Effective date: October 1, 2026
Last updated: October 27, 2026
Version: 2.0
The short version
- We collect what we need to run ChuEok: Hosts' account details, the Messages Guests choose to send, and a little technical information to keep things secure.
- Messages go privately to the Host and the Co-Hosts they invite. Nothing on ChuEok is public or searchable.
- We don't sell your information, we don't show ads, we don't use third-party analytics or tracking, and we don't use your content to train AI.
- We never use face or voice recognition.
- Hosts can delete anything at any time, and anyone can ask us to remove a Message they appear in, without needing an account.
- If a Host's trial or subscription ends, their Albums are deleted about 30 days later, after two email warnings.
1. Who we are and what this policy covers
This Privacy Policy explains how BDLPE Studio LLC ("ChuEok", "we", "us", "our") collects, uses, shares, and protects personal information when you use the ChuEok website at mychueok.com, the ChuEok iOS app, and the guest recording pages (together, the "Service").
It is part of our Terms of Service, which define the words we use here: Host, Co-Host, Guest, Album, Event, and Message. It applies to everyone: Hosts and Co-Hosts, who have accounts, and Guests, who leave a Message without one. ChuEok records people, often people who never signed up for anything, so we've tried to be especially clear about what happens to a recording.
We are responsible for (the "controller" of) the personal information described in this policy. Hosts decide whom they invite and what they do with the Messages they receive, including any copies they download, which are outside our control.
2. What information do we collect?
2.1 Information you give us
If you are a Host or Co-Host:
| Information | Details |
|---|---|
| Account details | Your email address and display name. If you use Sign in with Apple, Apple gives us an identifier and an email address, which may be a private relay address. |
| Password and two-step verification | Your password is stored only as a secure hash by our sign-in provider; we never see it. If you turn on two-step verification, we store what's needed to check your codes. |
| Albums and Events | Titles, categories, themes, cover photos, the prompt you ask Guests, notes, thank-you messages, message-length settings, and opening and closing times. |
| Your own content | Intro videos or voice recordings, and any photos, notes, and recordings you add to your Albums. |
| Co-Host invitations | The email address of anyone you invite as a Co-Host. |
| Moderation | The Messages you hide, pin, delete, or report (including the reason and any details you write), and the Guests you block. |
| Notification settings | Your push and email preferences. |
| Support requests | Whatever you send us when you contact us. |
If you are a Guest:
| Information | Details |
|---|---|
| Your Message | The video, voice recording, photo, or written note you send. A video or photo shows your face and anything visible around you; a video or voice recording captures your voice and anything audible around you. This is the most sensitive information we hold, and we treat it that way. |
| Your name | Required, so the Host knows who the Message is from. |
| Your email address | Optional. It is stored with your Message and shown to the Host and Co-Hosts. We don't currently send anything to it, and we never use it for marketing. |
2.2 Information collected automatically
| Information | Details |
|---|---|
| Device identifier (Guests) | On the website, a random ID stored in your browser's local storage (guestbook_device_id). In the iOS app, Apple's identifier for vendor. We use it to group your Messages, enforce upload limits, and make a Host's block stick. It isn't used for advertising or to track you across other apps or websites. |
| IP address | Recorded when a Guest's upload is authorized, to stop abuse, and in our providers' standard request logs for everyone. When you send the support form, we keep a one-way code made from it (not the address itself) to stop spam. |
| Upload details | Media type, length, file size, and when it was sent. |
| Information inside your files | Photo and video files can carry details from the device that made them, such as when and where they were taken. The iOS app removes these details from photos before upload. Videos, and files you upload from your library on the website, can keep them, and they stay in any copy the Host downloads. |
| Push token (iOS) | If you allow notifications, the token Apple gives us to deliver them to your device. |
| Session data | A sign-in cookie in your browser, or a token in your iPhone's Keychain, to keep you signed in. |
| Server logs | Our hosting providers automatically record requests to the Service, including IP address, browser or device type, the page requested, and the time, for security and troubleshooting. |
| Crash reports (iOS) | If the iOS app crashes or freezes, a report of what went wrong: the app version, the device model and operating system, and which screens were open. It doesn't include your name, email address, IP address, device name, or anything you recorded or wrote, and it isn't linked to your account. |
2.3 Information from others
- Apple, when you use Sign in with Apple (an identifier and email address), and when you buy a subscription (which plan, whether it is active, and its renewal and expiry dates, which reach us through RevenueCat, see §5). We never receive your card details.
- Hosts and Co-Hosts, who may give us someone's email address to invite them as a Co-Host, or report a Message.
