Privacy Policy

Chacha is a place to discover things to buy from Egyptian brands and the people who wear them. To do that we hold your account details, what you post and save, and who you follow.

We never see your card details. When you buy something, checkout happens on the brand's own Shopify store. Your payment goes to them directly and no card number ever reaches Chacha.

We cannot read your messages. Direct messages are end-to-end encrypted. They are stored encrypted and the keys stay on the devices in the conversation.

Your account. An email address or phone number, a username, a display name, and a password. Passwords are stored hashed — we never hold the original. Optionally a profile photo and bio.

What you create. Posts and the photos or videos in them, captions, the products you tag, comments, likes, mood boards and the items saved to them, who you follow, and follow requests.

Messages. Direct messages and group conversations, stored end-to-end encrypted. We hold the encrypted content and the metadata needed to deliver it — who is in a conversation and when a message was sent.

Shopping. What is in your cart, the orders placed through Chacha, and — where a creator is credited for a sale — which post led to it, so their commission can be calculated.

How you use the app. We record a small set of events: tapping a product tag, opening a product, saving to a board, and opening or closing a brand's checkout. This tells us whether people are finding things worth buying, and whether the checkout is working. It is not sold and not used to build an advertising profile.

Technical. A device token so we can send you notifications, your language setting, and crash reports when the app fails — which include what the app was doing at the time and the account it happened on, so we can fix it.

To run your account and show you a feed. To deliver messages and notifications. To put items in a cart and hand you to the right brand to check out. To credit creators for sales they drove. To find and fix faults. We do not sell personal data, and we do not use it to target advertising.

Brands you buy from. When you check out, you are on that brand's Shopify store and are their customer for that order. What you give them — name, address, payment — is held under their privacy policy, not this one.

Shopify. Powers the brand storefronts and checkout.

Google Firebase. Delivers push notifications and receives crash reports.

Amazon Web Services. Hosts the service and stores uploaded photos and videos.

Creators, in aggregate. A creator sees how their posts performed and what they earned. They do not see who bought.

We also disclose information where the law requires it.

Your username, display name, profile photo, posts, and public mood boards are visible to anyone using Chacha. Private boards are visible only to you and anyone you invite to collaborate. Your email address and phone number are never shown to other users.

Delete your account. Settings → Delete Account, in the app. This deactivates the account and removes your content. Records we are required to keep for tax or accounting — the fact that an order happened, and any commission paid on it — are retained.

Notifications. Turn categories off in Settings, or turn them off entirely in your phone's settings.

Access, correction and objection. Write to us and we will tell you what we hold, correct it, or delete it. Egypt's Personal Data Protection Law (Law 151 of 2020) gives you these rights.

Chacha is not for people under 16. We do not knowingly collect data from anyone under 16, and will delete the account if we learn we have.

If this policy changes in a way that matters, we will tell you in the app before it takes effect rather than quietly updating the date at the top.

Questions, or a request about your data: privacy@chacha-eg.com.