Privacy Policy

Last updated: March 4, 2026

Still ("we," "our," or "us") operates the Still mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. Please read this policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information You Provide

When you create an account or use the App, we may collect the following personal information:

• Account Information: Your email address and name when you register for an account.
• Journal Entries: The text content you write in response to daily questions. This constitutes User Content.
• Profile Preferences: Your selected reflection goals (e.g., 30, 60, or 90 days), notification preferences, and other settings.

1.2 Information Collected Automatically

When you use the App, certain information is collected automatically:

• Device Information: Device type, operating system version, and unique device identifiers.
• Usage Data: App interaction data such as features used, session duration, streak data, and crash reports.
• Purchase Information: Records of subscription purchases made through the App, processed by Apple's App Store and RevenueCat (our subscription management provider).

1.3 Information We Do Not Collect

• We do not collect precise location data.
• We do not access your device's contacts, photos, or other personal files.
• We do not use advertising identifiers or engage in ad tracking.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain the App: To deliver the core journaling experience, including generating personalized daily questions and insight reports.
• AI-Powered Features: Your journal entries may be processed by Google's Gemini AI service to generate personalized questions and produce insight reports. This processing is done to provide you with the App's core features. We do not use your entries to train AI models.
• Account Management: To create and manage your user account, authenticate your identity, and process password resets.
• Subscription Management: To manage your subscription status and provide access to premium features through RevenueCat.
• Notifications: To send you daily question reminders if you have opted in to push notifications.
• Improve the App: To understand usage patterns, fix bugs, and improve the user experience.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

3. Data Storage and Security

3.1 Where Your Data Is Stored

Your data is stored using Supabase, a cloud-hosted database platform. Supabase stores data on secure servers with encryption at rest and in transit. Your account credentials are managed through Supabase Authentication with industry-standard security practices.

3.2 Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL.
• Encryption of data at rest on our database servers.
• Secure authentication with hashed passwords.
• Row-level security policies ensuring users can only access their own data.
• Secure storage of sensitive tokens using device-level secure storage (Expo SecureStore).

3.3 Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain certain information for legal or legitimate business purposes.

4. Third-Party Services

We use the following third-party services that may process your data:

4.1 Supabase

We use Supabase for user authentication and data storage. Supabase processes your email, name, and journal entries. For more information, see the Supabase Privacy Policy.

4.2 Google Gemini AI

We use Google's Gemini AI to generate personalized questions and insight reports based on your journal entries. Your journal content is sent to Google's API for processing. Google's API data is processed in accordance with Google's Privacy Policy. We use the API in a way that does not allow Google to use your data to train their models.

4.3 RevenueCat

We use RevenueCat for subscription and in-app purchase management. RevenueCat processes purchase receipts, subscription status, and anonymous app user identifiers. For more information, see the RevenueCat Privacy Policy.

4.4 Apple App Store

Purchases are processed through Apple's App Store. Apple handles all payment processing; we never receive or store your payment card information. For more information, see Apple's Privacy Policy.

4.5 Expo / EAS

We use Expo Application Services for app updates and build distribution. Expo may collect anonymized diagnostic data. For more information, see the Expo Privacy Policy.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With the third-party services listed in Section 4, solely for the purpose of providing the App's functionality.
• Legal Requirements: If required by law, regulation, legal process, or governmental request.
• Safety: To protect the rights, property, or safety of Still, our users, or others.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, in which case your data would remain subject to this Privacy Policy.

6. Your Rights and Choices

6.1 Access and Portability

You have the right to request access to the personal data we hold about you. You can export your journal entries through the App's report and PDF export features.

6.2 Correction

You can update your account information directly within the App's settings.

6.3 Deletion

You may request deletion of your account and all associated data by contacting us at samabuzarifa@gmail.com. Upon receiving your request, we will delete your account and personal data within 30 days.

6.4 Notifications

You can opt out of push notifications at any time through your device settings or the App's settings screen.

6.5 Subscription Management

You can manage or cancel your subscription through your Apple ID account settings or the App Store.

7. Children's Privacy

The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at samabuzarifa@gmail.com.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers operate. These countries may have different data protection laws. By using the App, you consent to such transfers. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information is collected, used, shared, or sold.
• The right to delete personal information held by us.
• The right to opt out of the sale of personal information. We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

To exercise these rights, contact us at samabuzarifa@gmail.com.

10. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on your consent (account creation), contractual necessity (providing the service), and legitimate interests (improving the App).
• Right to Access: You may request a copy of your personal data.
• Right to Rectification: You may request correction of inaccurate data.
• Right to Erasure: You may request deletion of your data.
• Right to Restrict Processing: You may request limitation of how we process your data.
• Right to Data Portability: You may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests.
• Right to Withdraw Consent: You may withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at samabuzarifa@gmail.com. You also have the right to lodge a complaint with your local data protection authority.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the App after changes are posted constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Email: samabuzarifa@gmail.com
• App: Still: know yourself
• Developer: Alaa Abuzarifa