Privacy Policy

Last updated:

March 25, 2026

‍1. Introduction

Welcome to Chik. This Privacy Policy explains how Jon Corp OÜ ("Chik", "we", "us", or "our") collects, uses, discloses, and safeguards your information when you visit our marketing website at https://chik.app, use our application at https://my.chik.app, or interact with our services (collectively, the "Services").

We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

2. Data Controller

For the purposes of the GDPR, the Data Controller responsible for your personal information is:

Jon Corp OÜ

Sepapaja tn 6

15551 Tallinn

Estonia

Email: jonathan@mail.chik.app

Note on Client Data: When you (the freelancer) use Chik to process data belonging to your clients (e.g., adding their names, emails, or contract details to the Showcase Mode), you are the Data Controller for that specific information, and Chik acts as your Data Processor.

3. Information We Collect

We collect information that you provide directly to us, information derived from your use of the Services, and information from third parties.

A. Information You Provide to Us

  • ‍Account Data: When you register, we collect your name, email address, and authentication credentials.
  • ‍Workspace Content: We store the data you create and upload, including tasks, project notes, time-tracking logs, and the text/signatures of contracts you generate.‍
  • Client Information: Names and email addresses of the clients or collaborators you invite to your shared dashboards.

B. Information Collected Automatically

  • ‍Technical Data: We automatically collect certain information when you access the Services, such as your IP address, browser type, operating system, and access times.‍
  • Usage Data: We collect data on how you interact with our application to improve our platform.

4. How We Use Your Information

We use the collected information for the following purposes, relying on the specified legal bases under the GDPR:

  • ‍To provide and maintain the Service: Creating your account, hosting your projects, and enabling contract signatures (Legal basis: Performance of a Contract).‍
  • To process payments: Handling subscriptions via our Merchant of Record (Legal basis: Performance of a Contract).‍
  • To communicate with you: Sending transactional emails, product updates, and marketing communications (Legal basis: Legitimate Interests or Consent).‍
  • To analyze and improve our website: Understanding how users interact with our marketing site (Legal basis: Legitimate Interests).‍
  • To serve relevant advertisements: Retargeting visitors of our marketing site (Legal basis: Consent).

5. Third-Party Services and Sub-Processors

To provide our core functionality, we share data with trusted third-party service providers. We only share the minimum data necessary for these services to function. Our sub-processors include:

  • ‍Xano (xano.com): Our primary database provider. All user data and workspace content is securely hosted on Xano servers located in Paris, France.‍
  • Nordcraft (nordcraft.com): Our frontend framework provider. Certain API requests from the application are proxied securely through their service.‍
  • Cloudflare: We use Cloudflare to host our frontend architecture, provide content delivery (CDN), and ensure security against DDoS attacks.‍
  • Polar (polar.sh): Acts as our Merchant of Record and payment processor. When you upgrade your account, your financial details are processed securely by Polar; Chik does not store your credit card information.‍
  • Resend (resend.com): Used for sending transactional emails (like client invites) and marketing communications.‍
  • pdfEndpoint (pdfendpoint.com): Used dynamically to generate PDF files for your timesheet reports and legally binding contracts.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Services:

  • ‍Essential Application Cookies: Necessary for keeping you logged into https://my.chik.app and ensuring secure sessions.‍
  • Fathom Analytics: We use Fathom Analytics on our websites. This is a privacy-first, cookieless analytics tool that complies fully with the GDPR and does not track personal identifying information.‍
  • Marketing Pixels (Meta Pixel & Google Pixel): We use these tracking technologies on our marketing website (https://chik.app) to measure ad performance and deliver targeted advertising. You can manage your cookie preferences through your browser settings or our site's cookie banner.

7. Data Retention and Deletion

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy.

Self-Serve Data Deletion: You have full control over your data. You can delete your account and permanently erase all associated data (including tasks, notes, contracts, and client information) at any time via the self-serve deletion tool located in the account settings of the Chik app. Upon triggering this action, your data is immediately removed from our active Xano database in Paris.

8. Your Data Protection Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have the following data protection rights:

  • ‍The right to access, update, or delete the information we have on you.‍
  • The right of rectification: You have the right to have your information rectified if it is inaccurate or incomplete.‍
  • The right to object: You have the right to object to our processing of your personal data.‍
  • The right of restriction: You have the right to request that we restrict the processing of your personal information.‍
  • The right to data portability: You have the right to be provided with a copy of the information we have on you in a structured, machine-readable format.
  • ‍The right to withdraw consent: You also have the right to withdraw your consent at any time where Chik relied on your consent to process your personal information.

To exercise any of these rights, please use the self-serve tools in your account dashboard or contact us at jonathan@mail.chik.app.

9. Legal Age and Contract Validity

Chik does not enforce a strict age restriction for creating an account; however, the platform facilitates the creation of contracts. Users are solely responsible for ensuring that they meet the legal age of majority in their jurisdiction to enter into binding agreements, and that the contracts generated or signed using Chik comply with all applicable local, state, and international laws. Chik provides the software infrastructure to enable these agreements but assumes no liability for their legal validity or enforceability.

10. International Data Transfers

While our primary database (Xano) is located in the EU (Paris, France), some of our third-party service providers operate globally. If we transfer your personal data outside the European Economic Area (EEA), we ensure a similar degree of protection is afforded to it by ensuring standard contractual clauses (SCCs) or other legally approved transfer mechanisms are in place.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

‍