Privacy Policy
Last updated: October 9, 2026
This policy explains what Chiaro Apps’ mobile apps (each an “App”) and this website collect, why, where it is kept, for how long, who helps us process it, and the choices and rights you have. One policy covers all our apps: the shared sections apply to every App, and each App’s own section says what is different about it.
The short version
- Most of our apps keep what you create on your device only. Subtotal and TipCup keep it in your account on our servers, so it is backed up and synced.
- We never sell your data. Only Nova Counter and Flashly show ads; no other App does.
- Every App sends crash reports and usage statistics, so we can fix bugs and see what to improve. They never include what you type or enter.
- You can delete your data at any time; see each App’s section and “How long we keep it”.
1. Who we are
The Apps are made and published by Chirag Arora, under the name Chiaro Apps (“we”, “us”, “our”). The App Store shows the seller as Chirag Arora; Google Play shows the developer as Chiaro Apps. We are the controller of the personal data described here.
Questions about this policy or your data: write to the App’s own address (listed in its section below), or to [email protected].
2. The apps this policy covers
| App | Where what you create is kept | Account | Ads |
|---|---|---|---|
| Nova Counter | On your device | Only for feature requests | Yes (AdMob) |
| Flashly | On your device | Only for feature requests | Yes (AdMob) |
| GoSober | On your device | Only for feature requests | No |
| Vane | On your device | Only for feature requests | No |
| Voltkit | On your device | Only for feature requests | No |
| Plott | On your device | Only for feature requests | No |
| Airkit | On your device | Only for feature requests | No |
| Pomo | On your device | Only for feature requests | No |
| Signa | On your device (a label photo you scan is sent once to be read) | Only for feature requests | No |
| Tack | On your device | Only for feature requests | No |
| Subtotal | Your account, on our servers (EU) | Required | No |
| TipCup | Your account, on our servers (EU) | Required | No |
3. What every App collects
3.1 Crash reports and usage statistics
Every App uses Firebase Crashlytics and Google Analytics for Firebase (GoSober also uses Mixpanel; see its section) to find bugs and see which features are used.
- Crash reports contain the technical details of the error (where in the code it happened), your device’s model and operating system, the App version and a random installation ID.
- Usage statistics record which screens are opened and which actions are taken (for example, that a counter was tapped or a calculation was run), with your device’s model, operating system, App version, language, an approximate country or region (worked out from your connection, never GPS) and a random installation ID.
- They never include what you type or enter: no amounts, notes, names, journal entries or medicines. Apps that have an account don’t send your email address with them.
They are always on, for everyone, everywhere (including the EU, EEA and UK), from the first time an App opens. There is no switch for them in the Apps: they are how we find and fix crashes, and they carry nothing you enter. If you object to them, email us (see “Your choices and rights”).
3.2 Purchases and subscriptions
Paid features (such as “Pro”) are sold by the App Store and Google Play. We never see your card or payment details. RevenueCat, our subscription service, receives the purchase from the store with basic technical details of your device (such as its model, operating system and country), and tells the App what you have unlocked and when it renews or ends. It knows you by a random ID, or, in Subtotal and TipCup, by your account ID.
3.3 The feature requests board (optional)
Most Apps have a board where you can suggest features, vote and comment. Reading it needs nothing from you. To post, vote or comment you sign in (for example with an email link, Google or Sign in with Apple), and we keep:
- your email address and how you sign in (with Sign in with Apple’s “Hide My Email” we only see Apple’s relay address), and an account ID;
- the display name you choose, and your posts, comments and votes.
The board is public to other users of that App: your posts, comments, votes and display name are visible to them. Before anything is posted, its text may be checked automatically for abuse by Google’s Gemini AI (Vertex AI); the check doesn’t keep the text. We may email you about your posts (for example, when an idea you posted is built) and send sign-in links.
3.4 Protecting the Apps (App Check)
Apps that talk to our servers use Firebase App Check, which asks Apple or Google to confirm that a request comes from a genuine copy of the App on a real device. It doesn’t identify you.
3.5 When you contact us
If you email us, we keep the conversation to help you, and delete it when it is no longer needed. Some Apps start the email with a few technical details (such as the App version and your device’s model); you see them before you send and can delete them.
