Privacy policy
Tchoc app, published by APPLI MAGINE · Last updated: 7 August 2026
This English text is provided for convenience. Tchoc is published from France and the French version is the only binding one. Where the two differ, the French version prevails.
Tchoc is a party game app that runs almost entirely on your phone. We do not sell, rent or trade any data. We build no advertising profile and we do not follow you from one app to another. The only information that leaves your device is anonymised usage measurement and, for a single mini-game, photos you choose yourself, which are erased from our servers in under an hour.
1. Who is responsible for your data
The Tchoc app is published by APPLI MAGINE, acting as data controller under the General Data Protection Regulation (GDPR).
- Publisher: APPLI MAGINE, a French simplified joint-stock company (SAS)
- Registered office: 5 Jardin Jean de Ockeghem, 37000 Tours, France
- Registration: SIREN 948 141 593, SIRET 948 141 593 00012, Tours Trade Register
- Data protection contact: contact@tchoc.app
APPLI MAGINE is not required to appoint a Data Protection Officer: it carries out neither regular and systematic monitoring on a large scale, nor large-scale processing of sensitive data. The address above is therefore the single point of contact for any data protection question.
2. Scope
This policy covers the Tchoc mobile app on iOS and Android, and all of its mini-games. It does not cover third-party services such as the App Store and Google Play, which have their own policies.
3. Our commitments
- We do not sell or transfer any data to third parties for commercial purposes.
- We show no targeted advertising and use no advertising identifier.
- We do not track your activity outside Tchoc.
- We keep no personal data on a lasting basis. The little personal data we do process is handled temporarily, for the duration of a game, then deleted automatically.
- We apply data minimisation: anything the game does not need is not collected.
4. The data you enter
Player first names or nicknames, team composition, language, chosen theme, sound settings and the last game played are stored only in your device's local storage. They are never sent to our servers and they disappear when you uninstall the app.
One exception: in the mini-game "Whose Photo Is This?", the nickname you pick is sent to our servers so it can be shown to the other players in the same game. It is deleted along with the session (see section 6).
5. Anonymised usage measurement
To understand which games people enjoy and to improve the app, we record anonymised technical events, attached to a random technical identifier generated by the app that cannot be linked to an identified or identifiable person.
These events cover only:
- app launches and the length of a play session;
- the game selected, the theme chosen, and the start and end of a round;
- the number of cards played and aggregate play time;
- aggregate loyalty indicators such as return frequency and retention;
- how you found the app, when you tell us.
Never attached to this measurement: your name, player first names, an email address, a phone number, a location, the content of your games, or any photo. The data is used in aggregate, statistical form and cannot be used to re-identify you.
6. The "Whose Photo Is This?" mini-game
Your photos are erased from our servers in under an hour
This is the only mini-game in the app that handles photos. Here is exactly what happens:
- Photo library access: the app asks for your explicit permission through the system dialog. You can refuse it, limit it to a selection of photos, or revoke it at any time in your phone settings. No photo is read without that permission.
- What is sent: only the photos you confirm for the current game. No other image in your library is transmitted, read or scanned for analysis.
- Why: the sole purpose is to display those photos to the other players in the same game, identified by a session code shared between you.
- Who can see them: only participants who joined the game with that code. The photos are not public, not indexed and not accessible to any third party.
- How long: photos are fully and permanently deleted from our servers within one hour at most, by an automated process. The deletion is irreversible: we keep no backup, no copy and no archive, and there is no way to recover them, including for us.
- What we never do with them: no image analysis, no facial recognition, no detection of people or places, no indexing, no advertising use, and no artificial intelligence model training.
Game session metadata (game code, nicknames, scores) is deleted with the game, when it ends or expires.
7. Permissions requested by the app
| Permission | Why | Required? |
|---|---|---|
| Photo library | Pick photos for the "Whose Photo Is This?" mini-game | No, only for that game |
| Motion sensors (accelerometer, gyroscope) | Detect phone tilt in the forehead game and the music games | No, only for those games |
| Vibration (haptic feedback) | Signal a validated card or the end of the timer | No |
| Network | Multiplayer mode of the photo game and sending anonymised measurement | Not needed for offline games |
All of these permissions can be revoked at any time from your system settings (iOS: Settings › Tchoc; Android: Settings › Apps › Tchoc › Permissions).
8. What we never collect
Tchoc never accesses, under any circumstances:
- your contacts or address book;
- your location;
- your live microphone or camera;
- your browsing history or your other apps;
- your advertising identifier (IDFA, AAID);
- health, banking or identity data.
9. User accounts
Tchoc offers no user account creation. You play without signing up, without an email address and without a password. Only APPLI MAGINE administrators hold an account, used solely to consult aggregate statistics. No feature of the app lets a user create one.
