Privacy Policy
This policy explains what Stillness collects, why, who processes it, and what you can do about it. It applies to the Stillness mobile app and to this website. Plain English, no dark patterns.
What we collect
| Data | Why | When |
|---|---|---|
| Email address | Account creation and sign-in | You enter it (or share via Sign in with Apple) |
| Name (optional) | Personalize the app | Only if you share it via Sign in with Apple |
| User ID (UUID) | Identify your account on our servers | Generated on sign-up |
| Onboarding answers | Tailor program suggestions | You answer them in the quiz |
| Program / session listens | Track your progress, resume where you left off | While you use the app |
| Subscription status | Unlock the full library if you subscribe | When you purchase or restore |
| Crash and performance data | Find and fix bugs | Automatically, when something breaks |
| Device model + OS version | Group crashes by device, support compatibility | Sent with crash reports |
| Push notification token | Send session reminders (only if you grant permission) | If you enable notifications |
We do not collect your location, contacts, photos, audio recordings, browsing history, or any health data outside of what you voluntarily tell us in the onboarding quiz. We have no advertising SDKs. We do not sell your data. We do not engage in cross-app tracking.
Who processes it
| Processor | What they handle | Where |
|---|---|---|
| Supabase | Account, profile, progress, session content | United States |
| RevenueCat | Subscription receipts and entitlements | United States |
| Sentry | Crash and performance reports | United States |
| Apple | Sign in with Apple, push notifications, payments | Per Apple's policies |
How long we keep it
- Account data: kept while your account is active. Deleted within 30 days of you requesting deletion.
- Crash and performance data: 90 days (Sentry default).
- Subscription receipts: kept as long as required by Apple's billing systems and applicable tax law.
Your rights
You can:
- Export your data. Email privacy@stillnessapp.co and we'll send a JSON export within 30 days.
- Delete your account. In the app: Profile → Delete Account. Or email privacy@stillnessapp.co.
- Withdraw consent for analytics or push notifications in your device settings at any time.
Residents of California, the EU, the UK, and Australia have additional rights under their local privacy laws (CCPA/CPRA, GDPR, UK GDPR, Privacy Act). To exercise them, email privacy@stillnessapp.co.
Children
Stillness is not directed at users under 13 (or under the equivalent age of consent in your country). We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we'll delete it.
Changes to this policy
If we change anything material, we'll update the "Last updated" date at the top and notify active users in-app. Older versions are kept at our public repository on request.
Contact
Privacy questions or requests:
privacy@stillnessapp.co.
General contact:
hello@stillnessapp.co.
Paper Plan LLC, the operator of Stillness.