3.6 Server logs
Like any online service, our servers log technical details of each request they answer, such as the time, your IP address and what the App asked for, to keep the Apps secure and find faults. They aren’t used to profile you and are kept for 30 days.
4. What each App keeps
On top of section 3, each App keeps the following. “On your device” means it stays on your phone (and in your phone’s own backups, such as iCloud or Google backup, if you use them): we never receive it.
Nova Counter
Your counters, counts, history and settings are kept on your device.
Ads: Nova Counter shows ads from Google AdMob (banners and full-screen ads), which can be removed with a purchase. AdMob may collect device identifiers (such as your advertising ID, where your device allows it) and usage data to show and measure ads, and may personalise them; see how Google uses data from apps that use its services. Usage statistics include button presses (increase and decrease) and screen views. We use Firebase Remote Config to adjust settings such as how often ads appear.
Contact: [email protected]
Flashly
Your settings are kept on your device. The camera permission is used only to switch the flashlight on and off: no photo or video is taken.
Ads: Flashly shows ads from Google AdMob (banners and full-screen ads), which can be removed with a purchase. AdMob may collect device identifiers (such as your advertising ID, where your device allows it) and usage data to show and measure ads, and may personalise them; see how Google uses data from apps that use its services. We use Firebase Remote Config to adjust settings such as how often ads appear.
Contact: [email protected]
GoSober
What you track (what you are quitting, your sobriety dates, urges, relapses, journal and settings) is kept on your device. App lock (Face ID, fingerprint or your device’s PIN) and the home-screen widgets work on your device only; we never receive your face, fingerprint or PIN. Reminders are scheduled on your device.
Usage statistics go to Google Analytics for Firebase and to Mixpanel (on its EU servers). They record which screens are opened and which actions are taken, for example that an urge or a relapse was recorded or a milestone reached, never what you write or the details you enter.
Contact: [email protected]
Vane
Your saved calculations and settings are kept on your device. If you allow it, Vane uses your approximate location, on your device and only while you use it, to find the weather station nearest you; your location isn’t stored or sent to us. Weather reports are fetched from aviationweather.gov (the US National Weather Service), which receives the station’s code and, like any website, your IP address.
Contact: [email protected]
Voltkit
Your calculations, saved items and settings are kept on your device.
Contact: [email protected]
Pomo
Your focus sessions, history, labels and settings are kept on your device. If you allow it, Pomo adds finished sessions to a calendar you choose on your device. If you turn on app blocking, the list of apps to block and the usage access it needs (Screen Time on iPhone, usage access on Android) stay on your device.
Contact: [email protected]
Signa
Your medicines, schedules, dose history, photos and settings are kept on your device; there is no account and no sync. Reminders and alarms are scheduled on your device.
Reading a label (Pro): when you choose to scan a pharmacy label or a medicine box, only the part of the photo you approve is sent, once, to Google’s Gemini AI (Vertex AI) to read what it says. It is processed on Google’s global servers, possibly outside the EU, isn’t kept, and isn’t used to train Google’s models. Nothing about your medicines is ever included in crash reports or usage statistics.
Contact: [email protected]
Subtotal
Subtotal needs an account, and keeps your data in it so it is backed up and synced across your devices. We keep:
- your account: your email address and how you sign in (an email link, Google or Sign in with Apple), and an account ID;
- your subscription records: service names, amounts, billing dates, categories, payment-method labels, notes and settings;
- for notifications, a push token for each device you sign in on, with basic device details.
Renewal dates and reminders are worked out on our servers, so our servers can read your records (they aren’t end-to-end encrypted). Reminders and summaries are sent by push and email; a push notification can include a service name and an amount, and passes through Apple’s or Google’s push services. The calendar feed (Pro) is a private link: anyone who has it can see your upcoming charges, and you can turn it off or make a new one at any time.
Your records are stored by Google Cloud in the EU (the eur3 multi-region, Belgium and the Netherlands). Emails are sent by ZeptoMail from the US. In Subtotal, usage statistics and crash reports are linked to your account ID (never your email address or what you enter).
When you delete your account in the App, it is deleted within 30 days; signing back in before then cancels the deletion. An account with no sign-in or sync for 24 months is deleted, after warning emails 30 and 7 days before.
