Legal

Privacy policy

Last updated: [date]

Draft. This text is a starting point and must be reviewed by a lawyer before launch. Items in [brackets] need to be filled in.

This policy explains what personal information ChuckleText collects, why, who we share it with and the choices you have. We collect only what we need to send you great jokes and run the service.

1. Who is responsible for your information

Example ApS, Example Street 1, 1000 Copenhagen, Denmark, registration number 12345678 ("ChuckleText", "we", "us") is the data controller for the personal information described in this policy. Contact us about privacy at [email protected].

2. What this policy covers

This policy applies to chuckletext.com, your ChuckleText account and the text messages we send and receive.

3. What we collect, why and our legal basis

InformationWhy we use itLegal basis
Name and email addressTo create your account, send login links, receipts, trial reminders and service emails, and provide supportContract
Mobile numberTo send your jokes and handle your repliesContract
Text message consent records (time, wording you agreed to, page, IP address and browser)To document that you agreed to receive texts, as mobile carriers and US law requireLegal obligation and legitimate interest
Joke profiles: a nickname, age group, favorite topics, topics to avoid, days, times and time zoneTo choose and schedule your jokes. We don't ask for children's names.Contract
Messages and delivery data: your replies (such as YES, 1, 2, STOP, HELP), ratings and delivery statusTo deliver the service, personalize your jokes, honor opt-outs and prevent misuseContract and legitimate interest
Subscription and payment information: plan, status, billing history and the last four digits of your cardTo manage your subscription and keep accounting records. Your full card details are handled by our payment provider, never by us.Contract and legal obligation
Support conversationsTo answer your questions and handle complaintsContract and legitimate interest
Technical data: IP address, browser and device information, and logsTo keep the service secure, fix problems and prevent fraudLegitimate interest
Marketing data: how you found us (for example ad and campaign parameters) and, if you accept marketing cookies, ad cookies and a scrambled (hashed) version of your email and phone number shared with MetaTo measure and improve our advertisingConsent
Newsletter preferencesTo send occasional news and tips, if you opted inConsent

4. How we personalize your jokes

We pick jokes based on the age groups and topics you choose, how you rate jokes, and anonymous patterns in how other subscribers rate them. For example, if people who liked the same jokes as you also liked another joke, we may send it to you. Other subscribers never see your ratings or details. This personalization only affects which jokes you receive and has no legal or similarly significant effect on you.

5. AI

We use AI services to write, review and compare jokes. These services receive joke topics and age groups, not your name, email or phone number. Our providers process this information on our behalf under data processing agreements [and under terms that don't allow them to use it to train their models; confirm with each provider].

6. Children

ChuckleText is for adults aged 18 and over, and jokes are sent only to the account holder's phone. Joke profiles describe the people you share jokes with by nickname and age group only. Please don't enter a child's full name or other details about them. If you believe we hold information about a child, contact us and we'll delete it.

7. Who we share information with

We don't sell your personal information or share it for cross-context behavioral advertising, except as described for marketing cookies, which require your consent. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are never shared with third parties.

We share information only with service providers that help us run ChuckleText and that process it on our instructions under data processing agreements:

  • Hosting and infrastructure: [Laravel Cloud and its cloud providers]
  • Payments and subscriptions: [Stripe], which may act as merchant of record and in that role processes payment data as an independent controller under its own privacy policy
  • Text messaging: [Twilio]
  • Email delivery: [Postmark, Amazon SES]
  • AI services: [Anthropic, Voyage AI]
  • Error monitoring: [Sentry]
  • Advertising measurement, only with your consent: [Meta Platforms]

We may also share information if required by law, to protect our rights or the safety of others, or as part of a merger or sale of our business, in which case this policy will continue to apply.

8. International transfers

Some of our providers are based in, or access data from, the United States and other countries outside the EU and EEA. When we transfer personal information there, we rely on safeguards such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

9. How long we keep information

InformationHow long
Account, profiles and joke historyWhile your account exists, including after your subscription ends so you can restart. Deleted when you delete your account, or after [24] months of inactivity following the end of your subscription.
Text message consent and opt-out records[5] years after your last text, to document consent and opt-outs
Billing and accounting records5 years from the end of the financial year, as required by Danish bookkeeping law
Support conversations[2] years after the conversation ends
Technical logs[30] days, unless needed to investigate misuse
Marketing consent and unsubscribesUntil you withdraw consent, plus the time needed to document it
CookiesAs described in our Cookie policy

When you delete your account, we delete or anonymize your information, except what we must keep by law. Anonymized delivery and rating data may be kept to improve our jokes, but it can no longer be linked to you.

10. Your rights

Depending on where you live, you may have the right to:

  • access the personal information we hold about you and get a copy;
  • have incorrect information corrected;
  • have your information deleted;
  • receive your information in a portable format;
  • object to or restrict certain processing, including processing based on legitimate interest;
  • withdraw consent at any time, without affecting processing that happened before;
  • not be discriminated against for using your rights.

You can download your data and delete your account in your account settings, or email [email protected]. We'll answer within one month. If you live in a US state with a privacy law, such as California, these rights apply to you as described in that law, and you can use an authorized agent.

11. Security

We protect your information with technical and organizational measures, including encryption in transit, restricted access for staff who need it, two-factor login for our administrators and regular backups. No system is perfectly secure, but we work to keep your information safe and will notify you and the authorities of a breach when required.

12. Complaints

If you're unhappy with how we handle your information, please contact us first. You can also complain to Datatilsynet, the Danish Data Protection Agency (datatilsynet.dk), or the data protection authority where you live.

13. Changes to this policy

We may update this policy. If we make significant changes, we'll tell you by email or in your account before they apply. The date at the top shows the latest version.

14. Contact

Example ApS, Example Street 1, 1000 Copenhagen, Denmark, 12345678. Email: [email protected].