Privacy notice

This notice explains what Chatile collects, why, who it's shared with, and the choices you have. Chatile is run by its owner ("Chatile", "we", "us"). Contact: hello@chatile.app.

The short version

• We collect only what Chatile needs to work: your email and name, what you choose to share, and basic records of payments and safety reports.
• Your private chats are encrypted on your phone. Chatile can't read them.
• We don't sell your personal information, and we don't use it for third-party advertising. Commercials on the Feed are pictures chosen by Chatile, not targeted at you using your data.
• You're in control: download your data, delete posts, hide your profile, turn off alerts, or delete your account any time.

What we collect

• Account: your email address, name and sign-in records (we keep only a scrambled copy of sign-in codes and sessions).
• What you share: posts, photos, comments, lives, live chat, pet care, organizer entries, appointments and messages to support. Private chat text and voice messages are encrypted on your device.
• Payments: your plan, status and renewal date, and orders (items, amounts, email, and shipping address for physical items). Card details are handled by Stripe, Apple or Google, never by Chatile.
• Device and usage: your phone's alert token if you turn on alerts, your language, the days you open the app (for the lantern porch and weekly challenge), and basic counts like how many posts you made this week. Our hosting provider processes connection information (like IP addresses) to deliver the app and keep it secure.
• Safety: reports you send or that are made about your content, blocks, and any suspension on your account.

How we use it

• To run Chatile: sign you in, show your Feed and friends, deliver messages and alerts, process orders and memberships.
• To keep Chatile safe: review reports, filter hurtful words, stop spam and abuse, and enforce our Terms and Community rules.
• To support you when you write to us.
• To understand, in total counts, how Chatile is used, so we can improve it (for example, how many people posted this week). We don't build advertising profiles.
• If you're in the EU or UK, we rely on: performing our contract with you (running your account), our legitimate interests (safety, security and improving Chatile), your consent (for optional features like alerts, which you can turn off any time), and legal obligations (like tax records).

Who we share it with

Only with services that help run Chatile, and only what each needs:

• Cloudflare (hosting, database and storage), Resend (sign-in and account emails), Stripe (web payments), Apple and Google (app store payments), RevenueCat (confirms app store memberships), Firebase Cloud Messaging (phone alerts), LiveKit and Cloudflare (calls, lives and meetings, not recorded), OpenAI (only when you use an AI feature, with storage turned off), and Printful (to print and ship made-to-order Boutique items).
• Member shops you buy from receive your order, email and shipping details so they can deliver.
• Other members see only what you choose to share with them.
• Authorities, if the law requires it or to protect someone from serious harm, especially children.
• If Chatile is ever sold or merged, your information would move with it under this notice, and we'd tell you first.

Children

Chatile isn't for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has an account, write to us and we'll delete it.

Your rights

You can access, download, correct and delete your information. Use Download my data and Delete my account in Settings, or write to us. Depending on where you live (for example California, the EU or the UK), you may also have the right to object to or limit some uses, and to complain to your local data protection authority. We'll answer requests within 30 days and won't treat you differently for using your rights.

How long we keep it

We keep your information while your account is open. When you delete your account, we delete your profile, posts, photos, comments, pets, organizer data, chats and alerts. We keep some records longer only when needed: payment and tax records (usually up to 7 years), safety records about serious harm, and short-lived backups.

Security

We protect your information with encryption in transit, encrypted private chats, scrambled sign-in codes and sessions, and strict access limits. Only the Chatile owner, and team members for their assigned tasks, can see support and safety tools, and no one on the team can read private chats. No system is perfect, so if something goes wrong we'll act quickly and tell you when the law requires it.

Where your information is stored

Chatile runs on Cloudflare's global network, so your information may be processed in the United States and other countries. Where required, we use standard legal protections for international transfers.

Changes

If we change this notice in an important way, we'll tell you in the app first. The date and version at the top show when it last changed.

Details by feature

What Chatile stores

Your account identifier and contact/display details from sign-in; organizer entries you save, including optional financial entries; basic health reminders only (a reminder name like “Morning medicine” and a time, plus whether it was taken in the last few days); and daily check-ins that keep only a feeling, an energy level and one small step (no written notes or reasons). Chatile does not offer cycle or period tracking and does not ask for medicine names, doses, diagnoses or symptoms; the 30 Days of Becoming saves only which days you finished; preferences, including an optional cropped profile-photo thumbnail; seller profiles and products; show plans; and support requests or reports you submit. Mobile sessions use hashed server tokens and protected device storage. Provider credentials entered by the owner are encrypted on the server.