- People who contact us, for example someone asking us to remove a Message they appear in.
2.4 What we don't collect
- No advertising or analytics software, no cross-site or cross-app tracking, and no advertising identifiers.
- We don't ask for your location, contacts, or health information.
- No face recognition, voice recognition, or other biometric identification. We never analyze a recording to identify who is in it, and we never create a faceprint or voiceprint.
- The statistics a Host sees, such as message counts and total minutes, are calculated only from that Host's own Albums.
3. How do we use your information?
We use information to:
- Provide the Service: create and secure accounts, deliver Messages to the Host and Co-Hosts, let them play and download Messages, convert videos into a format every device can play, make thumbnails, and show Hosts their Albums.
- Send notifications: push alerts and email digests when new Messages arrive (Hosts can turn these off), and service emails such as password resets, security notices, and the notices we send before deleting content.
- Manage plans: know whether a Host's trial or subscription is active, and what their account can do.
- Keep ChuEok safe: enforce upload and rate limits, let Hosts block Guests, investigate reports, prevent spam, fraud, and abuse, and enforce our Terms and Acceptable Use Policy. This can include our staff reviewing a Message that has been reported to us, and automated tools, such as matching files against databases of known child sexual abuse material.
- Help you: answer support requests and handle privacy, removal, and legal requests.
- Fix and improve the Service: troubleshoot errors and check how the Service is performing, using our own server logs and crash reports from the iOS app (see §5.1). We don't use third-party analytics.
- Comply with the law: including reporting child sexual exploitation to the National Center for Missing & Exploited Children (NCMEC), responding to valid legal requests, and keeping records the law requires.
We don't use your information for advertising, sell it, build profiles about you, make automated decisions about you that have legal or similarly significant effects, or use your content to train AI models.
Sensitive details. A photo, video, or voice recording can reveal sensitive things without anyone meaning it to, such as someone's religion at a religious ceremony, or a health condition. We don't analyze Messages to infer anything like this. We process Messages only to deliver them as the sender chose and to keep the Service safe.
3.1 Legal bases (EEA, UK, and Switzerland)
If you are in the European Economic Area, the UK, or Switzerland, we rely on these legal bases under the GDPR (and its UK and Swiss equivalents):
| What we do | Legal basis |
|---|---|
| Providing the Service: accounts, delivering Messages, playback, downloads, plans | Performance of our contract with you (Art. 6(1)(b)). For Guests, that contract is the Terms you accept when you send a Message. |
| Push notifications | Your consent, given in your device's settings, which you can withdraw at any time (Art. 6(1)(a)) |
| Service emails, including deletion notices | Performance of our contract with you (Art. 6(1)(b)) |
| Safety, security, rate limits, blocking, and reviewing reports | Our legitimate interest, and our users' interest, in keeping ChuEok safe and free of abuse (Art. 6(1)(f)) |
| Fixing and improving the Service | Our legitimate interest in a Service that works (Art. 6(1)(f)) |
| Legal compliance, including reports to authorities | Legal obligation (Art. 6(1)(c)), and legitimate interests (Art. 6(1)(f)) |
4. Who can see a Message?
- The Host who owns the Event, and the Co-Hosts they've invited. They see the Message along with the Guest's name, the Guest's email address (if given), and any note.
- Not other Guests. A Guest sees only the Event's title, its prompt, the Host's intro, and how many Messages have been left.
- Us, only when needed to run, secure, or support the Service: for example, to investigate a report, act on a removal request, or comply with the law.
- Our service providers (§5), only to do their jobs for us.
- Anyone the Host chooses to share it with. Hosts can download Messages, and what happens to a downloaded copy is up to the Host.
Nothing on ChuEok is public or searchable. But please be aware of three things:
- Guest Links are random and hard to guess, but they aren't passwords. Anyone who has an Event's link can open its guest page, see its title, prompt, and Host intro, and leave a Message.
- Host intros can be played by anyone who has the Guest Link. The link to the intro file itself stops working after a few hours.
- Video playback links are long, random links, and anyone who has one can play that video, so don't post them publicly. Links to photos and voice recordings stop working after an hour.
5. How do we share information?
We don't sell your personal information, and we don't share it for targeted advertising. We share it only in the ways below.
