Skip to content
Tchaku
Security

The most private deck is the one we never see.

Plain answers about where your data lives. No badges, no theater — just how it works.

Your decks stay on your device

Tchaku is local-first by architecture, not by setting. On desktop — macOS or Windows — decks are .tch files on your disk. In the browser, decks live in your browser's own storage. Deck content reaches our infrastructure only when you explicitly publish it — a share link, a live session, or an AI request you initiate.

What your account stores

An account holds your email, display name, plan, AI credit balance, saved live-session results, the share links you've published, and — for each AI request you make — an access-restricted log of the request and its result, kept for abuse and cost monitoring. That's the inventory. The desktop app doesn't require an account at all.

Payments never touch our servers

Checkout and billing run entirely on Stripe. Card numbers are entered on Stripe's pages and stored by Stripe — Tchaku's servers see a subscription status, never a payment credential.

Live sessions are contained

Audience members join anonymously by code and can only submit responses to the session they joined — every table is guarded by row-level security, so one presenter's data is invisible to every other account. Response size and volume are capped server-side, and the open-response wall gives you moderation controls — pin, feature, or filter what's on screen.

Share links are explicit

Nothing is shared unless you click Share. A published deck or recording lives at an unguessable address, recordings nobody has watched are cleaned up automatically after 90 days, and you can email us to take any link down. Viewer analytics count visits — they don't identify viewers.

Infrastructure

Application data runs on Supabase (PostgreSQL with row-level security enforced on every table) and static content is served by Cloudflare. All traffic is encrypted in transit with TLS.

Found a vulnerability? Report it to hello@tchaku.com with “security” in the subject — reports go to the people who can fix them, and we’ll respond.

Your next talk deserves a room that talks back.

Free includes the full editor, all motion, and every live audience type.