Who can see what

Organizer entries are isolated by account but are not end-to-end encrypted. Private chat text is encrypted on your device before storage; conversation membership and timing are not end-to-end encrypted. Members you invite can read messages after unlocking their own vault and can keep copies. Profile photos are stored as small JPEG thumbnails, separately from encrypted chat text. They are visible to invited conversation partners and, only when profile discovery is enabled, to members browsing the directory. You can replace or remove your photo in Account settings; account deletion also removes the stored thumbnail. Discoverable profiles and published member products/show plans are visible to eligible members. Registered seller contact emails are visible with their published listings. Support/report details are visible to the owner; encrypted private messages are not attached automatically.

Community, pets and beauty appointments

Posts, comments, replies, chosen bubble colors, display names and profile thumbnails in the member lounge are shared with subscribed members. Community posts are stored in readable form on the server for display and owner moderation; they are not encrypted private chats. You choose when to publish. Blocking filters both members’ posts; reports go to the owner. Pet selections, pet-care records and beauty appointments remain private to your account. Private check-ins and appointments never become public posts automatically. You may export private pet and appointment records from Beauty appointments. Account deletion removes these records and your community content. Virtual pet artwork is generated and animated in the interface. The optional desktop pet window depends on browser support; phone overlays over other apps are unavailable.

Stylist connections and pet voice commands

A stylist request goes to the exact Chatile handle supplied. Accepting once allows that stylist to share appointment services, occasions, times and notes with you. Both participants can view these shared records; unrelated members cannot. Your private beauty diary is separate. Decline or remove a connection in Hair Stylist. Removal stops shared records from loading and reschedules phone alerts when the app refreshes; remove previously exported calendar alerts separately. Deleting either participant’s account removes the shared stylist connection and appointments. Stylist profiles are self-declared, not verified credentials. No stylist SMS or email reminders are sent. Optional pet voice commands use your browser speech recognition: the browser may send audio to its speech service. Chatile does not record or store microphone audio. Listening starts only when you press Talk, requires permission, and stops after one command or 8 seconds. Button and typed commands work without a microphone.

Private care spaces

Nicknames, daycare notes, responsible-adult labels and family plans are stored for the signed-in account; entering another adult’s name does not notify or give access to them. Vendor requests target exact member handles. Each accepted vendor sees only their own connection, messages and reorder reminders, never the member’s other vendors. These care threads are stored in readable form for the two participants and service operation, not encrypted like private Chatile chats. Remove either connection to stop shared records from loading. Blocking also hides the connection. Pet-sitting is optional, requires acceptance and expires within 30 days. The sitter can view the selected virtual pet’s care diary and record limited chores; they cannot access your other spaces, replace the pet or change billing. Rehoming ends access to the previous pet. The floating house is private to the interface unless you deliberately share your screen. An opt-in pet-moment message shares only a snapshot inside the encrypted private chat, not continuing access or live video. Care reminders are gentle; virtual pets remain safe when you are away. Account deletion removes care preferences, related connections and shared care records.

Family activity

The separate Little Moments activity does not save or send selected feelings. It does not provide student accounts, chat or purchases. It is intended for an adult to guide. Hosting may still process connection information when pages load. A supervised school service is not available.