5.1 Service providers
These companies run parts of ChuEok for us. Each receives only what it needs, and may use it only to provide its service to us.
| Provider | What it does for us | What it handles |
|---|---|---|
| Supabase | Database, sign-in, and file storage, hosted in the United States | Account and Album data, Messages and their files, IP addresses, and device identifiers |
| Cloudflare | Video processing and streaming (Cloudflare Stream) | Video Messages and their thumbnails |
| Vercel | Hosts our website and runs our scheduled jobs | Website requests, including IP addresses |
| Resend | Sends our emails | Host email addresses, and the content of our emails, which can include Event titles and Guest names |
| RevenueCat | Keeps track of App Store subscriptions for us | Your account ID (a random identifier) and your subscription and purchase history, never card details |
| Apple | Sign in with Apple, push notifications, and App Store payments | Sign-in identifier and email address, push tokens and notification content, and purchases |
| Sentry | Crash reporting for the iOS app | Crash reports: the app version, device model and operating system, and which screens were open. No name, email address, IP address, or content |
We also use an email provider to receive and answer messages sent to our support address. If we start selling subscriptions on the website, a payment processor will handle those payments, and we'll update this policy before we do.
5.2 Legal requests, safety, and child protection
We may preserve and share information if we believe in good faith that it's needed to comply with the law, a valid legal process, or a government request; to protect anyone from death or serious harm; to detect, prevent, or address fraud, abuse, or security problems, or violations of our Terms; or to protect the rights, property, and safety of ChuEok, our users, or the public.
We report apparent child sexual exploitation to NCMEC, as U.S. law requires, and NCMEC may share those reports with law enforcement around the world.
5.3 Business transfers
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, and this policy will continue to apply to it.
5.4 When you direct us
For example, when a Host invites a Co-Host, the Co-Host can see that Event's Messages.
6. How long do we keep information?
We keep personal information only for as long as we need it.
| Information | How long we keep it |
|---|---|
| Host account (email, name, settings) | Until you delete your account. If the email address of a new account isn't confirmed within 7 days of signing up, we delete the account and everything in it, after one reminder email. |
| Albums, Events, and Messages | Until the Host deletes them or deletes their account. If a Host's trial or subscription ends, their Albums are deleted about 30 days later, after two email notices (see §8.6 of the Terms). A Host can delete a single Message at any time. |
| A Guest's name, email, note, device identifier, and the IP address recorded with an upload | As long as the Event they belong to. |
| Reports | Until the reported Message is deleted. |
| Subscription status | As long as your account exists. Apple and RevenueCat keep their own records of purchases, as their policies and the law require. |
| Push tokens | Until they stop working, or you delete your account. |
| Support emails | Up to 2 years after your request is resolved, unless we need them longer for a legal reason. |
| The support form's spam check (a one-way code made from your IP address) | One day. |
| Server logs at our providers | Short periods set by those providers, typically days to a few weeks. |
| Crash reports | Up to 90 days, at Sentry. |
| Backups | Deleted information can remain in encrypted backups for up to 90 days, until it is overwritten. |
| Information we must preserve | As long as the law requires. For example, material reported to NCMEC is preserved for at least one year. |
What deleting removes. When a Host deletes a Message, we delete its stored file, its streaming copy at Cloudflare, and its database record. Deleting an Event, an Album, or an account deletes every Message in it, together with the Host's intro, in the same way. There are two narrow exceptions. If Cloudflare fails to delete a streaming copy, we log the failure and remove the copy by hand. And if a Guest started an upload just before an Event was deleted, the file can arrive afterwards; it is stored privately, connected to nothing, and we remove it.
7. Your rights and choices
7.1 Things you can do yourself
- Hosts can change their display name and notification settings, turn on two-step verification, download their Albums, and delete Messages, Events, and Albums at any time. You can delete your account in Settings, in the iOS app or on the website.
- Notifications: turn push notifications off in your device's settings, and email digests off for one Event or for your whole account. We still send essential service emails, such as password resets and deletion notices.
- Guests can ask the Host to delete their Message. Hosts can do it in a few taps.
7.2 Removing a Message you're in
You don't need an account. Email support@mychueok.com with the Event's name or link and the name on the Message, and we'll remove it. We don't ask you to justify the request. If the Message is an intimate image shared without your consent, we remove it within 48 hours (see §8 of the Acceptable Use Policy).
7.3 Your privacy rights
Depending on where you live, you may have the right to:
- know and access the personal information we hold about you, and get a copy in a portable format;
- correct it;
- delete it;
- object to or restrict how we use it;
- withdraw consent you've given, at any time;
- opt out of the sale or sharing of your information, targeted advertising, and profiling (we don't do any of these, so there is nothing to opt out of);
- appeal if we decline your request; and
- not be discriminated against for using any of these rights.
