Chills - Privacy

Last updated 12 June 2026 · back to the app · terms · support

Chills is a small social calendar for making plans with people you actually like. The product is built so that the sensitive stuff either never exists or never leaves the server. This page says what we store, in plain words.

What we store

• Your email - only for sign-in codes. No passwords, no marketing.
• Your profile - the name, handle and picture (or emoji) you set yourself.
• Plans & activity - plans you create (title, note, time, place), who you invite, joins, comments and reactions.
• Private ratings - ratings you give after a hangout are visible to you alone. The person you rate never sees them; neither does anyone else. They only tune your own suggestions.
• Connections - who you're connected to (via invite links and shared hangouts).

What we deliberately don't do

• No location tracking. The app never asks where you live or follows your phone. Your "usual area" is derived from plans you actually attended, is deliberately coarse (~2 km), and is shown only to you.
• No public profiles. Nothing on Chills is public. People see you only if you're connected or a plan reaches them.
• Suggestion scores never leave the server. Nobody can see how anyone is ranked, including you.
• No ads, no analytics trackers, no selling data. Two session cookies keep you signed in; that's all.
• Photo metadata is stripped. Profile photos are re-encoded on the server and all metadata (including GPS) is removed before storage.

Where it lives

Data is stored with Supabase (database, sign-in and photo storage) and the app runs on Render. Both store data in the United States.

Reporting photos

You can report anyone's profile photo from inside the app (tap the photo). Reported photos are reviewed and removed if inappropriate; the owner isn't told who reported them.

Your data, your call

• Export: Profile → "Download my data" gives you everything tied to your account as JSON.
• Delete: Profile → "Delete account…" permanently erases your profile, photo, plans, comments, ratings, invite links and sign-in record. Where other people met each other at one of your plans, an anonymous "(deleted plan)" entry survives so their history stays intact - nothing on it points back to you.

Questions

Email gm@jrog.ca.