CoreChoice — Privacy Policy

• There is no account. No name, no email address, no password, no sign-in of any kind.
• Your personality test answers and your profile never leave your phone, except as the five trait scores described below, and only if you choose to take the test.
• The question you ask is never stored on our servers. It is used to produce your answer and then it is gone.
• Your questions and answers are kept on your phone, for as long as you keep the app, so you can look back on them.
• There are no ads, no analytics, no tracking and no crash reporting of any kind.

CoreChoice is made by Andrzej Lech (Lech Digital), Schiedam, the Netherlands. For any question about this policy or your data, write to andrzej@lechdigital.nl.

When you first open CoreChoice, the app generates a random identifier — a string of digits and letters with no meaning outside the app. It is stored in your device’s secure storage and is used only to keep track of how many analyses you have left.

It is not linked to your name, your email address, your Google account or your phone number, because the app never asks for any of them. Uninstalling CoreChoice removes it.

These are stored in a database on the device itself and are not transmitted anywhere:

• your answers to the fifty personality questions, saved as you go so an interrupted test resumes where you left off;
• your scored personality profile;
• your decision history — every question you have asked and the full answer you received, kept indefinitely so you can look back on it later;
• your appearance preference (colour theme and light or dark mode).

Uninstalling the app deletes all of it.

Asking for an analysis sends the following to our server:

• your random identifier;
• the two options you are weighing, and the optional context you wrote;
• which advisor you chose, and how much weight you gave the decision;
• your five personality trait scores — only if you have taken the test. If you have not, nothing about your personality is sent, and the advice you receive is general.

Taking the personality test is optional and is never required to use the app.

Kept:

• your remaining analysis balance, against your random identifier;
• an irreversible salted hash of your IP address, used once to stop the same connection claiming free analyses repeatedly. The address itself is never written down, and the hash cannot be turned back into it;
• a usage record for each analysis: a hashed identifier, the advisor chosen, the weight, whether the answer was personalised, how many tokens it cost, whether it succeeded, and when. This is how the running cost of the service is tracked.

Never written to our database:

• the options and context you typed;
• your personality trait scores;
• your answers to the personality test.

These are held in memory only for as long as it takes to produce your answer, and are then discarded.

To produce an analysis, your question and — if you have taken the test — your trait scores are sent to Google’s Gemini API, which generates the response. Google processes this under its own terms and privacy policy. No other third party receives anything.

The server runs on a virtual machine hosted by Hetzner Online GmbH in Nuremberg, Germany.

You can dictate a dilemma instead of typing it. Permission is requested the moment you tap the speak control, never when the app starts, and refusing it simply hides that control.

The recognition is performed by Android’s own speech service on your device. CoreChoice does not record, store or transmit audio — it receives only the text that service returns.

Additional analyses can be bought through Google Play. Google handles the entire transaction; CoreChoice never sees your card, your bank details or your billing address. We learn only that a purchase succeeded, so the analyses can be added to your balance.

Uninstalling CoreChoice removes everything held on your phone, including your test answers, your profile and your whole decision history, and removes the random identifier with it. You can also delete any single past decision from within the app, at any time.

What remains on the server afterwards is a balance and a usage record tied to that random identifier, with no way to connect it to you as a person. If you would like those removed as well, write to andrzej@lechdigital.nl and we will delete them.

CoreChoice is intended for adults and is not directed at children.

If this policy changes, the date at the top of this page changes with it. Material changes will also be noted in the app’s Play Store listing.