PRIVACY
POLICY.
Down2Chill exists so you can see which friends are free right now — without broadcasting your life to strangers. This policy explains what we collect, why we collect it, who ever sees it, and what you can do about it. No dense boilerplate, no hidden clauses.
Who this policy covers
Down2Chill is operated by D2C HOLDINGS LLC (“Down2Chill”, “we”, “us”). For people in the UK and EU, D2C HOLDINGS LLC is the data controller for the information described here.
This policy applies to the Down2Chill mobile apps for iOS and Android, the down2chill.com website, and the browser-based invite pages. It does not cover anything a third party does on their own account — if you follow a link out of Down2Chill, that site’s own policy takes over.
If anything here is unclear, email [email protected] and a human will answer.
The information we collect
We try to collect the least we can while still making the app work. Here is the whole list.
| Category | Examples | Why we need it |
|---|---|---|
| Account details | Name, username, email address, phone number, date of birth, profile photo | To create and secure your account, let friends recognise you, and confirm you meet our minimum age |
| Contacts (optional) | Names and phone numbers from your device address book, only if you turn the feature on | To show you which of your contacts already use Down2Chill. We never message your contacts on your behalf |
| Availability | The mood or activity you pick, when you go online, and who you have chosen to be visible to | This is the product. Without it there is nothing to show your friends |
| Content you create | Messages, photos and media you send, group names, invites | To deliver it to the people you sent it to, and to run the safety scanning described in our Child Safety policy |
| Location (optional) | Approximate or precise device location, only while you have granted permission | To power the map and friend view. The app still works with location switched off |
| Device & usage | Device model, operating system, app version, language, IP address, crash reports, in-app events | To keep the app running, diagnose faults, and understand which features get used |
| Website data | Pages viewed, referring link, approximate region, cookie identifier | Anonymous analytics for down2chill.com only, and only if you allow it |
| Mailing list | The email address you submit on our website | To send you the updates you asked for. Unsubscribe at any time |
We do not ask for and do not want your government ID, payment card, biometric data, health data, or anything else in that category.
What we do with it
Every use below is tied to a purpose. Where UK or EU law applies, the legal basis is named in brackets.
- Run the service. Create your account, show your friends’ availability, deliver your messages, sync your groups. (Performance of our contract with you.)
- Keep people safe. Detect spam, fraud, harassment and abuse, and scan uploaded images for child sexual abuse material as described in our Child Safety policy. (Our legitimate interest in a safe platform, and our legal obligations.)
- Fix and improve things. Read crash reports, measure which features are used, and test improvements — in aggregate wherever possible. (Legitimate interests, or your consent where the law requires it.)
- Talk to you. Send service messages you cannot opt out of, such as security alerts and account notices, and send marketing email only if you asked for it. (Contract for service messages; consent for marketing.)
- Meet our legal duties. Respond to valid legal process and make reports we are required by law to make. (Legal obligation.)
We do not use your personal information to train advertising profiles, and we do not make decisions about you by automated means that produce legal or similarly significant effects.
The commitments we hold ourselves to
- We do not sell your personal information, and we have not done so in the preceding twelve months.
- We do not share it for cross-context behavioural advertising, as those terms are defined under California law.
- We do not show third-party advertising inside the Down2Chill app.
- We do not post, message, or invite anyone on your behalf without you asking us to.
- We do not track your location in the background for marketing purposes.
How location works
Location is optional. The app asks for permission the first time you use a feature that needs it, and your device — not us — decides whether to grant it. You can revoke it at any time in iOS or Android settings, and the rest of the app keeps working.
We use location to place you and your friends on the map and to power the real-time friend view. We do not sell location data, we do not share it with data brokers, and we do not collect it to build an advertising profile.
Cookies on our website
down2chill.com uses two kinds of cookies and nothing else:
- Strictly necessary — these make the site work and remember your privacy choice. They cannot be switched off.
- Anonymous analytics — these tell us how many people visit and which pages they read. They are optional.
There are no advertising cookies on this site. You can change your analytics choice at any time using the COOKIES link in the footer of our homepage.
This page and our Child Safety policy load no analytics and set no optional cookies at all, so you can read them without making a choice first.
The mobile app does not use browser cookies. It stores a small amount of data on your device — a sign-in token and your app preferences — so you do not have to log in every time.
The controls you have
- Edit your profile and visibility at any time from inside the app, including who can see that you are free.
