Chill Pandas — Privacy Policy

Last updated: May 29, 2026

This Privacy Policy explains how Vora Labs Inc. ("Vora Labs", "we", "us", "our") handles personal information across the Chill Pandas brand — including our website at chillpandas.fun (the "Website") and chill mind, our breathing app inside Telegram (the "App"). chill mind runs inside Telegram, so your use of Telegram is also governed by Telegram's own privacy policy.

We keep data collection light. We don't sell your data, we don't show ads, and (in the App) your mood logs and session history stay on your device.

1. The Chill Pandas website

When you visit chillpandas.fun, our hosting provider records basic, aggregated analytics — such as page views, approximate location (country), device type, and the site you came from — to help us understand traffic and improve the site. The Website does not ask for your email address or other personal details, and we don't use third-party advertising cookies.

2. The chill mind app

The rest of this policy describes information handled by the chill mind app.

From Telegram, when you open the app: your Telegram numeric user ID, your Telegram username (if you have one), and your Telegram first name. We do not receive your email address or phone number from Telegram.

Information you create by using chill mind (stored on our servers):

• streak data — your current streak, day count, check-in dates and times, and streak milestone timestamps;
• activity events — records that you completed a breathing session, logged a mood, completed a daily check-in, or earned points, with timestamps and point amounts (these do not include the specific mood you chose — see "On your device" below);
• your chill points balance, levels, cosmetic items owned, and season pass status;
• your preferences — chosen chi character, custom character name, chi mode, and whether you've opted into daily reminders;
• referrals — if you invite someone or join via an invite, the Telegram IDs of the inviter and invitee and the referral status;
• promo / claim codes you redeem, and when.

Payment information. When you buy something with Telegram Stars, we store a Telegram payment charge ID, the item purchased, the amount in Stars, and refund status. Telegram processes the payment — we never receive or store your card or financial-account details.

Technical information. We temporarily store IP addresses to rate-limit sign-ins and prevent abuse. If you've opted into daily reminders, we keep a log of the reminders we send, including whether delivery succeeded.

On your device (not on our servers). Your mood selections (how you felt before and after a session) and your private session "memory" log are stored locally on your device. If you clear your app data or device storage, that history is gone.

App analytics. We use PostHog to understand how chill mind is used. It records app events such as page views and product interactions (completing a session, earning points, leveling up), associated with your Telegram user ID. We've configured PostHog not to store its tracking data in cookies on your device. PostHog processes this data in the United States.

3. How we use information

We use the information above to: run our Services and core app features (sessions, streaks, points, levels, cosmetics, purchases); send the daily reminder if you opted in; operate referrals and promo codes; prevent abuse, cheating, and fraud and keep our Services secure; and understand usage so we can improve. We do not sell your personal information and we do not use it for third-party advertising.

4. Who we share information with

We share information only with service providers ("sub-processors") that help us run our Services:

• Telegram — the platform the App runs on; handles sign-in, payments (Stars), and delivery of reminder messages. Governed by Telegram's privacy policy.
• Supabase (via Lovable Cloud) — hosts the App's database and backend.
• Lovable — hosts the Website and the App, and provides the Website's aggregated analytics.
• PostHog — app product analytics (United States).

We may also disclose information if required by law, or to protect our rights, our users, or the public.

5. Data retention

We keep your information for as long as your chill mind profile is active. IP addresses used for rate-limiting are kept only briefly. If you ask us to delete your data, we'll do so as described below, except where we must keep certain records (for example, payment and refund records) to comply with the law.

6. Your choices and rights

• Reminders: opt out of daily reminders any time in the app.
• Local data: clear your on-device mood and session history by clearing the app's data on your device.
• Access and deletion: ask us for a copy of the information we hold about you, or ask us to delete it, at support@vora.xyz. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

7. Children's privacy

Our Services are not directed to children under 13 (or the minimum age in your country). We don't knowingly collect information from children under that age. If you believe a child has provided us information, contact us and we'll remove it.

8. Security

We use reasonable technical measures to protect your information, including access controls on our backend. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

9. International transfers

Some of our service providers (such as PostHog and Supabase) process data in the United States. By using our Services, you understand your information may be processed in countries other than where you live.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date above.

11. Contact

Questions about your privacy or this policy? Contact us at support@vora.xyz.