Effective date: 2026-10-26
Provider: Chill Company Pte Ltd ("Chill Company", "we", "us")
Contact: service@chillcompany.com
This policy explains what the STILL app (iOS and Android) collects, why, who processes it, how long we keep it, and how you can control or delete it. STILL is a relaxation product used with the STILL wearable device. It is not a medical device and does not diagnose, treat or prevent any condition.
1. Information we collect
Account information. Email address, display name and avatar, or the identifier returned by the sign-in provider you choose (Apple, Google, LINE or WeChat). You can also use STILL without signing in.
Content you create. Compositions (vibration and sound arrangements), recordings you choose to upload, comments, reactions, follows and playlists.
Health and fitness data (optional, off by default). See Section 4. This data stays on your device and is never sent to us.
Listening activity. When you play content in STILL we record which item you played, when, how long you listened and whether you finished it. See Section 5.
Personal profile (optional). Birthday, birthplace, goals, chronotype and music preferences you enter in "Personal profile" are stored only on your device (in encrypted secure storage) and are used to personalise suggestions on the device. They are not uploaded.
Device and connection information. Bluetooth identifiers and the name of your STILL device, used to connect and control it; firmware version; app version, OS version and device model.
Push notification token. Used to send the notifications you have enabled. You can turn each notification type off in Settings.
Microphone. Used only when you choose to record audio. Recordings stay on your device unless you choose to upload them.
Diagnostics. Crash reports and error logs (stack trace, app/OS version, device model and an internal account ID). They do not include your email address or health data. You can turn crash reporting off in Settings.
Support and warranty requests. The contents of a problem report or repair request you submit in the app, the contact email you enter, and the device information needed to handle it (for example serial number and firmware version).
Purchases. If paid subscriptions are offered, the purchase receipt from Apple or Google is verified to unlock your subscription. We never receive your card or payment details.
2. How we use information
- To provide STILL: sign-in, syncing your compositions, connecting to and controlling your device, playback.
- To show creators aggregated statistics about their own content (Section 5).
- To personalise suggestions inside the app.
- To send notifications you have enabled.
- To fix crashes, handle support and warranty requests, and keep the service secure.
- To generate a composition with AI when you use the AI compose feature (Section 6).
We do not sell your personal information, we do not use it for advertising, and we do not share it with data brokers.
3. Who processes your information
| Processor | Purpose | Data |
|---|---|---|
| Supabase (database, storage, server functions) | Hosting the STILL service | Account, content, listening activity, support requests |
| Apple, Google, LINE, WeChat (Tencent) | Sign-in, only for the provider you choose | Sign-in identifier and the profile fields that provider shares |
| Google Firebase Cloud Messaging / Apple Push Notification service | Delivering notifications | Push token, notification content |
| Google Firebase Crashlytics | Crash reporting (can be turned off in Settings) | Crash data, device model, app/OS version, internal account ID |
| Anthropic (Claude API); DeepSeek as an alternative provider | AI compose, only when you use it | The text prompt you enter and composition parameters |
| Atlassian (Jira) | Internal tracking of support tickets | Ticket summary and technical details. Your contact email and your device's hardware address are never sent. |
| Apple App Store / Google Play | Verifying purchase receipts, if paid subscriptions are offered | Receipt and transaction ID |
Health and fitness data is not shared with any of these processors.
4. Health and fitness data
STILL can optionally read health and fitness data from Apple Health (HealthKit) on iOS or Health Connect on Android, so you can compare your own records on days you used STILL with days you did not.
Off by default. Nothing is read until you turn on "Health data" in the app and grant permission in the system dialog. You can choose which data types to allow.
What we read (read-only):
- Sleep sessions and sleep stages (asleep, light, deep, REM, awake)
- Resting heart rate
- Heart rate variability (HRV)
- Step count
STILL does not write any data to Apple Health or Health Connect.
How we use it. Only to show you, inside the app, a personal comparison of your own sleep, resting heart rate, HRV and steps on days with and without STILL sessions. The raw records are reduced on your device to one summary value per day, and the raw records are then discarded.
Where it is stored. Only on your device, in the app's private storage. It is never uploaded to our servers, never sent to Supabase or any other processor listed in Section 3, never included in crash reports or support tickets, and never visible to creators or administrators.
What we never do with it. We do not sell it, use it for advertising, use it for profiling or credit decisions, transfer it to data brokers, or use it to train AI models.
How long we keep it. Daily summaries are kept on your device for up to 180 days and older entries are deleted automatically.
How to stop and delete. Turning "Health data" off in the app immediately deletes all health summaries stored by STILL on your device. You can also revoke access at any time in iOS Settings > Health > Data Access & Devices > STILL, or in Android's Health Connect app > App permissions > STILL. Uninstalling the app also removes this data.
Not medical advice. The comparison is for personal reflection only. STILL is not a medical device and does not provide diagnosis or treatment.
Google Health Connect. STILL's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.
Apple HealthKit. Data obtained through HealthKit is not used for advertising or similar services, is not sold, and is not disclosed to third parties.
5. Listening activity
When you play content, we record the item, the time, how long you listened and whether you completed it.
- Your own use: to show your history and improve recommendations for you.
- Creators: see only aggregated statistics for their own content (for example total plays and completion rates). A listening drop-off curve is shown only when at least 5 different listeners are included. Creators never see who listened.
- Administrators: may view listening data only to operate and secure the service; each access requires a stated reason and is logged.
- Retention: individual play records are deleted after 90 days. Aggregated statistics that cannot identify you may be kept longer.
- Deletion: listening records are deleted when you delete your account. You can also email us to delete your listening history without deleting your account.
6. AI compose
When you use AI compose, the text you enter and the composition parameters are sent through our server to Anthropic (or DeepSeek, if configured) to generate a composition. Your health data, personal profile and email address are not sent. Daily usage limits apply.
7. Storage and international transfer
Our servers are operated by Supabase. Your information may be processed outside your country of residence, including in Singapore, the United States and other countries where our processors operate. We rely on our processors' contractual safeguards for these transfers.
8. Deleting your account
In the app: Settings > Profile > Delete Account. Your account enters a 30-day grace period, after which your account and associated data on our servers are permanently deleted. If you cannot access the app, email service@chillcompany.com from your account email.
Health data is never on our servers; it is deleted from your device when you turn off Health data or uninstall the app.
9. Retention
| Data | Retention |
|---|---|
| Account and content | Until you delete your account (+30-day grace period) |
| Health and fitness summaries | On your device only, up to 180 days; deleted immediately when you turn Health data off |
| Personal profile | On your device only, until you clear it or uninstall |
| Individual listening records | 90 days |
| Crash reports | According to Firebase Crashlytics retention (currently 90 days) |
| Support and warranty requests | As long as needed to handle the request and meet legal obligations |
| Push token | Until it expires, you sign out, or you delete your account |
10. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict processing, and to withdraw consent at any time. To exercise these rights, email service@chillcompany.com. You may also complain to your local data protection authority.
11. Children
STILL is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
12. Security
We use HTTPS for all network traffic, row-level access control on our database, and the operating system's secure storage (iOS Keychain / Android Keystore) for sign-in tokens and your personal profile.
13. Changes
We will post updates on this page and change the effective date. For material changes we will notify you in the app.
14. Contact
Chill Company Pte Ltd — service@chillcompany.com