Legal

Buddy Consent Policy

Last updated Draft

Draft — not yet in force. This document describes the upcoming Chillcore app and is pending review by qualified counsel. Items marked "to be confirmed" will be finalized before launch. Questions: legal@chillcore.app.
  • Effective date: not yet in force (draft)
  • Last updated: 11 September 2026
  • Controller: Chillcore [legal entity to be confirmed] ("Chillcore", "we", "us").
  • Contact: privacy@chillcore.app · DPO: dpo@chillcore.app.

0. If you're reading this, one of two things happened

  1. You just got an invite from Chillcore because someone listed you as their accountability "buddy" — and you're deciding whether to Accept. Read Sections 1–4 and 10.
  2. You already Accepted and want to know your rights, or want to leave. Read Sections 5–10.

Chillcore never sends you anything beyond the initial neutral invitation until you Accept. If you never Accept, we retain your contact only as long as we need to record your non-Acceptance and prevent duplicate invites — see Section 4.

1. What Chillcore is (2-line summary for buddies)

Chillcore is a tough-love accountability tool. A friend of yours uses it to make sure they actually finish important tasks they've been putting off. They've asked you to be a "buddy" — someone who gets notified when they miss, quit, or complete tasks. That's the whole thing.

The user's Chillcore experience may include profanity and mockery aimed at them (they consented to that). What you receive as a buddy is described below — and it's a much smaller, more controlled set.

2. What being a buddy actually means

2.1 What you agree to receive (post-Accept)

Depending on how the user has configured you and what tier they use, you may receive:

  • Deadline / completion notifications — "Alex missed the 6 AM run" / "Alex finished 'Send the tax docs'";
  • Buddy prompts — "Alex has been avoiding this for 6 days. Nudge?" with reply buttons ("Roast him" / "One more day" / "I'm disappointed");
  • Optional roast-content — only if you separately Accept the roast-content checkbox at pairing — a limited relay of pre-armed roast messages from the user to you (usually context like "Alex is quitting on you again"). You can turn this off at any time.
  • Video-confession notification — "Alex left a quit-confession video for 'Learn Spanish'." You will not be shown the video itself; you will see the notification that one exists.

2.2 What you will NOT receive

  • Your buddy's full task descriptions. You see the task label they set, nothing more. If they wrote a description of the task, you don't see it.
  • Their typed excuses in full. You see the fact of an excuse, not the raw text (unless they explicitly share).
  • Their quit-gate video confessions. Never sent to you.
  • Their full Records history. No lookups.
  • Their location, IP, or device data.

2.3 Your obligations as a buddy

If you Accept, you agree to: - follow the Community Guidelines — same rules as any user (no hate speech, no protected-class attacks, no threats, no NCII, no CSAM, no doxxing); - not to forward Chillcore-relayed messages outside the app to embarrass the user publicly; - not to bypass the user's safeword — if the app has quieted the user, don't send content to escalate them; - not to use Chillcore to harass or emotionally abuse the user. Ribbing and roast-mode are fine; abuse is not; - treat the pairing seriously — if the user shows signs of real distress, you'll route them to real help, not use the app for it.

Chillcore is not therapy, coaching, or a mental-health service. As a buddy, you're not a substitute for one either.

2.4 Buddies of Demon-tier accounts — extra requirements

If the user you're paired with runs Chillcore in Demon mode (profanity-laced content — web/APK only), then:

  • You must be at least 18. If you're under 18, do not Accept a Demon-linked pairing.
  • You must separately check the "roast content may be forwarded" checkbox at pairing time. Without this, your role is limited to milestone notifications only.
  • You must know the safeword ("stop") and Chillcore's crisis off-ramp. If your buddy shows signs of real distress, drop the roast tone immediately and route to real help.
  • If you revoke consent later, the user's Demon mode drops to Drill Sergeant automatically until they find another eligible buddy.

