Privacy Policy
Last updated: May 2026 · v1.1
ChillSeeker is built local-first. We do not collect, transmit, sell, or share any of your personal data. This policy explains exactly what the app stores, where it stores it, and what you can do with it.
Summary
- No account — there's nothing to sign up for and no email to enter.
- No servers — ChillSeeker has no backend. All data stays on your device.
- No analytics, no tracking, no advertising — we don't run any third-party SDKs.
- Apple Health is on-device only — reads and writes happen between the app and Apple Health on your iPhone.
- You own the data — export it as JSON or CSV any time, or delete everything in one tap.
What ChillSeeker stores on your device
- Session records (start/end time, duration, temperature, optional ratings, optional comments).
- Heart-rate samples and HRV values when you grant Apple Health access (used in your session summaries and trend charts).
- Journal entries, mood tags, and optional photos you attach.
- Goals, badges, streak progress.
- Breathwork patterns, reminders, and scheduled-session calendar events.
- Profile preferences (units, experience level, default temperatures and durations, contraindication flags, acknowledgements).
All of the above is stored in Apple's SwiftData on your iPhone, inside the app's private container. The data is protected by iOS device encryption when your phone is locked.
Apple Health
With your permission, ChillSeeker can:
- Read heart rate, heart-rate variability (SDNN), resting heart rate, body temperature, and workout history.
- Write your completed sessions as Apple Health workouts, and your breathwork prep as Mindful Minutes.
These reads and writes happen entirely between ChillSeeker and Apple Health on your iPhone. Apple Health data is never transmitted to us or any third party. You can revoke ChillSeeker's Apple Health access at any time in Settings → Health → Apps → ChillSeeker.
What we do not do
- We do not collect personal data from you.
- We do not transmit your session, journal, or health data off your device.
- We do not use any analytics, crash reporting, or telemetry SDKs (no Firebase, no Mixpanel, no Sentry, no Crashlytics, no Adjust, no Branch, etc.).
- We do not display advertising.
- We do not sell, share, or rent your data to anyone — because we do not have it.
Photos
If you choose to attach a photo to a journal entry, ChillSeeker requests temporary access to your
Photos library via Apple's PHPickerViewController. Only the photo you explicitly pick is
imported. The image data is stored locally inside the journal entry.
Notifications
If you choose to enable reminders, ChillSeeker schedules local notifications via Apple's
UNUserNotificationCenter. These are scheduled on-device. We do not send push
notifications, because we do not operate a server.
Calendar
With your permission, ChillSeeker can add scheduled cold-plunge or sauna sessions to your
default calendar so reminders fire even when the app isn't running. Calendar access is
write-only — ChillSeeker cannot read your existing events. You can revoke
access any time in Settings → Privacy & Security → Calendars.
Bluetooth
If you pair a Bluetooth thermometer (any device that broadcasts the standard Health Thermometer profile), ChillSeeker reads the live temperature from it during your session to pre-fill the temperature field. The connection is local to your phone; no Bluetooth data is transmitted anywhere.
Apple Music
With your permission, ChillSeeker can search the Apple Music catalog and your library and play a song or playlist through the system music player during your session. Apple Music access is mediated by Apple's MusicKit; ChillSeeker does not see your purchase or playback history.
Siri & Shortcuts
ChillSeeker exposes "Start session" and "Stop session" actions via Apple's App Intents framework. Siri and the Shortcuts app handle the voice/text matching on-device; ChillSeeker only receives the resolved command. The phrases you say are not transmitted to ChillSeeker and we do not log them.
WatchConnectivity
When the Apple Watch companion is available, ChillSeeker uses Apple's WatchConnectivity framework to sync sessions between your iPhone and Apple Watch. This is a direct device-to-device transfer managed by Apple; the data does not transit any third-party server.
Data export
You can export all your session and journal data as JSON or CSV any time from Settings → Data → Export. Files are written to your device's temporary storage and shared via the standard iOS share sheet — they go wherever you choose to send them.
Data deletion
You can delete all your session, journal, goal, and reminder data in one tap from Settings → Data → Delete all session data. Uninstalling the app removes everything else.
Children
ChillSeeker is intended for users aged 17 and over. We do not knowingly collect any data from anyone, including children — see the rest of this policy.
Changes to this policy
If this policy changes, we'll update the "Last updated" date at the top and surface the change in the app's next release notes.
Contact
Privacy questions: support@chillseeker.org.