YOUR COMMUNITY. CLEAR POLICIES.
Web App & Acceptable Use Policy
Updated 14 October 2026
How to use Choplah safely and fairly, with control over your account and advertising cookies.
1. Feedback and internal research
Use Feedback to submit constructive comments and choose the intended recipient carefully. Do not include passwords, verification codes, payment details or other people’s private information. Any OpenAI studying runs only in the backend using grouped activity counts for internal product research. There are no member or merchant AI controls or recommendations in this release. AI findings do not send messages, approve purchases, change rewards or charge cards.
2. Purpose and access
This policy covers the Choplah website, member app, merchant dashboard, onboarding and checkout. Use the service for genuine loyalty programmes and community participation. Access only accounts, data, campaign QR files and workspaces you are authorised to use. Membership is 18+; merchant users must be authorised by their business.
3. Protect your account
Keep passwords, email codes, recovery keys and sign-in links private. Shared devices should be signed out after use. Do not share a merchant login with unauthorised staff. If credentials, a QR or a reward code are misused, report the account or campaign to customersupport@choplah.com. Support will not ask for your password, verification code or full card number.
4. Fair rewards and QR use
Scan public campaign and event QR codes as intended; a QR scan alone is not proof of a purchase. Staff must verify qualifying purchases or visits accurately. Do not create fake members, fabricate receipts, repeatedly claim a one-time reward, reuse redeemed codes, alter QR destinations or manipulate points. Merchants must disclose redemption conditions and ensure staff can fulfil valid rewards. Treat campaign QR files as invitations to that particular merchant programme, not access to its customer database.
5. Data, content and acceptable use
Do not upload unlawful content, malware, material infringing others’ rights or unnecessary sensitive personal information. Do not sell exported customer data, scrape member lists, send unsolicited marketing, impersonate another business or attempt to bypass authentication and workspace restrictions. Do not overload or interfere with the service. Report suspected security problems privately to support, with enough detail to investigate and without accessing other users’ information.
6. Cookies and browser storage
Essential cookies support authenticated sessions, security and sign-in state. Browser storage saves your advertising choice and may hold onboarding drafts or preferences. Optional Meta advertising tracking starts only after you choose Accept optional cookies; Decline leaves it off. Use the Cookie preferences button at the bottom of the website to change your preference. Withdrawing stops future tracking; cookie removal or clearing browser storage may cause the choice to appear again. Stripe and Google use their own technologies in their payment and sign-in experiences. See the Privacy Policy for data recipients and your rights.
7. Personalisation and automation
Recommendations use programme activity and preferences. Birthday rewards and campaign rules depend on merchant configuration and eligibility. Purchase rewards may require staff verification; automatic payment-provider and marketplace connections are not guaranteed. Member profiles are not currently sent to OpenAI for AI personalisation. Any future AI feature must explain its data use before it is introduced. Merchant invoices reflect confirmed subscriptions and verified billable activity; ordered extras require confirmation.
8. Your controls and reporting
Members can update profiles, download their profile and recent points history, and request membership deletion. Merchants can manage their business profile, campaigns and billing; deletion does not itself cancel a Stripe subscription. Inactive member removal currently uses a 12-month review and manual deletion process. Contact support for account closure, a broader data request, incorrect rewards or billing, accessibility problems or suspected abuse. Include the relevant merchant and approximate time; avoid sharing credentials.
9. Availability and enforcement
Keep your browser updated and allow the essential technologies needed for sign-in. Network failures may interrupt a scan or redemption: check the current balance or claim status before repeating it. We may restrict abusive or compromised access, investigate reports and correct invalid activity. Where appropriate we will explain a restriction and let you ask for review. This policy works with the Terms & Conditions and Privacy Policy and does not remove statutory rights. Last updated 14 October 2026.
customersupport@choplah.com
Bluepeak Consultant Sdn Bhd
Registered business address: pending confirmation.