Privacy Policy

Last updated: October 14, 2026

Chito ("छिटो") is operated by Chito Labs, Kathmandu, Nepal. This policy covers the Chito app (iOS and Android) and the website chito.app.

Using Chito without giving us anything personal

Chito works without an account. Without one we hold a random install ID created by the app, your settings, the questions you ask, and usage statistics tied to that install ID.

Information we collect

Install ID and push token. A random ID the app creates, and — if you allow notifications — the push token your phone gives us, so we can send the alerts you asked for. The install ID is sent with every request the app makes to our servers, so that answers, alerts and what you follow can be matched to that install; this happens even when usage statistics are switched off.
Settings. Language, interests, your district, wake-up time, your rashi (zodiac sign), the notices, prices and stocks you follow, and what you tell Chito about yourself so it can show what applies to you — for example that you are a student (and at what level), preparing for Lok Sewa (and in which province), looking for work, or living abroad (and in which country), or that family lives abroad.
Location. If you tap "find my location", your phone works out the nearest district on the device. Only the district is saved; your coordinates never leave the phone.
Questions. What you type or say to Chito, so we can answer and improve answers. Spoken questions are turned into text by Microsoft Azure Speech; the audio is not kept.
Your shares. What you enter in मेरो पोर्टफोलियो (companies, units, cost) stays on your phone and is never sent to us.
Document photos. Photos you attach in मेरो कागजात stay on your phone. If you tap "Read the expiry from the photo", that photo is sent once to read the date and is not stored by us. We never ask for or keep document numbers.
Letters and notices. If you tap "Explain a letter" (पत्र बुझाइदिनुहोस्), the photo is sent once to Microsoft Azure AI to read it and is not stored by us. The text read from it is kept only in that conversation on your phone, with identity and account numbers hidden, and is sent again only when you ask a follow-up question; we do not store it. Follow-up questions are handled like other questions.
Account (optional). If you sign in with Google or Apple, we receive your name and email address (and, from Google, your profile picture), and keep your saved items, follows and alerts with your account. With Apple you can choose "Hide My Email"; we then only see an address Apple forwards for you. For Apple sign-in we also keep a token Apple issues to us, used for one thing: telling Apple to end Chito's access when you delete your account.
Usage statistics. Which screens you open, which items were shown and which you tapped, how long answers took, and errors — tied to your install ID (and your account if you are signed in), with your app version, phone type (iOS or Android), OS version and language. This is sent to our own servers so we can see what works and fix what does not. It never includes the text of your questions, searches, letters or reminders, anything from मेरो कागजात, your rashi, your location beyond the district, or your shares. You can turn usage statistics off in the app's settings; the install ID is still sent with requests, as described above.
Technical logs. Our servers log each request (time, which feature, whether it worked, how long it took, install ID, app version) to keep the service running and secure.
Crash reports. Firebase Crashlytics receives crash and error reports (device model, OS version, app version, install ID).
Website. chito.app uses Google Analytics to count visits and pages viewed. Questions asked on the website are tied to a random browser ID kept in a cookie, used only to count the day's free questions.

We do not show ads, do not collect your advertising ID, do not track you across other apps or websites, and do not sell or share your data for advertising.

How we use it

To answer your questions and show what you follow, in your language
To send the notifications you turned on
To understand which features help people and improve them
To find and fix errors, and keep the service secure

Service providers

Supabase (database and sign-in), Google (Sign in with Google), Apple (Sign in with Apple), Google Firebase (push notifications and crash reports), Google Analytics (website visits), Microsoft Azure (AI answers, speech to text, reading a document date or a letter you photograph, spoken answers), and ElevenLabs (spoken answers, when Azure cannot). They process data on our behalf. Azure may keep AI requests for up to 30 days for abuse monitoring.

Retention

Account data until you delete the account. Questions and usage statistics up to 12 months. Server request logs up to 90 days. Crash data per Firebase defaults (90 days).

Your rights

You can ask for a copy of the account data we hold about you, or ask us to correct it, by emailing hello@chito.app from the address you signed in with. We reply within 30 days. You can turn notifications and usage statistics off in the app at any time.

Deleting your data

In the app, if you are signed in: मेरो → सेटिङ → खाता मेटाउनुहोस् (Me → Settings → Delete account). This deletes your account and the data linked to it, and if you signed in with Apple, ends Chito's access to your Apple ID. Without an account, uninstalling removes everything stored on the phone; to remove server-side data for an install ID, see chito.app/data-deletion or email hello@chito.app.

Children

Chito is not directed at children under 13. We do not knowingly collect personal information from children.

Changes

We will post changes here with a new date.

Contact

Questions about this policy: hello@chito.app.

← Back to Chito