Services and translation

Chatile runs on Cloudflare. Sign-in uses your email address: a one-time code is sent through our email provider (Resend), and only a hashed copy of each code and session is stored. Stripe processes membership payments on its secure checkout and billing pages; Chatile never sees your full card number and stores only your Stripe customer and subscription identifiers, plan, status and renewal date. If you join in the iPhone or Android app, Apple or Google processes the payment, and RevenueCat confirms it to Chatile using your Chatile account ID; Chatile stores only your plan, store, status and renewal date. When you buy from the Boutique or a member shop, Chatile stores your order (items, amounts, email and, for physical items, your shipping name and address) and shares the shipping details and email only with that shop so it can deliver and support your order. Pet playdates: friends you chat with can see your pet’s name and kind and invite it to a playdate; your pets appear together in both Pet Houses for 30 minutes. Invite links: your personal invite page shows your first name and your invite code to whoever you share it with, and when a friend joins with it, each of you can see the other’s first name. Friendship levels: friends you chat with can see how many playdates your pets have had together. Cute pet contest: if you enter, friends you chat with see your pet’s name, kind and chosen look for that week and can vote; vote counts are shown to the entrant’s friends, and you can withdraw your entry any time. Walks: steps and minutes you log are saved by day in your space (the last 60 days) and are only visible to you. Photo booth pictures are made on your device and are only shared if you choose to share them. Feed: posts you share with Friends are visible to the people you chat with; posts shared with Everyone appear in Discover for all signed-in members. Photos you post are resized on your device (which removes location details) and stored privately; only people who can see the post can open the photo. You can delete a post or comment any time, and deleting your account deletes your posts, comments, likes and photos. Lives: when you go live, the people you chat with can watch and chat; video is streamed through LiveKit and is not recorded by Chatile; live chat messages are kept with your account until you delete it. While you're live, your phone sends a still picture about every 20 seconds so friends see a preview on their live card; only the latest one is kept, friends who can watch are the only ones who can see it, and it's deleted when the live ends. Friends see a lantern on your picture while you're live, and Chatile counts who is watching right now. Lantern alerts can be turned off in Settings. Language: your language choice is saved on your phone, and the language code (for example fr) is saved with your phone's alert registration so alerts arrive in your language. Photo filters, frames and live backgrounds are applied on your own phone; for live backgrounds and soft makeup, your phone downloads free person-outline and face-point tools from public code servers, but your photos and video are not sent to them, and Chatile does not store face data. Translation happens on your own phone or computer; Chatile does not send your text to a translation service. Morning quote: if you turn on the morning quote alert, Chatile saves the hour you chose and your time zone so the alert arrives at the right time; turn it off any time. Sharing a quote creates the picture on your device; nothing is posted unless you choose where to share it. For made-to-order Boutique items, Chatile also sends your name, shipping address, email and the items to its print partner, Printful, which prints and ships them and gives Chatile the tracking details. Member-shop payments go to that seller’s own Stripe account. Digital purchases are stored privately and delivered through expiring download links. If you turn on catalog emails, Chatile sends them through Resend to your sign-in email; each has an unsubscribe link. If you turn on phone notifications, Chatile stores your phone’s notification token and sends short, general alerts through Firebase Cloud Messaging (Google); alerts never contain private details. Voice and video calls are carried by LiveKit between the two participants; Chatile keeps only who called whom, when, and the call status, never the audio or video. Live Shops broadcasts also run through LiveKit and are not recorded. Live chat messages, the names shown with them, and who joined a show are stored so hosts can moderate and reports can be reviewed. Live captions are created on the host’s device by its speech-recognition service and shared only with viewers. LiveKit handles media if a connected live session is used. Optional market widgets and external images contact their hosts. On the website, Chatile's own buttons and screen wording (never your text, names or messages) may be translated once by OpenAI and saved, so every browser can show Chatile in your language. Translating your own entries and messages is optional and happens only on your phone. Saved originals are preserved. Do not assume all text or every language is supported.

Commercials

If you apply to run commercials, Chatile keeps your application (business or brand name, the kind of commercial, what it’s for, where it’s sold or shown, your link, and when you accepted the commercial rules) and the Chatile team reviews it. For each commercial, Chatile keeps its picture, title, description, link and dates, and the team reviews it before it runs. Running commercials are shown on the Feed to signed-in people with your business name. Payments for commercials are handled by Stripe; Chatile never sees your card number. Declined or canceled commercials are deleted, and all of them are deleted with your account.

Library

Books in the Library are added by Chatile. Where you stopped reading, your text size and night reading are remembered only on your phone, not on Chatile’s servers.

Cabin life

To light your lantern porch and track the weekly challenge, Chatile keeps the days you opened the app and counts your playdates, comments and posts for that week. Rewards, seasonal outfits and anniversary badges you collect are saved with your account. Your Sunday Cabin Letter and Chapter Day alert choices are saved too. All of this is deleted with your account and included in Download my data.

Book invites

If Chatile invites you to share a book, the book, its cover, description, “Get the book” link and your rights confirmation are kept and reviewed by the Chatile team before members can read it. Payments for a Featured Author placement are handled by Stripe. Your books are deleted with your account.

Collaborations

If Chatile invites your brand or company to collaborate, Chatile keeps the offer, your contact name and email, the messages between you and Chatile, the pictures you send, your acceptance of the terms and when you accepted, payment status, and how many people saw or tapped your spotlight (counts only, never who). Payments are handled by Stripe. Sponsored content is always labeled “Paid partnership”. Members only see the brand’s name, picture, caption and link, and Chatile does not share who saw or tapped it.

