Privacy policy

1. Scope

This policy describes how Chocon processes data when you use chocon.net, the parent Dashboard, the Chocon iOS/Android app, Chocon Desktop and related backend services.

Chocon is provided and its data is controlled by CKPAY.,JSC, at 178 Mai Dịch, Phú Diễn, Hanoi, Vietnam.

A parent or legal guardian manages the family account. Chocon does not provide a direct child sign-up flow.

2. Data we collect

Chocon collects data according to the features you use; not every category below is generated for every family.

• Parent account data: name, email, identity-provider identifier, sign-in events, language and notification settings.
• Family and learning profiles: child display name, birth date/age or grade entered by a parent, memberships, courses, selected content sources and schedules.
• Device and pairing data: device/installation identifier, operating system, app version, short-lived pairing code, selected profile and the reported state of applied safety settings.
• Learning and safety signals: learning-session time, host/page metadata, duration, blocked events, camera state and derived posture/distance measurements when enabled. These signals are linked to the authorised family, profile and device so reports are scoped correctly; they are not anonymous.
• Mobile app data: APNs/FCM push token, platform, app version, notification permission state and last-seen time. The camera opens only when you choose QR pairing; Chocon does not upload or store scanned images or frames.
• Filtered diagnostics: issue type, screen, API path, status code, version, and technical context after known tokens, passwords and sensitive values are removed.
• AI schedule assistant (only when you invoke it): schedule text has URLs, meeting codes and passwords redacted before it is sent to the configured AI processor. Production task records keep an input hash, summary and run metadata rather than the original input text.
• Chocon Desktop may process camera frames locally to estimate posture/distance when a parent enables the feature. Chocon does not store or upload audio, video or camera frames for posture processing.

3. How we use the data

We use personal data for the following purposes:

• Provide, maintain and improve Chocon features.
• Create profiles, courses and schedules, pair devices, and synchronise settings between parent surfaces and learning devices.
• Deliver notifications a parent has allowed, confirm actions, and report the truthful state of devices and services.
• Provide technical support, investigate incidents, protect accounts and detect fraud or misuse.
• Measure reliability and product quality using limited data; individual signals are shown only within the authorised family scope.
• Comply with legal obligations or valid requests from competent authorities.

4. Processors and sharing

Chocon does not sell personal data or use child data for behavioural advertising. Data is transferred only as needed for a feature you use or where legally required.

Categories of processors that may receive data include:

• Chocon identity infrastructure and the sign-in provider you select, including Chocon Keycloak and linked Apple/Google identity services.
• Apple Push Notification service and Firebase Cloud Messaging for device notifications; App Store and Google Play for app distribution.
• Hosting, databases, object storage, support email and operational infrastructure configured by Chocon.
• The AI processor configured when you use the schedule assistant; only the feature’s redacted payload is sent.
• Competent authorities or another third party where there is a valid legal basis, or where you explicitly instruct or consent.

5. Retention and security

Chocon uses HTTPS, operating-system secure storage, family-scoped authorisation and operational safeguards to reduce unauthorised access. No system can guarantee absolute security.

The main operational retention limits currently applied are:

• Account, family, profile, schedule and selected-content records remain while the account is active; the deletion workflow removes linked data after confirmation and worker completion.
• Raw telemetry and learning-time evidence: up to 90 days; device inventory: up to 180 days; device health/network snapshots: up to 30 days.
• Filtered diagnostic events: up to 180 days; production server application logs: up to 30 days.
• AI task metadata: up to 90 days; unapplied schedule proposals: 14 days by default.
• Deletion-request status: up to 90 days; security/audit and deletion journals needed for reconciliation: up to 365 days.
• After deletion, Chocon keeps a one-way hash of the former identity subject without the profile, email or token, solely to prevent old sessions from regaining access. The hash is not used to reconstruct an account.

6. Parent and child rights

You may contact us to exercise the following rights:

• Access, correct or delete personal data and child profiles.
• Withdraw consent for optional features or request restrictions on processing.
• Receive a copy of your data in a structured format where permitted by law.
• Request deletion in the app under Account → Delete account, or use chocon.net/dashboard/account-deletion if you can no longer use the app.
• File a complaint with a supervisory authority if you believe your privacy rights were infringed.

7. Children under 16

Chocon supports children’s learning, but the parent or guardian controls the account and data-processing choices.

We do not market directly to children. If we learn that child data was submitted outside the parent/guardian flow, we will restrict processing and delete the related data after verifying the request.

• Explain optional camera use, schedules, and the signals Chocon shows to the family in age-appropriate language.
• Notify us immediately if you suspect unauthorised access or misuse of an account.

8. Contact and updates

Send privacy questions or requests to privacy@chocon.net. Chocon will verify the requester and respond within the period required by applicable law.

We may update this policy to reflect legal requirements or new features. We will notify you of significant changes via parent email and on chocon.net/privacy.