What Chillswitch can and cannot see
Chillswitch asks for as little as it can and seals what it carries. The Privacy Policy has the full legal detail; this page is the plain summary.
What it does not require or use
- No email address or phone number to open an account. A name is optional.
- No address book upload. When you invite someone, Chillswitch learns only that single contact.
- No advertising networks, tracking pixels, or analytics SDKs.
- No selling of data.
- No always-on location. See location settings.
What stays on your phone
- The key that opens your account.
- Alert notes, locations, and routes, which are sealed on your phone before they leave it.
- Group names, which are encrypted on the organizer's phone.
- Your saved numbers for your contacts, kept for calling and texting them. Chillswitch never receives them.
What Chillswitch's servers do handle
To run the service, the servers process account and circle relationships, schedules and deadlines, routing, delivery state, push tokens, and security records. Connections also expose standard network details, such as IP address and timing, to infrastructure providers. Sealed content is not "zero metadata." Chillswitch does not currently use an oblivious relay.
- Apple and Google receive push and store billing data. A paid subscription adds a store transaction identifier.
- If you text a contact without the app, carriers process the message.
- Chillswitch keeps no history of completed check-in times, and alerts are removed from the active delivery queue once delivered. Limited operational and security records still exist.
Why nothing on your phone gets deleted
Despite the name, Chillswitch never deletes your photos, messages, or files. If an app erased data in a crisis, you could be blamed for destroying evidence. See the FAQ.
Where to read more
Privacy Policy, plain-words summary, Security, and Know the limits.