Privacy Policy

Effective 31 October 2026 · Applies to the Stillside app and this website

1. Who we are

Stillside is made and published by Curtis Hunter, trading as Westflame, a sole trader established in the United Kingdom. Westflame is the data controller for the personal data described in this policy.

We are registered with the UK Information Commissioner's Office.

2. What we collect

We collect what the app needs to work, and the minimum we need to improve it. Here is everything, grouped by where it comes from.

Your account

Stillside asks you to sign in before you use it, because your practice is backed up to your account (see below). Sign-in is with Apple, with Google, or with your email address and a one-time code we send you. There are no passwords anywhere in Stillside.

When you sign in we receive and keep:

• a unique account identifier;
• your email address — from Apple or Google if you sign in with them (Apple's Hide My Email works with Stillside), or the address you typed if you sign in by code.

We do not ask for your real name, date of birth, phone number or a photo.

Your practice, backed up to your account

Your practice lives on your phone and is backed up to your account so it survives a new phone or a re-install. The backup holds: your streak (current count, best, freeze days), your totals (sessions and time), your daily target, and a log of your sessions — for each one, the date, the length, and whether it was a timer sit or a guided session. It does not hold anything you felt, said or wrote; Stillside never asks for any of that.

How you use the app (analytics)

We use Mixpanel, an analytics service, to see how Stillside is used so we can improve it. The app sends events such as: the app opened, an onboarding screen was viewed, the subscription screen was shown, a trial started, a purchase completed, a session was played, a reminder prompt was shown or answered. Events are linked to your account identifier so we can count people rather than taps. They include which content was played (by its name in our catalogue) and your choices in onboarding — never free text, never your email, never your precise location. IP-based geolocation is turned off. We do not use the Apple advertising identifier, and the app will never show you an App Tracking Transparency prompt, because it does not track you across other companies' apps.

Subscription status

Whether you have an active trial or subscription, which plan, and the renewal date. This comes from Apple through RevenueCat, our subscription infrastructure. Your RevenueCat record is tied to your account identifier so your subscription follows your account. Apple takes the payment; we never see your card number or billing address.

Audio streaming records

Guided sessions stream from our server through short-lived, signed links. To keep this fair and prevent abuse, our server keeps per-account metering: how much audio your account has fetched and how many requests it has made. These are counters tied to your account identifier, not a listening diary; the practice log described above is the only record of what you played, and it stays in your backup.

Support messages

Anything you send to hello@stillsideapp.com, including your email address.

Crash reports

We do not use a crash-reporting service. If you have allowed your iPhone to share analytics with developers, Apple passes us crash logs through the App Store. You can turn that off in your iPhone settings.

3. What we do not collect

• No advertising, and no ad SDKs in the app.
• No cross-app tracking and no advertising identifier.
• No health data: Stillside does not read or write Apple Health (HealthKit).
• No location, contacts, photos or microphone. The app plays sound — the bell, a guide's voice, breathing cues — but it never records anything.
• No free-text journalling, mood logging or anything of the kind: the app does not ask, so there is nothing to collect.

4. Why we use it, and the legal basis

We do not use your data for advertising, we do not sell it, and we do not share it with data brokers.

5. Third parties who process data for us

These providers process data only to provide their service to us, under contracts that restrict what they can do with it.

We may also disclose data if the law requires it, or to protect our rights or the safety of users.

6. International transfers

Your account and practice data is stored in our database provider's Canada region; Canada has a UK adequacy decision for commercial organisations. Analytics data is processed on Mixpanel's EU servers. RevenueCat, Vercel, Apple and Google may process data in the United States. Where data leaves the UK we rely on safeguards recognised under UK GDPR: an adequacy decision for the destination, the UK Extension to the EU–US Data Privacy Framework for certified providers, or the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses. You can ask us for details of the safeguard used for a particular provider.

7. How long we keep it

• Account and practice data (identifier, email, the practice backup, audio metering): while your account exists. Deleting your account removes it (section 8).
• Analytics events: kept in Mixpanel until you ask us to delete them; deleting your account disconnects them from you.
• Subscription records: as long as needed to manage your subscription and to meet UK accounting and tax rules — six years after the last transaction.
• Support emails: up to 24 months after the conversation ends.
• Backups: our database provider keeps rolling backups for a limited period; deleted data drops out of them within that window.

8. Deleting your account and data

Open Settings in the app and choose Delete account. It is not hidden and it does not require emailing us. Deletion is a hard delete on our servers: it removes your account record, your email, your practice backup and your audio metering counters, and revokes your Sign in with Apple connection. The app only reports the deletion as complete when the server has confirmed it. The practice data on the phone itself is cleared as part of the same flow.

Deleting your account does not cancel a subscription. Subscriptions are managed by Apple; see the Terms for how to cancel first.

If you cannot access the app, email hello@stillsideapp.com and we will delete your account for you once we can confirm it is yours.

9. Notifications

The daily reminder is optional and is a local notification scheduled on your phone. You choose whether to turn it on, and iOS asks for permission first. No notification data is sent to us, and we do not send marketing push notifications.

10. Your rights

Under UK GDPR (and, if you are in the EEA, the EU GDPR) you can ask us to:

• give you a copy of the personal data we hold about you (access);
• correct data that is wrong (rectification);
• delete your data (erasure);
• limit how we use it (restriction);
• send your data to you or another service in a usable format (portability);
• stop using your data where we rely on legitimate interests, including analytics (objection); and
• withdraw consent where we rely on it.

Email hello@stillsideapp.com. We answer within one month. We may ask you to confirm you control the account before acting.

If you are unhappy with how we handle your data you can complain to the UK regulator, the Information Commissioner's Office: ico.org.uk/make-a-complaint, or by phone on 0303 123 1113. We would appreciate the chance to resolve it first. If you live in the EEA you can also contact your local data protection authority.

11. Children

Stillside is for people aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has created an account, email us and we will delete it. Our Terms say the same: 16 and over.

12. The website

This website is a static site. It sets no cookies and runs no analytics or advertising scripts. Our hosting provider, Vercel, keeps standard server logs (IP address, browser, pages requested) for a short period for security and reliability.

13. Security

Data in transit is encrypted with TLS. Data at rest with our providers is encrypted. There are no passwords in Stillside — sign-in is handled by Apple, Google, or a short-lived emailed code — so there is no Stillside password to steal. Access to your data on our servers is restricted to your own signed-in account, guided audio is served through short-lived signed links, and access to production systems is limited to the founder. No system is perfectly secure; if a breach affects your data we will tell you and the ICO as the law requires.

14. Changes to this policy

If we change this policy in a way that matters to you, we will show a notice in the app or email you before the change takes effect. The date at the top always shows the current version.

15. Contact

Curtis Hunter, trading as Westflame · Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, United Kingdom · hello@stillsideapp.com