3.1 Double opt-in

Chillcore uses a double opt-in model for buddies:

  1. A Chillcore user provides your contact information (email — and, in limited cases, phone number — see 3.3) and requests we send you an invitation.
  2. Chillcore sends one single neutral invitation email (or SMS, per 3.3) with: - who invited you (name); - what Chillcore is; - what you're being asked to Accept; - two explicit buttons: Accept and Decline; - a link to this Buddy Consent Policy and the Community Guidelines; - contact for questions.
  3. Nothing further is sent unless you tap Accept. Not a reminder, not a nudge, not a roast, nothing.
  • TCPA (US): automated SMS/calls to a mobile number require prior express consent from the recipient. Chillcore's SMS design (Section 3.3) is built to avoid the TCPA-triggering fact pattern.
  • CAN-SPAM (US): commercial email requires accurate headers, physical mailing address, working opt-out. Chillcore's neutral invitation email complies.
  • GDPR (EU/EEA) & UK GDPR: processing your contact info to send the initial invitation is based on legitimate interest (Art. 6(1)(f)) — narrow, minimal, one-time. Post-Accept processing is based on your explicit consent (Art. 6(1)(a)).
  • PECR (UK): electronic marketing communications require consent from the recipient. The neutral invitation is a transactional/contact-you-once basis, not marketing; post-Accept relay is a service you consented to.
  • CASL (Canada): implied consent for the single invitation (personal or family relationship exemption may apply per user's declaration, verified at Accept); express consent for post-Accept messages.
  • Spam Act 2003 (Australia): consent-based; post-Accept qualifies as consent.

3.3 SMS to phone numbers — special caution

TCPA is the highest-damages regime here ($500–$1,500 per unauthorized text, private right of action, class-action magnet — see teardown 🔴#1). Chillcore's design mitigates:

  • Default: invitations go by email only.
  • Phone numbers: if the user provides your phone number, we prefer to route the invitation via the user's own device — the user taps "Send invitation" and their phone's own SMS app sends the text. Chillcore is not the sender.
  • Server-sent SMS invites are used only where jurisdictionally safer routes exist (e.g. WhatsApp Business, iMessage business, or explicit business-messaging channels) or where telco-verified consent flows are available.
  • US mobile numbers: the server never automatically sends SMS to a US mobile number without an alternative like email having failed or without a rigorously documented consent route.

Whenever you Accept a pairing, we log: - Timestamp of your Accept; - IP address of the device you clicked from; - User-agent (browser/device summary); - Which specific pairing (the inviting user's account ID); - Which specific tier scope (Coach / Drill Sergeant / Demon and whether the "roast content may be forwarded" box was checked); - Version of this Buddy Consent Policy and the Community Guidelines you accepted.

If you decline, we log the decline (and the fact of contact) so we don't invite you again for the same user. If you Accept and later revoke, we log the revocation timestamp.

Retention of consent proofs: duration of the account + 3 years for defense of claims. Retention of your contact information if you never Accepted: minimal window sufficient to record the decline / non-response, then purge (see Section 4).

4. If you decline (or never respond)

If you tap Decline, or ignore the invitation for [to be confirmed]:

  1. Your status is set to "declined / non-responsive" on that specific user's pairing.
  2. No further invitations from that user will be sent to your contact.
  3. If the same user tries to re-invite you, they see a "this person previously declined" message and the invite is blocked.
  4. Your contact information (email/phone), attached to the decline record, is retained only as long as necessary to enforce the decline — then purged. Default: [to be confirmed] unless applicable law requires longer.
  5. You can also proactively contact privacy@chillcore.app to say "delete everything you have on me for [user X]" and we will hard-delete.

Different users, different decisions. If another Chillcore user separately lists you as a buddy in the future, the decline attached to the first user does NOT auto-apply — because it's a different pairing, and consent is per-pairing. But you can request a global suppression: email privacy@chillcore.app with "please block all future Chillcore invitations to [my email/phone]" and we will maintain a global suppression list.

You can revoke at any time, without giving a reason. Options:

  1. In-app / email link: every message Chillcore sends you has a one-click "Stop being [User]'s buddy" link. One tap and it's over.
  2. Email: privacy@chillcore.app.
  3. Reply STOP to any Chillcore-sent SMS (where applicable).
  4. User-side: the user can also unpair you from their side.

5.1 What happens when you revoke

  • Immediate: no more messages sent to you related to that user.
  • The user is notified that you've stepped down.
  • If the user was in Demon mode, their Demon mode drops to Drill Sergeant automatically until they find another eligible buddy.
  • Your role-related data (Accept timestamp, "roast-forward" checkbox state, message-relay history) is retained per Section 6.