Contact: [email protected]
TipCup
TipCup needs an account, and keeps your shifts, tips and pay in it so they are safe and synced across your phones. That is the only reason we keep them. Your data is kept for as long as your account exists, whether or not you pay; only you can delete it.
Your account.
- Your email address, and how you sign in (an email link, Google or Sign in with Apple). With Sign in with Apple you can hide your address; we then only see Apple’s relay address.
- Your first name, if Google or Apple gives it to us when you sign in. You can change or remove it in the app.
- An account ID that Firebase creates for you. It isn’t your name or email.
What you log.
- Your jobs and their pay rules: pay rates, overtime, pay periods, currencies and tip-out rules.
- Your shifts: dates and times, hours, cash and card tips, tips received, tip-outs, sales, service charges, covers, notes and any custom fields you add.
- Your schedule, goals and settings, such as your tax-year start, week start, notification choices, the app’s language, and your phone’s time zone and language (so reminders, summaries and emails arrive at the right time and in your language).
We use these only to run TipCup for you: to show your earnings, sync them across your phones, back them up, and send the reminders and summaries you choose.
Your phones. For notifications: a push token for each phone you sign in on, with its platform (iOS or Android), app version, language and when it was last used. App lock (Face ID, Touch ID or your phone’s PIN) and the home-screen widgets work on your phone only. We never receive your face, fingerprint or PIN.
Emails. If you turn them on, we email you summaries and reminders, plus emails you can’t turn off: sign-in links and messages about your account and subscription. If an email to you bounces or is marked as spam, we note that and stop sending to that address.
The feature requests board works as in section 3.3, with your posts always checked by Gemini before they appear. New ideas also wait for a person at TipCup to approve them before they appear.
The calendar link (Pro). If you turn on the calendar link, anyone who has the link can see your scheduled shifts, with their job names and notes. You can turn it off or make a new link at any time in Settings.
Contact us. When you write from the app (Settings › Contact us), the email starts with a few details at the bottom to help us find the problem: the app version, your phone’s model and operating system, language, time zone, your TipCup account ID, whether you have Pro, and whether notifications and syncing work. Never your amounts, shifts or email address. You see them before you send and can delete them.
Crash reports and usage statistics (section 3.1) also include a few facts about your setup, such as whether you have Pro or use a home-screen widget, and coarse details like which kind of pay a job uses. They never include your amounts, notes, names of jobs, anything you type, your email address or your TipCup account ID, and aren’t linked to your account. No advertising ID is collected.
Where it is stored. Everything you log, and your account’s settings, are stored in Google Cloud’s europe-west1 region in Belgium, in the EU, and our server code runs there too. Sign-in, push notifications, crash reports and usage statistics use Google’s global servers, including the US; RevenueCat and ZeptoMail (emails) are in the US.
How long TipCup keeps it.
- For as long as your account exists, whether or not you pay, and however long you are away.
- A deleted shift, or a deleted job together with its shifts, goes to “Recently deleted”, where you can restore it for 30 days. Then it is deleted for good.
- Notifications in the app’s inbox expire on their own, most after 90 days.
- When you delete your account (You › Account › Delete my account), it is deleted within 30 days. Until then, signing back in cancels the deletion and everything comes back as it was. Then we delete your account and everything in it, delete your RevenueCat record, and, if you use Sign in with Apple, revoke TipCup’s access to your Apple ID. On the feature requests board, the text of your ideas and comments is replaced with “[deleted]” and your votes are removed.
- Copies can remain in our database backups for up to 13 weeks after deletion (see section 6). If we ever restore a backup, we delete again every account that was deleted after it was taken.
Your controls. Settings › Export all my data gives you everything in TipCup as JSON and CSV files. Edit or delete any job, shift, goal or setting in the app. Choose notifications and emails in Settings, or with the link at the bottom of any email. Security rules mean only your signed-in account can read your data.
