Privacy policy
Stillsea is a daily mood log and a small set of habits. What you log and what you write are personal, so the app is built so that only you can read them. This page says what leaves your phone, what our server can and cannot see, how long anything is kept, and what you can do about it.
Who is responsible
Stillsea is published by the developer named on Stillsea’s App Store page, which is responsible for the data described here (the “controller”). Write to the Support link on Stillsea’s App Store page with any question or request.
Without an account
You can use Stillsea without signing in. Everything then stays on your phone in an encrypted database and nothing is sent to us. If you uninstall the app, that data is gone.
With an account
Signing in with Apple or with an email link lets your data sync between your devices and be backed up. We keep the minimum needed to run an account: an identifier from the sign-in provider, your email address if the provider shares it (Apple may give us a private relay address instead), and when the account was created.
End-to-end encryption
Your moods, habits, check-ins and every line of your log are encrypted on your phone before anything is uploaded. The key is created on your first device and kept in your iCloud Keychain, which Apple syncs between your own devices. Our server stores the encrypted copies, what kind of record each one is and when it changed, and can read none of them. We cannot see your entries, and we could not hand them to anyone else.
The key never reaches our server, not even in a locked form. If you have no iCloud Keychain, the key stays on the one device and the app says so in Settings.
Apple Health
Only if you connect it in Settings, Stillsea reads your sleep, steps, walking distance, exercise minutes and workouts from Apple Health, to fill in a habit (a walk, a move habit, sleep) and to say how your nights went in the week’s sentence. It writes mindful minutes after a breathing session and, if you keep a drink-less habit, the drinks you log. Your nights’ sleep stays on your phone. What a habit records from Health (its minutes, the time you went to bed and woke) syncs only end-to-end encrypted, like everything else. Health data is never sent to Dig deeper or to anyone else, and never used for advertising or marketing. You can disconnect it in Settings and in the Health app.
Dig deeper
Dig deeper is a short conversation with an AI. It asks you once before the first time. When you tap Send, the app sends only what it showed you on the screen before: the word you chose, what it was about, the part of the day, the line you wrote with it if there is one (or, for your week, its one sentence without anything from Apple Health, and how many days each word came up), and the lines you type in that conversation. Our server passes it to Anthropic’s Claude to write the reply and returns it. The server keeps a count of calls per day and nothing else: one per account, to hold the daily limit, deleted the next day, and one total for the whole service, with no account attached. The text is not stored, and your name and account do not travel with it to Anthropic. Anthropic, in the United States, processes the text under its commercial terms: it does not use it to train models and deletes API inputs and outputs within 30 days, unless the law or a breach of its usage policy requires otherwise. Dig deeper never runs unless you tap it, and you can switch it off in Settings.
What we do not do
There are no adverts, no advertising identifiers, no analytics SDK, no tracking across other apps or websites, and no selling or sharing of personal data. Crash reports reach us only through the operating system’s own opt-in, and they never contain your entries.
We use Apple’s privacy-preserving ad attribution to count how many people install Stillsea from our ads; it identifies no one.
Stillsea has no subscriptions and sells nothing inside the app.
Where it is kept
On Stillsea’s own server in the European Union. Everything travels over an encrypted connection. The provider that hosts the server and the one that delivers sign-in emails handle data only to provide those services. Anthropic (Dig deeper) and the email provider may process data in the United States, under the EU standard contractual clauses in their data processing terms.
How long we keep it
- Your account and its encrypted copies: until you delete the account, then removed from our server within 30 days. Nightly backups of the server are kept for 14 days, so a deleted account leaves the last backup at most 14 days after that.
- Sign-in links: they work for 15 minutes and are deleted within a day.
- Sessions: stored scrambled, kept until they expire (90 days after they were issued) and deleted within a day after.
- Dig deeper: the text is not kept by us; the daily count per account is deleted the next day.
- Server logs: the time, the address and the path of each request, to keep the service secure; they never contain your entries and are rotated away within weeks.
Legal basis
We run your account and sync because you asked for them (performing our agreement with you). Dig deeper and Apple Health run only with your consent, which you can withdraw in Settings at any time. Security logs rest on our legitimate interest in keeping the service safe.
Your rights
- Export. Settings › Export produces a JSON file with all your records, made on your phone.
- Delete. Settings › Delete account wipes your phone at once and removes everything held for your account from our server within 30 days.
- Under the GDPR, the UK GDPR and the CCPA you may also ask us to correct data, to explain what we hold, or to stop a use you consented to, and you may complain to your data protection authority. Write to the Support link on Stillsea’s App Store page.
Age
Stillsea is for people aged 16 and over. Under 16, the app stops at its first screen. It is not directed at children, and we do not knowingly hold data about anyone under 16; if you think we do, write to the Support link on Stillsea’s App Store page and we will delete it.
Changes
If this policy changes, the date at the top changes too. Anything that changes what we collect will be shown in the app first.
Contact
Questions about privacy: the Support link on Stillsea’s App Store page.