5.2 Effect on the user

The pairing ending may itself trigger Chillcore content aimed at the user ("Your buddy dropped you"), but no content is sent to you about your revocation — you're out.

5.3 Withdrawal doesn't affect prior lawful processing

Withdrawing your consent doesn't retroactively make our prior processing unlawful. Anything sent to you between Accept and revoke was lawful. From revoke forward, we stop.

6. What happens to your data after revocation

  • Contact information (email/phone): retained in a suppression state — enough to prevent re-invites and honor the revocation. Purged after [to be confirmed] unless the user's account is still active and the retention prevents re-invite abuse.
  • Relay history (messages we relayed to you, your replies): retained under the user's account per the Privacy Policy retention schedule (typically deleted with account or on user's individual erasure request).
  • Consent proofs: retained per Section 3.4 (account + 3 years).
  • Right to erasure: you can request full erasure of your buddy-related personal data at any time under GDPR Art. 17 / CCPA / equivalent. We honor it within the timelines in the Privacy Policy. Some data may be retained for legal-hold / defense-of-claims — we tell you if so.

Contact: privacy@chillcore.app.

7. Your rights (whether or not you Accepted)

If Chillcore has processed any personal information about you — even just the fact that a user provided your contact — you have rights:

  • Access: get a copy of the data we hold on you.
  • Rectification: correct inaccurate data.
  • Erasure: delete your data, subject to legal-hold exceptions.
  • Restriction / Object: limit or object to our processing.
  • Portability: where applicable.
  • Withdraw consent: anytime.
  • Complain to a supervisory authority.

Under GDPR: response within 30 days. Under CCPA: 45 days. Details in the Privacy Policy, Section 10.

Contact: privacy@chillcore.app or dpo@chillcore.app.

8. Cross-border data transfers

Chillcore is operated from [Chillcore's jurisdiction — to be confirmed]. If your Chillcore user is in one region (e.g. US) and you're in another (e.g. EU), your personal data may cross borders as part of the pairing. Specifically:

  • US user, EU buddy: your PII is processed in the US infrastructure serving the user's account. Transfers rely on Standard Contractual Clauses (EU Commission Decision 2021/914) + supplementary technical measures (encryption in transit and at rest, access controls). Adequacy decisions (EU-US Data Privacy Framework for enrolled US recipients) may also apply.
  • EU user, US buddy: the US buddy's PII processed in EU infrastructure — not a Chapter V transfer under the reverse view, but disclosed here for transparency.
  • Anywhere else: SCCs / national equivalents.

More detail in the Privacy Policy, Section 8.

9. Age

  • You must be at least 16 to Accept a Coach / Drill Sergeant pairing in the EU/EEA/UK (some Member States allow younger; conservative floor).
  • You must be at least 18 to Accept a Demon-linked pairing anywhere.
  • Chillcore does not knowingly process buddy data for a person below the applicable age. If we learn a buddy is under-age for the tier they're paired to, we terminate the pairing.

10. Complaints

  • First: privacy@chillcore.app or dpo@chillcore.app.
  • We respond within 5 business days (acknowledgment) and 30 days (substantive).
  • You may also complain to your national supervisory authority:
  • EU: your national DPA (list at edpb.europa.eu);
  • UK: ICO (ico.org.uk);
  • US: FTC (ftc.gov) or state AG (e.g. California AG at oag.ca.gov);
  • US TCPA specifically: private right of action in federal court, or FCC complaint;
  • Canada: Office of the Privacy Commissioner (priv.gc.ca);
  • Australia: OAIC (oaic.gov.au).

11. Changes to this Policy

Material changes: 30 days' notice by email to Accepted buddies. Non-material: on posting. Version history preserved on request. If a material change is unacceptable to you, you may revoke.

12. Contact

  • Buddy consent, decline, revoke: privacy@chillcore.app
  • Data protection: dpo@chillcore.app
  • Global do-not-invite suppression: privacy@chillcore.app
  • T&S / report bad buddy behavior toward you: trust@chillcore.app
  • Postal: [Chillcore legal entity + address to be confirmed]