Contact: [email protected]
5. Who processes your data
We use a few companies to run the Apps. They process data on our instructions, under data processing terms, and may not use it for their own purposes, except where noted (AdMob).
| Company | What for | Apps |
|---|---|---|
| Google (Firebase and Google Cloud) | Crash reports and usage statistics, App Check, Remote Config, sign-in, storing and syncing data and backups, server code, push notifications | All (storage and sync: Subtotal and TipCup; sign-in: the board, Subtotal and TipCup) |
| Google (Vertex AI, Gemini) | Checking feature-request posts for abuse; reading a label you scan. Nothing is kept | The board; Signa |
| Google AdMob | Showing and measuring ads. Google acts as an independent controller for some ad data | Nova Counter, Flashly |
| RevenueCat (US) | Purchases, trials, renewals and restores | All Apps with paid features |
| Mixpanel (EU servers) | Usage statistics | GoSober |
| ZeptoMail by Zoho (US) | Sending emails | The board, Subtotal, TipCup |
| Apple and Google | Sign in with Apple and Google sign-in; App Store and Google Play billing; push notifications | As used; under their own privacy policies |
We never sell, rent or share your data for advertising (apart from the ads in Nova Counter and Flashly described above), and we share it with anyone else only if the law requires it.
International transfers. Some of these services are global or US-based, so some data is processed outside the EU and UK. Those transfers rely on the EU–US Data Privacy Framework (and its UK extension) and the European Commission’s standard contractual clauses.
6. How long we keep it
- On your device: until you delete it in the App or uninstall the App.
- A feature requests board account: until you delete it (in the App’s feature requests, or by emailing us). It is deleted within 30 days; signing back in before then cancels the deletion. The text of your ideas and comments is then replaced with “[deleted]” and your votes are removed.
- Subtotal and TipCup accounts: as described in their sections.
- Backups: where we keep backups of our databases, deleted data can remain in them for up to 13 weeks, until they expire. Backups are only used to recover from a failure.
- Crash reports and usage statistics: kept by Google for 90 days (crash reports) and at most 14 months (usage statistics). GoSober’s usage statistics in Mixpanel are kept until we delete them.
- Advertising data (Nova Counter, Flashly): kept by Google under its own retention policies.
- Server logs: 30 days.
- Emails to us: as long as needed to help you.
7. Your choices and rights
- See, export or correct your data: data on your device is yours to view, edit and delete in the App. Subtotal and TipCup let you export everything from their settings.
- Delete your data: uninstalling an App removes what it kept on your device. To delete an account (the board, Subtotal or TipCup), use the App, or follow the steps on our Support page, which also explain how to ask by email if you can’t use the App.
- Crash reports and usage statistics: always on, with no switch in the Apps (section 3.1). If you object to them, email us.
- Personalised ads (Nova Counter, Flashly): you can limit them in your device settings. On Android: Settings › Google › Ads (delete or reset your advertising ID). On iPhone: Settings › Privacy & Security › Tracking, and Apple Advertising.
- Notifications and emails: choose them in the App’s settings or your device’s settings, or with the link at the bottom of any email.
Depending on where you live (for example under the GDPR in the EU, EEA and UK, or in California), you also have the right to access, correct, delete or port your data, and to object to or restrict how we use it. Email us to use any of these rights; we answer within one month. We use your data to provide the service you asked for (contract), and to keep the Apps secure, find and fix bugs and improve them (our legitimate interests). Crash reports and usage statistics rely on those legitimate interests, everywhere: they are limited to technical and usage details, never include what you enter, and are never used for advertising. Ads in Nova Counter and Flashly are shown under the choices your device and Google offer. You can also complain to your local data protection authority.
We don’t sell personal information as California law defines it. Apart from the ads in Nova Counter and Flashly, we don’t “share” it for targeted advertising. We won’t treat you differently for using any of your rights.
8. Security
Data travels encrypted (HTTPS) and is encrypted where we store it. Only your signed-in account can read your account’s data; the database’s security rules enforce that. Some Apps also offer an app lock for a shared phone.
9. Children
The Apps are not directed to children. You must be at least 13 to use them, or older if your country sets a higher minimum age for using online services without a parent’s consent (for example, 16 in some EU countries). We don’t knowingly collect data from anyone younger. If you believe a child has given us data, email us and we will delete it.
10. This website
chia.ro uses Google Analytics, which sets cookies, to count visits and see which pages are read. It doesn’t ask you for any personal information.
11. Changes to this policy
If we change this policy, we update the date at the top. If a change matters to how your data is used, we tell you in the App or by email before it takes effect.
12. Contact us
Questions, or a request about your data: email the App’s address in its section above, or [email protected]. You can also reach us through our App Store and Google Play listings.