Privacy Policy
The short version: Still. has no sign-up, no password and never asks for your email. What you write and say in your prayer journal stays on your phone. If you use Community, we hold an anonymous community account, and anything you post there, with the display name you choose, is public.
This policy explains what the Still. app (“the app”) collects, why, who helps us run it, and what choices you have. In this policy, “we” means Studio Lab, run by Prashant Chauhan, Malta, the publisher of Still. You can reach us at prashant@studiolab.digital.
Stays on your phone
- Your prayer journal: the words you type and the audio you record.
- Saved verses and which days you read.
- Your reading position, text size and other settings.
None of this is uploaded to us or to anyone else. If you delete the app, it is deleted with it.
What we collect
We keep this to the minimum needed to run the app and send the reminders you ask for.
- An anonymous app ID
- A random code the app creates the first time you open it. It is not linked to your name, email, phone number or any account. We use it to count your daily limits, remember your reminder settings, and send you notifications.
- Notification token
- If you allow notifications, your phone gives us a token so that Expo’s push service can deliver them. You can switch notifications off at any time in your phone’s settings or in the app.
- Device and region details
- Your platform (iOS or Android), time zone, language setting and app version. We use the time zone so reminders arrive at a sensible local time.
- Your reading preferences
- The themes you chose when you started (for example anxiety or gratitude), your chosen voice, your daily verse time, your Bible translation, your free-trial start date, your notification choices, and the label of where you last read (for example “John 11”) and any reading plan you started. These let us pick a fitting verse and write a reminder that makes sense for you. We also record two yes-or-no facts: whether you have ever listened to audio, and whether you have ever saved a prayer. We never see what the prayer says.
- Anonymous usage events
- A small number of events: opening the app, listening, saving a prayer, starting a reading plan, and opening a notification. We use them to decide which helpful message to show you, and to avoid messaging you when you have not asked for it. They contain no verse text and no prayer content.
- Questions you type
- If you use “Ask about this verse”, the question you type is sent with the verse so an answer can be written. Please do not include personal details in questions.
Community
Community lets people like verses and share short reflections (comments) on them. It is optional. Your prayer journal is never part of it. The rules for posting are in our Terms of Use.
- An anonymous community account
- When you use Community (for example opening New reflections or a verse’s comments, liking a verse, or posting), the app signs in to our backend anonymously. This creates a random account ID. It has no email, phone number or password. It is separate from the anonymous app ID above. To limit abuse of anonymous sign-ins, our provider briefly processes your IP address.
- Your display name
- Before you post for the first time, you choose a display name and agree to the Community guidelines. We store the name and when you agreed. The name is shown publicly next to your reflections. You do not have to use your real name.
- Reflections you post
- The text of each reflection, the verse it belongs to, and when you posted it. Reflections are public: anyone using Still. can read them with your display name. Please do not include personal details. We keep a short log of when you post so we can apply posting limits.
- Likes
- Which verses you liked and when. Others see only the total number of likes on a verse, not who liked it.
- Reports and blocks
- If you report a reflection, we store which one, the reason you chose and when. If you block someone, we store who you blocked. Reports and blocks are private: the other person is not told. We review reports within 24 hours, and we remove content and stop accounts from posting when they break the Community guidelines.
What we do not collect
- No real name, email address, phone number, address or contact list. (In Community you choose a display name, which can be anything within the guidelines.)
- No precise location.
- No advertising ID. We show no ads and we do not track you across other apps or websites.
- No payment details. Subscriptions are handled entirely by Apple or Google. We are told whether your subscription is active, never your card.
Who helps us run Still.
We use a small number of service providers. Each receives only what it needs to do its job.
- Supabase hosts our backend, database and sign-in: your anonymous app ID, settings, usage events, saved explanations, and, if you use Community, your anonymous community account, display name, reflections, likes, reports and blocks. It processes this on our behalf.
- Anthropic (Claude) writes the plain-English explanations and scene descriptions. It receives the verse, the surrounding chapter text, and any question you typed. It does not receive your app ID, your journal or your name.
- Deepgram turns verse text into spoken audio. It receives the verse text only.
- Expo delivers push notifications. It receives your notification token and the message.
- Apple and Google process subscriptions and purchases under their own privacy policies.
We do not sell your data and we do not share it for advertising.
Why we use your information
- To provide the app: reading, audio, explanations, search and your preferences.
- To send the reminders and messages you have allowed (our legitimate interest in running the service you asked for, and your consent for notifications).
- To run Community: show reflections and like counts, show your display name next to what you post, and keep Community safe by acting on reports, honouring blocks and stopping people who break the guidelines from posting (our legitimate interest in a safe service, and the guidelines you agree to before posting).
- To limit abuse and control costs, for example daily limits on AI explanations and audio per app ID.
- To keep the app working and improve it, using anonymous usage events.
How long we keep it
- Anonymous usage events: kept only as long as needed to run the service, and deleted on request.
- Your device record (app ID, settings, notification token): kept only as long as needed to run the service, and deleted on request.
- Saved explanations are about verses, not about you, and are not linked to your app ID.
- Community data (your community account, display name, reflections, likes, reports and blocks): kept until you delete it in the app or ask us to. A reflection you delete is removed at once. Reflections hidden after reports are kept hidden until we review them, then removed or restored. If you delete a hidden reflection yourself, it is removed at once.
Your choices and rights
You decide what the app can do on your phone:
- Turn notifications off in your phone’s Settings, or choose which kinds you want in the app.
- Delete your journal entries one by one in the app, or delete the app to remove everything stored on your phone.
- Delete any reflection you posted, unlike a verse, or block and unblock people, at any time in the app.
- Delete all your Community data in the app: Settings > Delete my community data.
Wherever you live, you can ask us to tell you what we hold, correct it, or delete it. If you live in the European Economic Area, the United Kingdom or California, the law gives you specific rights, including access, correction, deletion, restriction, objection, and moving your data. You also have the right to complain to your local data protection authority (in Malta, the Office of the Information and Data Protection Commissioner). We do not sell or share personal information as those terms are defined under California law, and we do not make decisions about you by automated means that have legal effects.
How to delete your data
Community data: in the app, go to Settings > Delete my community data. This deletes your anonymous community account together with your display name, reflections, likes, reports and blocks. It cannot be undone, and it does not touch your journal or saved verses. If the app tells you something could not be removed straight away, email us and we will finish it within 30 days.
Everything else: email prashant@studiolab.digital with the subject “Delete my data” and, if you have it, your anonymous app ID. We will delete the server record linked to that ID, confirm by email, and do this within 30 days. Because the ID is random and not tied to your name, it is how we find your record. If you do not have it, write to us anyway and we will tell you what we can do. Your journal is on your phone and is deleted when you delete the app.
Children
Still. is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has used the app and you want the record removed, write to us.
Where data is processed
Our providers may process data in the United States and other countries. Where required, we rely on the safeguards those providers offer, such as standard contractual clauses.
Security
Data is sent over encrypted connections. Our database is private: access is limited by our own server functions and by row-level rules, so the app can read only public Community content and your own records. No system is perfectly secure, but we limit what we collect so there is little to lose.
Changes
If we change this policy in a way that matters, we will update the date above and, for significant changes, tell you in the app.
Contact
Questions about privacy: prashant@studiolab.digital.