- Turn off location or contacts access in your device’s iOS or Android settings.
- Stop marketing email using the unsubscribe link in any message we send, or by emailing us.
- Get a copy of your data, or ask us to correct it, by emailing [email protected].
You can delete your Down2Chill account from within the app, or by emailing [email protected] from the address on your account. We will confirm and complete the request within 45 days.
When an account is deleted we remove your profile, your availability history and the content you uploaded. Two things survive, and we would rather say so plainly: messages you already sent may remain in the recipient’s copy of a conversation, and any records we are legally required to keep — principally child-safety reports — are retained for as long as the law requires.
If you live in the United States
Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws have specific rights. We extend all of them to every user in the United States, whether or not your state has passed such a law:
- Know and access — what personal information we hold about you, where it came from, why we collected it, and who we disclosed it to.
- Correct — ask us to fix information that is wrong.
- Delete — ask us to erase your personal information, subject to the legal exceptions described above.
- Portability — get a copy in a portable, machine-readable format.
- Opt out — of the sale of personal information, of sharing for targeted advertising, and of profiling. As set out in section 04, we do none of these, so there is nothing to opt out of. We will keep this section accurate if that ever changes.
- Non-discrimination — we will never give you a worse service, or a worse price, for exercising any of these rights.
- Appeal — if we refuse a request, you can ask us to reconsider by replying to our decision. We will respond in writing.
To make a request, email [email protected] from the address on your account, or tell us enough for us to find your account safely. We will verify who you are before we act, because handing your data to the wrong person would be the worse outcome. You may use an authorised agent; we will ask for proof of their authority.
California “Shine the Light”: we do not disclose personal information to third parties for their own direct marketing purposes.
If you are in the UK or the EEA
Under the UK GDPR and the EU GDPR you have the right to access your data, have it corrected or erased, restrict or object to how we process it, receive it in a portable format, and withdraw consent at any time where our processing is based on consent. Withdrawing consent does not affect processing we carried out beforehand.
You also have the right to complain to your data protection authority. In the UK that is the Information Commissioner’s Office; in the EEA it is the supervisory authority for the country you live in. We would appreciate the chance to put things right first.
International transfers. We are based in the United States and your information is processed there. Where we transfer personal information out of the UK or the EEA, we rely on the appropriate safeguards permitted by law, including the European Commission’s Standard Contractual Clauses and the UK Addendum, together with our providers’ own transfer frameworks.
Down2Chill is not for children
You must be at least 13 years old to use Down2Chill, and older where your country sets a higher age for consenting to online services — 16 in much of the EEA unless local law says otherwise. We ask for your date of birth when you sign up in order to enforce this.
We do not knowingly collect personal information from children under 13. If we learn that we have, we delete the account and the information promptly. If you are a parent or guardian and believe your child has created an account, email [email protected] and we will act.
We operate a zero-tolerance policy on child sexual abuse and exploitation, scan uploaded images automatically, and report to the authorities where required. Read the full Child Safety policy, including how to report something to us.
How long we keep things
- Account information — for as long as your account is open, then deleted when you close it, subject to the exceptions in section 08.
- Availability status — this is the point of the product: your status expires when the moment does. We do not keep a permanent record of where you were and who you were with.
- Messages and media — until you or the other participants delete them, or you close your account.
- Technical logs and crash reports — on a short rolling window, typically no more than 90 days.
- Mailing-list email addresses — until you unsubscribe.
- Safety and legal records — for as long as the applicable law requires us to keep them.
How we protect it
Your data is encrypted in transit and encrypted at rest by our infrastructure provider. Access to production systems is limited to the people who need it. We review our security practices as the service grows.
No system is perfect, and anyone who tells you otherwise is selling something. Please use a strong, unique password and be thoughtful about what you share. If you believe your account has been accessed by someone else, or you have found a security problem, write to [email protected] — we take reports seriously and we will not pursue researchers who act in good faith.
If a breach occurs that puts your information at risk, we will notify affected users and the relevant regulators within the timeframes the law sets.
If this policy changes
We will update the effective date at the top of this page whenever we change it. If a change materially affects how we handle your information, we will tell you in the app or by email before it takes effect, and where the law requires it we will ask for your consent rather than assume it.
Talk to us
Privacy questions, data requests, complaints, or anything on this page you think we have got wrong:
D2C HOLDINGS LLC
Email: [email protected]
Related: Child Safety policy