address and the details your browser sends, and it keeps short-lived request logs as part of running the hosting. We do not use them to follow or profile visitors.
If you follow a link from chiply.app to one of our social media pages, you leave this site and that platform’s policy applies.
The waitlist
You can join the waitlist with an email address and a tick in a consent box. This is everything we store about you when you do:
- your email address, in lowercase;
- when your entry was created;
- the exact wording of the consent you ticked, the time you ticked it, and the page where you gave it;
- the address of the page that sent you, and your browser’s language. Both are captured on every sign-up made with JavaScript, which is how the form normally works;
- the campaign tags in the link you followed (utm_source, utm_medium, utm_campaign and ref), only if the link carried them;
- when the latest confirmation email was sent and how many have been sent, whether and when you confirmed, and whether and when you unsubscribed;
- a one-way hash of your current confirmation link, not the link itself.
Canadian anti-spam law asks us to be able to prove that you agreed to hear from us, which is why we keep the consent wording and the time. We use where you came from to learn which links bring people here, and the rest to run the double opt-in.
Your IP address
To stop one source flooding the form, we count sign-up attempts per visitor. For that, your IP address is turned into a keyed one-way code (a hash) and only the code is stored, never the address itself. It is kept for about a day: an hourly job deletes anything older than that.
Emails we send you
We use a double opt-in. After you sign up we send a confirmation email, “Confirm my spot”, with a link. If you have not confirmed, we send another only when you submit the form with your address again, at least 10 minutes after the last one. Nothing is resent automatically.
We send at most three confirmation emails before you confirm (the count starts again once you do). After the third, an unconfirmed address is never emailed again. A newer confirmation email replaces the earlier link, so only the latest link works, and it works for 14 days after it was sent.
Once you have confirmed, we will email you when Chiply launches and send occasional updates about it. That is all the list is for.
Every email says it is from Chiply, gives our contact details and our mailing address, and has an unsubscribe link, plus the one-click unsubscribe headers that mail apps use.
Email is not switched on yet
We will not send email until our mailing address is in place on the emails, as the law requires. Until then, sign-ups are stored with their consent record and nothing is sent. The first confirmation email goes out once email is switched on, so there may be a wait between signing up and hearing from us. If you did not sign up, ignore that email and we will not write again.
Unsubscribing, and what we keep when you do
Use the unsubscribe link in any email, or write to hello@chiply.app or support@chiply.app. One message is enough and it is permanent.
When you unsubscribe we clear where you came from (the campaign tags, the referring page and the browser language). We keep your email address, the record of your consent, your confirmation details and the date you unsubscribed, until you ask us to delete them, and that is on purpose. It is the only way to be sure an address that has told us to stop is never emailed again.
If you would rather we kept nothing at all, email support@chiply.app and we will delete the whole entry. The consequence is that nothing then remains to stop a future sign-up with that address being treated as a new one. If someone signs up again after unsubscribing, they get confirmation emails under the same rules as above, and nothing else until they confirm.
If you write to us
If you email support@chiply.app or hello@chiply.app, including to unsubscribe, we receive your email address and whatever you write. That mail is held by our mailbox provider, Namecheap Private Email. We keep it while we are dealing with your message and for a reasonable period afterwards. You can ask us to delete it at any time.
The app
Today the Chiply app is not in the app stores and nothing from it reaches us. When it launches, your lesson progress, XP, streaks and hearts will live on your phone, and the app will work offline.
We plan to add the following, and none of it is switched on today:
- an optional account, which syncs a small progress record through Supabase so you can pick up on a new phone;
- anonymous usage analytics through PostHog, to improve the lessons;
- subscriptions bought through the App Store or Google Play, handled with RevenueCat;
- streak reminder notifications on your phone, sent through Expo’s push service and Apple’s and Google’s push services.
We will update this policy, and change the date at the top, before any of them is switched on.
Where the data physically lives
We use service providers to store and process information on our behalf. Here is exactly where things sit:
- Waitlist database
- Supabase, region us-east-1, United States.
- Hosting and delivery
- Vercel, United States.
- Email we send
- Resend, United States.
- Email to our addresses
- Namecheap Private Email: Namecheap, Inc. (United States).
Where a provider is outside Canada, the information is subject to that country’s laws while it is there, and may be accessible to that country’s courts, law enforcement and national security authorities, under their laws rather than Canada’s. By joining the waitlist you understand that this transfer happens.
We only use service providers that are contractually required to protect the information we give them and to use it solely to provide their service to us.
How long we keep things
- Waitlist entries
- Kept until you ask us to delete them. There is no automatic expiry yet.
- Where you came from
- Kept until you unsubscribe, when it is cleared, or until you ask us to delete it.
- Unsubscribe records
- Kept until you ask us to delete them, so that we never email that address again.
- Hashed IP codes
- About a day, then deleted by an hourly job.
- Confirmation links
- Work for 14 days after the email is sent.
- Hosting request logs
- Short-lived, kept by Vercel as part of hosting.
- Messages to us
- Held by Namecheap Private Email. Kept while we deal with them and for a reasonable period afterwards. Ask and we delete them.
What we do not do
Stated plainly, because a policy that only lists what is collected tells half a story:
- We do not sell, rent or trade personal information. There is no circumstance in which we would.
- We do not run advertising, advertising pixels, analytics or retargeting on this website, and we set no cookies.
- We do not build profiles of people, and we make no automated decisions about anyone.
- We do not email anyone who has not asked us to, and we do not buy or borrow email lists.
- We do not store your IP address in our database, only the one-way code described in “The waitlist”. Vercel’s request logs hold IP addresses briefly, as described in “This website”.
- We do not take payments or card details. Nothing is for sale yet.
- We do not share your information with anyone except the service providers listed in “Where the data physically lives”, or where the law requires it.
How we protect it
Traffic to the website is encrypted in transit. The waitlist database can be reached only by our own server: row-level security is on, nothing is open to the public, and the service key that unlocks the database exists only on the server, never in your browser.
We do not currently run database backups or point-in-time recovery. The database is on a free tier while Chiply is being built. That is a real limitation and we would rather say it here than imply a durability we do not have: if the database were lost, the waitlist could be lost with it, and you would need to sign up again.
No system is perfectly secure. If a breach ever affects your information in a way that creates a real risk of significant harm, we will tell you and the Privacy Commissioner, as the law requires.
Your rights
Under Canadian privacy law you can:
- Ask what personal information we hold about you, and get a copy of it.
- Ask us to correct anything that is wrong.
- Ask us to delete it, unless we are required to keep it.
- Withdraw your consent to us using it.
- Tell us to stop contacting you. One message is enough and it is permanent.
Email support@chiply.app from the address you signed up with and say what you want. We may need to confirm who you are before handing over information, and there is no charge.
If we handle your request badly, you can complain to the Office of the Privacy Commissioner of Canada or, in Alberta, to the Office of the Information and Privacy Commissioner of Alberta. We would appreciate the chance to fix it first.
Children
Chiply is for adults 18 and over, and it is not directed at children. We do not knowingly collect personal information from anyone under 18. If you think a child’s information has reached us, tell us and we will delete it.
Changes to this policy
If we change how we handle personal information, we will update this page and change the date at the top. If the change is significant, such as switching on accounts or analytics in the app, we will do it before the change takes effect, and we will tell people on the waitlist by email rather than leaving it to be noticed.
The version on this page is always the one that applies.
Contact
Anything at all about privacy, including a request to delete what we hold:
- support@chiply.app
- Phone
- (587) 834-1595
- Location
- Calgary, Alberta, Canada