Privacy Policy
This policy explains what Stillness collects, why, who processes it, and what you can do about it. It applies to the Stillness mobile app and to this website. Plain English, no dark patterns.
What we collect
| Data | Why | When |
|---|---|---|
| Email address | Account creation and sign-in | You enter it (or share via Sign in with Apple) |
| Name (optional) | Personalize the app | Only if you share it via Sign in with Apple |
| User ID (UUID) | Identify your account on our servers | Generated on sign-up |
| Onboarding answers | Tailor program suggestions | You answer them in the quiz |
| Program / session listens | Track your progress, resume where you left off | While you use the app |
| Subscription status | Unlock the full library if you subscribe | When you purchase or restore |
| Crash and performance data | Find and fix bugs | Automatically, when something breaks |
| Device model + OS version | Group crashes by device, support compatibility | Sent with crash reports |
| Push notification token | Send session reminders (only if you grant permission) | If you enable notifications |
| Device identifier (IDFV) and, with your permission, IDFA | Measure how well our ads work — for example, whether someone who saw a Stillness ad on Facebook went on to install or subscribe | From app install onwards. IDFA only if you tap "Allow" on the iOS App Tracking prompt. |
| App events: install, app open, sign-up, subscription purchase (with price + currency) | Measure ad performance and improve our marketing | When the event happens in the app |
We do not collect your location, contacts, photos, audio recordings, browsing history, or any health data outside of what you voluntarily tell us in the onboarding quiz. We do not sell your data.
Advertising and attribution
We use the Meta SDK (Facebook) so we can measure whether our advertising works. When you use Stillness, the SDK tells Meta things like "the app was opened" or "a subscription was purchased", along with your device identifier. Meta uses this to attribute installs and purchases back to ads you may have seen, and to help us optimize future campaigns.
On iOS, we ask for your permission via the App Tracking Transparency prompt before sharing your IDFA. If you decline, we still share privacy-preserving event data with Meta, but it cannot be linked to your advertising identifier.
You can opt out at any time by:
- Turning off "Allow Apps to Request to Track" in iOS Settings → Privacy & Security → Tracking, or
- Reinstalling the app and tapping "Ask App Not to Track" on the prompt, or
- Emailing privacy@stillnessapp.co to request opt-out.
Who processes it
| Processor | What they handle | Where |
|---|---|---|
| Supabase | Account, profile, progress, session content | United States |
| RevenueCat | Subscription receipts and entitlements | United States |
| Sentry | Crash and performance reports | United States |
| Meta Platforms | Ad performance measurement and attribution | United States |
| Apple | Sign in with Apple, push notifications, payments | Per Apple's policies |
How long we keep it
- Account data: kept while your account is active. Deleted within 30 days of you requesting deletion.
- Crash and performance data: 90 days (Sentry default).
- Subscription receipts: kept as long as required by Apple's billing systems and applicable tax law.
Your rights
You can:
- Export your data. Email privacy@stillnessapp.co and we'll send a JSON export within 30 days.
- Delete your account. In the app: Profile → Delete Account. Or email privacy@stillnessapp.co.
- Withdraw consent for analytics or push notifications in your device settings at any time.
Residents of California, the EU, the UK, and Australia have additional rights under their local privacy laws (CCPA/CPRA, GDPR, UK GDPR, Privacy Act). To exercise them, email privacy@stillnessapp.co.
Children
Stillness is not directed at users under 13 (or under the equivalent age of consent in your country). We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we'll delete it.
Changes to this policy
If we change anything material, we'll update the "Last updated" date at the top and notify active users in-app. Older versions are kept at our public repository on request.
Contact
Privacy questions or requests:
privacy@stillnessapp.co.
General contact:
hello@stillnessapp.co.
Paper Plan LLC, the operator of Stillness.