10. Legal bases for processing
| Processing | Legal basis (GDPR art. 6) |
|---|---|
| Running the games and multiplayer sessions | Performance of the requested service (art. 6.1.b) |
| Photo library access | Explicit, revocable consent (art. 6.1.a) |
| Anonymised usage measurement | Legitimate interest in improving the app (art. 6.1.f) |
| Technical logs and bug fixing | Legitimate interest in service stability (art. 6.1.f) |
Where we rely on legitimate interest, that interest is knowing how the app is actually used, so we can fix its flaws and guide its development. We have balanced it against your rights: anonymised measurement, the absence of advertising and the absence of any cross-referencing with other sources keep the impact on your privacy minimal.
Data is optional
No data is required by law or by contract. Player first names are optional and serve only to display scores. Photo library access is optional: refusing it only prevents you from playing "Whose Photo Is This?", and every other game stays available.
No automated decision-making
Tchoc performs no automated decision-making and no profiling within the meaning of GDPR article 22. No decision producing legal effects or similarly significantly affecting you is taken on the basis of automated processing.
11. Technical processors
We deliberately rely on a small number of providers, acting as processors:
| Provider | Role |
|---|---|
| Google Firebase (Google Ireland Ltd, Google LLC) | Hosting game sessions, temporary photo storage, recording anonymised measurement |
| Apple App Store, Google Play | App distribution and the platforms' own download statistics |
None of these providers is allowed to use your data for its own commercial purposes. We use no ad network, no embedded social network and no behavioural tracking tool.
12. Transfers outside the European Union
Our game servers are hosted in the European Union. Some technical processing performed by Google may nonetheless involve a transfer to the United States. Such transfers are covered by the European Commission's standard contractual clauses and by the EU-US Data Privacy Framework. A copy of these safeguards is available on request at contact@tchoc.app.
13. Trackers and information stored on your device
Tchoc uses no advertising cookie, no advertising identifier and no third-party tracker. The only information written to or read from your device is:
- your settings and the player first names, strictly necessary for the app to work, and therefore exempt from consent;
- a random technical identifier, specific to the installation, used only for the audience measurement described in section 5.
That audience measurement is carried out for our own account alone, with no cross-referencing against other processing, no transmission to third parties and no tracking across apps. It therefore falls under the consent exemption granted by the French data protection authority (CNIL) for audience measurement tools (article 82 of the French Data Protection Act). You retain a right to object, which you can exercise by writing to contact@tchoc.app. Uninstalling the app permanently removes this identifier from your device.
14. Retention periods
| Data | Retention |
|---|---|
| Photos from the photo mini-game | 1 hour maximum, then permanent and irreversible deletion |
| Multiplayer session (code, nicknames, scores) | Deleted when the game ends or expires |
| Anonymised usage measurement | 25 months maximum, in aggregate form |
| Technical logs | 12 months maximum |
| Settings and first names entered | On your device only, until uninstall |
| Support correspondence | 3 years from the last contact |
15. Security
- All traffic between the app and our servers is encrypted (HTTPS, TLS).
- Photos are stored encrypted at rest for their short lifetime.
- Session access is restricted by server-side rules: only the participants in a game can reach its content.
- Photo deletion is automated and scheduled, with no human intervention.
- Administrator access to aggregate statistics is named and protected.
No system is infallible: we apply measures consistent with the state of the art, without being able to guarantee absolute security.
16. Your rights
Under the GDPR you have rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time.
In practice, in Tchoc:
- Erase your local data: uninstall the app, or use the reset settings function. Everything is then removed from your device.
- Erase your photos: nothing to do, they disappear from our servers automatically in under an hour.
- Withdraw photo consent: revoke photo library access in your phone settings.
- Usage measurement: because this data is anonymised, it cannot be re-identified. We are therefore materially unable to link it to a person, to extract it individually or to return it (GDPR, art. 11).
For any request, write to contact@tchoc.app. We reply within one month at most.
17. Minors
Tchoc is intended for teenage and adult players. Some mini-games contain adult content, grouped in a dedicated category and flagged as such.
We do not knowingly collect data about children. If you hold parental authority and believe data about your child has reached us, a photo for instance, write to contact@tchoc.app and we will delete it. Note that photos are erased automatically in under an hour in any case.
18. Changes to this policy
This policy may change along with the app. The last update date appears at the top of the page. For any substantial change, such as a new category of data, a new purpose or a new provider, we will inform you through an in-app notification before it takes effect.
19. Contact and complaints
For any question about this policy or about how your data is handled: contact@tchoc.app.
If our answer does not satisfy you, you may lodge a complaint with the French data protection authority, Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.
See also our terms of use.