Privacy Policy for Still

Introduction

Still (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

By using Still, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

• Account Information: Email address and password (for registered users)
• Payment Information: Processed securely through Stripe; we do not store credit card details
• Saved Content: Bible verses you choose to save within the app
• Preferences: Theme settings and app preferences

Information Collected Automatically

• Device Information: Device ID and device fingerprints for guest accounts and account recovery
• Usage Data: AI feature usage counts, app interactions
• Analytics: Anonymous usage statistics to improve our service
• Authentication Data: Email verification status and recovery tokens (temporary)

How We Use Your Information

We use the collected information to:

• Provide and maintain our service
• Process your subscription payments
• Personalize your experience (saved verses, themes)
• Generate AI-powered Bible insights
• Send important service updates and email verification
• Enable account recovery through registered devices
• Manage device access and security
• Improve our app and develop new features
• Comply with legal obligations

Third-Party Services

We use the following third-party services:

• Stripe: For secure payment processing (Stripe Privacy Policy)
• OpenAI: For AI-powered Bible insights (OpenAI Privacy Policy)
• MongoDB Atlas: For secure data storage

These services have their own privacy policies governing the use of your information.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication with JWT tokens
• Regular security updates and monitoring
• Limited access to personal information

Data Retention

• Guest Accounts: Retained for 90 days of inactivity
• Registered Accounts: Retained until account deletion requested
• Payment Records: Retained as required for tax and legal purposes
• Verification Tokens: Automatically deleted after use or expiration (15-60 minutes)
• Device Fingerprints: Retained for account recovery purposes until account deletion

Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Export your saved verses
• Opt-out of marketing communications
• Cancel your subscription at any time

Children's Privacy

Still is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent and believe your child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date.