Version of 20 October 2026

Privatliv hos Chail

This notice covers the Chail website at https://chail.app, the Chail app and buying a plan. Your emails are processed on your device and never on our servers.

1. Hvem er ansvarlig

Dataansvarlig efter databeskyttelsesforordningen (GDPR) er den udbyder, der er angivet i kolofonen. Kontakt: support@chail.app.

2. Når du besøger denne side

Vi bruger hverken cookies, lokal lagring eller scripts fra tredjeparter her. Vores server tæller selv sidevisninger: siden, den henvisende hjemmeside (kun domænet), kampagneparametre i linket (utm_…), det land, som vores netværksudbyder udleder af din forbindelse, og om du bruger en telefon eller en computer.

Hvordan siden bliver brugt: mens denne side er åben, fortæller den vores server, hvad der sker på den. Det vil sige: hvilke knapper og links der bliver klikket på, klik, der ikke rammer noget, hvilke afsnit der var på skærmen, hvor langt ned og hvor længe siden blev læst, trinene i tilmeldingsformularen (for eksempel at feltet blev valgt, eller hvilken fejlmeddelelse der blev vist, men aldrig det, du skrev), hvordan sammenligningsskyderen og spørgsmålene blev brugt, scriptfejl og hvor hurtigt siden blev indlæst. Vores server tilføjer det styresystem, den browser og det sprog, som din browser alligevel sender med hver forespørgsel. Intet andet bliver læst fra din enhed (ingen skærmstørrelse, ingen skrifttyper, ingen indstillinger), og intet bliver gemt på den.

Sådan skelner vi mellem besøg: serveren danner en kode ud fra din forbindelse og din browser ved hjælp af en nøgle, der skifter hver dag og kun findes i serverens arbejdshukommelse. Koden gemmes sammen med den pågældende dags hændelser. Fordi nøglen slettes ved slutningen af hver dag, kan koden bagefter ikke spores tilbage til din forbindelse, og den bliver aldrig koblet til dine oplysninger på ventelisten. Din IP-adresse bliver ikke gemt. De enkelte hændelser slettes efter 30 dage. Derefter er der kun samlede tal pr. dag tilbage, uden nogen kode.

Hvis din browser sender »Do Not Track« eller »Global Privacy Control«, bliver intet af dette talt eller sendt. Retsgrundlag: databeskyttelsesforordningens art. 6, stk. 1, litra f (at vide, hvor mange der besøger siden, hvor de kommer fra og hvilke dele af siden der virker).

3. Tilmelding til ventelisten

Hvad vi gemmer: din mailadresse; hvornår du tilmeldte dig, og hvornår du bekræftede; din personlige invitationskode og, hvis du kom via en andens link, hvilken kode det var; hvordan du fandt os (kampagneparametre i linket, den henvisende hjemmeside som domæne, hvilken knap du brugte); det land, der udledes af din forbindelse, om du bruger telefon eller computer, dit browsersprog og hvor mange sekunder du brugte på siden, før du tilmeldte dig. Hvis du vælger det, også hvilken enhed du ville bruge Chail på. Vi gemmer ikke din IP-adresse eller dit navn.

Hvorfor: for at administrere ventelisten (bekræftelse, din plads i køen, invitationer), for at sende dig en mail, når det er din tur, og når Chail lanceres, og for i aggregeret form at se, hvilke kanaler der bringer folk til Chail.

Dobbelt opt-in: når du har indtastet din adresse, sender vi præcis én mail med en knap. Først når du trykker på den, er du på listen. Indtil da sender vi ikke andet.

Hvilke mails du får: bekræftelsen, en kort besked, hvis du tilmelder dig igen med samme adresse, højst én besked om dagen, når en ven tilmelder sig med dit link, og senere din invitation og nyheder om lanceringen af Chail. Vores mails indeholder ingen sporingspixels, og vi sporer ikke, hvilke links du klikker på.

Invitationer: når nogen tilmelder sig med dit link og bekræfter, rykker du frem på listen. Du ser kun, hvor mange der har tilmeldt sig via dig, aldrig hvem. Den person, du har inviteret, ser intet om dig.

Retsgrundlag: dit samtykke (databeskyttelsesforordningens art. 6, stk. 1, litra a, og § 7, stk. 2, nr. 2, i UWG) for mailene og listen; databeskyttelsesforordningens art. 6, stk. 1, litra f, for de aggregerede statistikker og for beskyttelsen mod misbrug.

4. Beskyttelse mod misbrug

For at forhindre automatiserede massetilmeldinger tæller serveren kortvarigt forespørgsler pr. netværksforbindelse i sin arbejdshukommelse. Intet af dette bliver gemt. Domæner til engangsmails bliver afvist, og vi tjekker, om domænet i din adresse overhovedet kan modtage mail (et opslag på domænet, ikke på din postkasse).

5. Hvem der ellers er involveret

IONOS SE runs our server in a data centre in Germany. Cloudflare, Inc. sits in front of our server as network and DDoS protection and receives emails sent to addresses at chail.app on our behalf. Our emails to you (for example confirmations and sign-in codes) are sent through Resend (Plus Five Five, Inc.) from a data centre in Ireland; if Resend is unavailable, through our mailbox at IONOS. Cloudflare and Resend work for us under data processing agreements that include the EU standard contractual clauses. Nobody else receives your data. We do not sell data and we do not show ads.