Deals the owner reviews

When a brand or partner sends Chatile’s owner a deal, the owner may use a private assistant to read it. The text or pictures of that deal are sent to OpenAI to be read, with storage turned off, and are not saved by Chatile.

Meetings

If Chatile invites you to a video meeting, Chatile keeps the meeting’s title, time and length, your name and email on the guest list, and whether you joined, waited or were let in. Your invite link only works for your email. Video and sound are carried by LiveKit between the people in the meeting and are not recorded by Chatile.

Chatile team

Some people on the Chatile team may help answer support messages, review safety reports and look after the Feed, shops and commercials. Each sees only what their role needs, and everything they do is logged. No one on the team can read private chats. Team members’ clock-in and clock-out times, overtime and time-off requests and accepted pay terms are kept for the owner and for payroll, and pay totals the owner saves are kept as pay records. Team members who clock in with Face ID or a fingerprint keep it on their own phone: Chatile only stores a public key that can confirm it was them, never their face or fingerprint. Daily clock-in codes are stored only in scrambled form. Team members in the European Union (including Guadeloupe, Martinique and French Guiana) receive a privacy notice in their language and can ask for a copy, correction or deletion of their data.

Calls

Voice and video calls connect straight from one phone to the other, like WhatsApp. Chatile’s server only passes the connection details between the two phones and doesn’t record or listen to calls. Because the phones connect directly, each phone can see the other’s internet address (IP address) during the call. When a direct connection isn’t possible, the call passes through Cloudflare’s relay or, rarely, LiveKit, still encrypted. Call details (who called whom, when and for how long) are kept so calls work and can be deleted with your account.

Voice messages

Voice messages are encrypted on your phone with the same key as your chat, so Chatile stores only scrambled audio and can’t listen to them. A scheduled voice message waits on Chatile’s servers, still scrambled, until the time you chose, and stays hidden from the other person until then. Deleting the chat or your account deletes the recordings.

Your controls

Download my data in Settings gives you a copy of everything Chatile keeps about you, as one file. Private chat text isn’t in it because Chatile never has it: chats are encrypted on members’ phones. Export organizer entries in Settings and keep a separate encrypted chat vault backup in Chatile. Hide your discovery profile, close/block conversations, remove products/show plans, revoke mobile sessions, turn off catalog channels, or request member account deletion. Notification permission is controlled by your device. Chatile does not sell your private organizer or chat text.

Deletion and retention

Member deletion removes your sign-in record, organizer data, profile, posts, photos, comments, likes, lives and their preview pictures, live chat, saved items, playdates, pet contest entries, care and stylist connections, support requests, reports you sent, shop listings and show plans, phone alert registrations, call history and every signed-in session. A web membership is canceled first; if it can’t be canceled, nothing is deleted and you’re asked to try again. Shared conversations are removed for both participants. A one-way trial-use fingerprint is retained to prevent repeated free trials. Provider business/transaction records, legally required records, and hosting backups may follow separate retention processes; contact support with a specific request. This does not delete any external Stripe account. Owners must arrange service transfer or closure before deleting their business owner account.

Cabin guides (Jesner and Lilie)

When you ask a cabin guide a question, your question, the guide you chose, your language and up to three earlier lines of that same conversation are sent to OpenAI to write the answer. Chatile does not send your account ID, email, private chats, organizer entries, pets, orders or health records, and the guides can't see or change your account. The conversation stays on your screen and is not saved by Chatile. Chatile keeps only a daily count of questions, to limit costs; it is removed when you delete your account. Requests use OpenAI's no-storage option; OpenAI may still keep data for a limited time under its API data and abuse-monitoring policies. Don't enter passwords, codes, card numbers or other sensitive details. You can choose no guide at all in Settings → Cabin guide.

Safety and moderation

To keep Chatile kind, posts, comments and live chat are checked against a list of blocked words before they're sent; the check happens on Chatile's server and nothing extra is stored. If your account is paused from posting, Chatile keeps the reason and the end date until it ends. Reports you make are never shown to the person you reported.

Gifts, promo codes and alerts

If you redeem a promo code or receive a gift membership, Chatile keeps which code you used and when. If you have phone alerts turned on, Chatile may send occasional general announcements (never more than three a day); you can turn alerts off in your phone's settings.

Help center

The help articles are the same for everyone. Questions you send to support are kept with your account until you delete it.