Effective date: 2026/06/01
Provider: Chill Company Pte Ltd
App: STILL (companion app for the CHILLX smart eye mask)
Contact: service@chillcompany.com
1. What we collect
- Account data: the email and display name you provide when you register; if you have not registered, we create an anonymous identifier so you can use the app. Creators may additionally add a bio, avatar, and subscription pricing.
- Content you create: your compositions (title, description, mood tags, audio, cover image), favorites, playlists, collections, the creators you follow, and subscription records.
- Device & notifications: if you enable notifications, we store a push token to deliver them.
- Bluetooth: used to connect to your CHILLX eye mask and control vibration / speaker / energy modules. We do not collect personal data via Bluetooth — it is used only for local communication with the mask.
- Microphone (optional): in "ambient sync" mode the app processes ambient sound in real time to sync vibration; unless you actively record audio to create a composition, we do not record or upload your audio.
2. How we use it
- To provide the core service: syncing your compositions across devices, Discover, playback, favorites and playlists.
- When you opt in to notifications, to notify you of new content from creators you follow or subscribe to.
- Operations, debugging, and improving the service.
3. Third-party services (processors)
- Supabase — database, authentication, file storage, and Edge Function hosting. Your account and content data are stored on Supabase's cloud infrastructure.
- Apple / Google sign-in (if you use them) — to sign in with your Apple/Google account.
- Google Firebase / Apple APNs — to deliver push notifications (Firebase Cloud Messaging for Android, APNs for iOS).
4. Storage & international transfer
Your data is stored on Supabase cloud servers; push-related data is also processed by Apple (APNs) and Google (Firebase Cloud Messaging). These services' servers may be located outside your region; by using the service you understand and consent to such cross-border processing.
5. Delete your account & data
You can delete your STILL account and its associated data directly in the app:
- Open the STILL app and sign in.
- Go to Settings → your account profile.
- Tap Delete Account and confirm.
Your account enters a 30-day grace period (you can restore it by signing back in during this time). After 30 days, the account and all associated data — compositions, favorites, playlists, follows, subscriptions, and push tokens — are permanently deleted.
If you cannot access the app, or want your data deleted without using the in-app flow, email service@chillcompany.com from your registered address and we will process the deletion.
6. Retention
We retain your data while your account exists. When you delete your account, data associated with it (compositions, favorites, follows, subscriptions, etc.) is deleted as described in Section 5.
7. Your rights (GDPR / local data-protection law)
You have the right to access, correct, and delete your personal data, and to withdraw consent.
- Deletion: deleting your account cascades to delete your associated data (see Section 5).
- To exercise these rights, contact service@chillcompany.com.
8. Children
The service is not directed to children under 13 (or the age of majority in your region), and we do not knowingly collect children's personal data.
9. Security
We restrict data access with Row-Level Security and encrypt data in transit via HTTPS. No method is 100% secure.
10. Changes
We may update this policy and will post changes in the app or on this page. Material changes will be notified.
11. Contact
Questions about this policy: service@chillcompany.com