6. Hvor længe vi opbevarer data

Tilmeldinger, der aldrig bliver bekræftet, slettes efter 30 dage. Dine oplysninger på listen slettes, så snart du melder dig af listen, og senest 18 måneder efter din tilmelding. Hændelserne på siden fra afsnit 2 slettes efter 30 dage. Kopier i vores serverbackups overskrives inden for 30 dage. Optællinger uden nogen mailadresse (for eksempel »120 tilmeldinger fra Reddit«) kan blive opbevaret.

7. Dine rettigheder

Du kan anmode om indsigt i dine data, om berigtigelse, sletning og begrænsning af dem og om en kopi af dem, og du kan gøre indsigelse mod behandlingen. Du kan til enhver tid trække dit samtykke tilbage med ét klik: hver mail har et link »Meld dig af listen«, som straks sletter dine oplysninger på listen. Du kan også skrive til support@chail.app. Og du har ret til at klage til en tilsynsmyndighed for databeskyttelse.

8. The Chail app and your Chail account

Your emails stay on your device. The app connects your device directly to your email provider. Emails, contacts, attachments, notes and passwords never reach our server.

Your Chail account is your email address. Our server stores the address and any further addresses you connect, your plan and how long it runs, your devices (a code for each device, its system, app version and language, and when it was last used), and when you created the account. When you connect an address, we send one short note to it; the app finds this note in your mailbox and sends back only the code it contains, so we know the address is yours. Purpose: your plan on all your devices, signing in without a password, protection against misuse. Legal basis: Art. 6 (1)(b) GDPR. You can delete the account in the app at any time (Settings, Account); we then delete these data, except what we must keep by law (purchases, see section 10).

Gmail and your Google account. If you connect a Gmail address with “Continue with Google”, Google lets the Chail app on your device read, send, organise and delete your emails over IMAP and SMTP, and tells the app your email address. Chail uses this access only for what you see and do in the app: showing your emails as chats, searching them on your device, sending your messages, and archiving or deleting when you ask. Your emails and the access key stay on your device (the key is protected with the encryption of your Windows user account). Apart from the code in our own note (see above), nothing from your mailbox reaches our servers. Your emails are never sold, never used for advertising and never used to train AI models; they only leave your device when you send an email or when you connect another app to Chail yourself.

Chail’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can take back the access at any time: remove the address in Chail (Settings, Addresses), which also withdraws it at Google, or remove Chail in your Google Account under “Third-party apps and services”.

Outlook and your Microsoft account. With “Continue with Microsoft”, Microsoft lets the Chail app on your device read and send your emails over IMAP and SMTP in the same way, with the same rules: everything stays on your device. You can remove the address in Chail and withdraw the permission in your Microsoft account settings.

9. How the app is used

Unless you switch it off (Settings, Privacy, “Share how you use Chail”), the app tells our server which screens and buttons are used, the steps of setting up, that an email was sent (not to whom and not what), that a file was opened (only its type), errors, and when the window is in front. With it go a random code that exists only for this purpose and is never linked to your account or your addresses, the app version, system, language, plan, and the country derived from your connection. Never your emails, contacts, addresses, names, subjects, search words or file names. We store a hashed form of the code and no IP address, for 30 days. Purpose: to see what works and where people get stuck, so we can improve Chail. Legal basis: Art. 6 (1)(f) GDPR. You can switch it off at any time; the app then sends nothing more and deletes what is still waiting to be sent.

10. Buying a plan

Payments are handled by Stripe Payments Europe, Ltd. (Ireland). Stripe receives what you enter on its payment page (for example your email address, name, billing address and payment details) and processes it under its own privacy notice. We receive from Stripe your customer number, the plan, the amounts and dates of payments and refunds, and the payment status, never your full card or bank details. Purpose: to provide the plan you bought, invoices, refunds, cancellations and withdrawals. Legal basis: Art. 6 (1)(b) GDPR and, for keeping invoices and payment records (up to 10 years), Art. 6 (1)(c) GDPR together with German tax and commercial law.

Cancellation and withdrawal: when you use the pages “Cancel your plan” or “Withdraw from contract”, we store the address, the name you enter, the type of request and when it arrived, so we can carry it out and prove it. These records are deleted 90 days after they are completed, unless the law requires us to keep them longer.

11. Creating an account on the website

If you create your account on our website, we store your email address and send one email with a button to confirm it. Your account only exists once you confirm. We also note which button on our page led you there (for example “Download Chail”), without any link to your visits. Legal basis: Art. 6 (1)(b) GDPR.

Which button you see: to find out which button on our page helps people most, each visitor sees one of several buttons per day. Which one is derived from the daily code described in section 2. We only count how often each button was shown and clicked and what followed (download, account, purchase), without any code or address.

12. When you write to us

If you email one of our addresses (for example support@chail.app), we store your email, its attachments and our reply on our server so we can answer you and keep track of the conversation. Only the founders can read them, in a protected area with two-step sign-in. Legal basis: Art. 6 (1)(b) GDPR if it concerns your account or a contract, otherwise Art. 6 (1)(f) GDPR (answering requests). We delete these emails when the matter is settled, at the latest two years after the last message, unless the law requires us to keep them longer.