We extend these rights to everyone, wherever you live.
How to make a request. Email support@mychueok.com with the subject line "Privacy request". If you're a Guest, include the Event's name or link, the name on your Message, and roughly when you sent it. We'll confirm the request is really yours before acting on it: for a Host, by replying from your account's email address; for a Guest, from the details of the Message. You may use an authorized agent, who must show us your written permission.
We'll respond within 45 days, or within one month if you are in the EEA, the UK, or Switzerland. If we need more time and the law allows it, we'll tell you why.
Appeals. If we decline your request, you can appeal by replying with the subject line "Appeal". We'll respond within 60 days. If you're still not satisfied, you can contact your state attorney general (in Texas, the Office of the Attorney General at texasattorneygeneral.gov (opens in a new tab)) or, in the EEA, the UK, or Switzerland, your data protection authority.
7.4 U.S. state privacy disclosures
Several U.S. states, including California and Texas, require us to describe our practices using categories set out in their laws. In the past 12 months:
| Category | Examples | Disclosed for a business purpose to |
|---|---|---|
| Identifiers | Name, email address, account ID, IP address, device identifier | Service providers (§5.1) |
| Customer records | Name and email address | Service providers |
| Commercial information | Subscription plan and purchase history | RevenueCat, Apple |
| Internet or network activity | Server logs of requests to the Service, and iOS crash reports | Service providers |
| Audio, electronic, and visual information | Videos, voice recordings, and photos | Supabase, Cloudflare |
| Sensitive personal information | Account sign-in details (email address and password), used only to sign you in | Supabase |
We collect these categories from you, your device, Apple, and Hosts and Co-Hosts, for the purposes in §3, and keep them for the periods in §6. We have not sold or shared personal information, including sensitive personal information, and we don't knowingly sell or share the information of anyone under 16. We don't use sensitive personal information to infer characteristics about you. We honor Global Privacy Control signals, although, because we don't sell or share personal information, they don't change anything. We don't disclose personal information to third parties for their own direct marketing.
7.5 EEA, UK, and Switzerland
You also have the right to lodge a complaint with your local data protection authority. In the UK, that is the Information Commissioner's Office. We'd appreciate the chance to help first, so please contact us.
8. How do we protect information?
- All traffic to and from ChuEok is encrypted (HTTPS/TLS).
- Messages are kept in private storage. Every Guest upload must first be authorized by our server, which decides where the file goes and enforces size, format, and volume limits.
- Database access rules mean each person can reach only the Albums and Messages they're entitled to, and every Guest submission goes through our server.
- Passwords are stored only as secure hashes, and Hosts can turn on two-step verification.
- Links to photos and voice recordings are issued on demand and expire after an hour.
- Only people who need access to run the Service have it.
No system is perfectly secure, and we can't guarantee absolute security. If a breach affects your personal information, we'll notify you and the authorities as the law requires.
9. Cookies and similar technologies
We use very little:
- Sign-in cookies, so Hosts stay signed in on the website.
- Local storage on the guest page, to hold the device identifier described in §2.2.
We don't use advertising cookies, analytics cookies, or third-party trackers. Because everything we use is strictly necessary for the Service to work, we don't show a cookie banner. You can block cookies and local storage in your browser, but signing in and sending Messages may then stop working.
10. Children
ChuEok isn't directed at children.
- Hosts and Co-Hosts must be 18 or older.
- Guests must be 13 or older, and Guests under 18 need a parent's or guardian's permission.
- Children under 13 may not use ChuEok themselves or give us their information. A parent or guardian may send a Message that includes their own child. Hosts must have a parent's or guardian's permission before collecting any Message that features a child.
We don't knowingly collect personal information from children under 13. If we learn we have, we'll delete it. If you're a parent or guardian and want a Message that features your child removed, email support@mychueok.com and we'll remove it.
Nudity of children is never allowed on ChuEok, including innocent family photos. See §2 of the Acceptable Use Policy.
11. International transfers
We are based in the United States, and our database and files are stored in the United States. Cloudflare's global network may temporarily cache videos near the people watching them. If you use ChuEok from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where our providers operate.
For information from the EEA, the UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (with the UK and Swiss addenda), or on our providers' certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions, to protect it.
12. Changes to this policy
We'll update this policy when our practices change, and we'll change the "Last updated" date above. If a change is material, we'll tell Hosts by email or in the app before it takes effect.
13. Contact us
If you have questions about this policy or your information, contact us:
- BDLPE Studio LLC
- Email: support@mychueok.com (subject line "Privacy")