Still · iPhone + Apple Watch

Privacy policy

Still is in development. This policy describes the current app and this website. Last updated: 16 October 2026. Optional remote notifications use the separate service described below. External AI APIs are not connected.

Who operates Still

Oleg Yakushin, Barcelona, Spain. Contact: hello@olegotka.es. This policy covers Still for iPhone and Apple Watch and the Still section at olegotka.es/still/.

Health measurements

With your permission, the app reads available Apple Watch records from Apple Health: heart-rate variability (SDNN), resting heart rate, sleep, breathing rate and recorded workouts. It compares available completed days with your own history. Still does not write to Apple Health. An empty result can mean missing data or restricted reading and is not treated as proof that you are healthy.

Health summaries are stored on your device. We do not receive them on this website, sell them or use them for advertising. The app has no advertising SDK, mandatory account or external health-data backend.

Journal and reflection

Check-ins, optional text and reflection results are kept in protected local app files, excluded from app backup. Your paired iPhone and Watch may synchronize journal content through Apple's WatchConnectivity. This is device-to-device application synchronization, not a Still cloud journal.

On compatible iPhones and languages, Apple Foundation Models generates a short reflection on device from the journal entry you choose. Ready-made questions are used when Apple AI is unavailable, unsupported or declines a request. The first version does not send diary content to an external AI API. Original notes remain available when reflection fails.

Your choices, retention and deletion

You can use check-ins and breathing without Health access. Manage individual Health permissions in Apple Health/system settings. Health data shown in widgets is off by default; enabling it can expose values to somebody near your screen.

The app lets you export journal entries and delete them without a subscription. Deletion removes the entry text, feelings, stress rating and reflection. Minimal random entry IDs and deletion timestamps remain locally to prevent an old offline paired-device copy restoring deleted content. Original Apple Health records are not deleted by Still.

Local records stay until you delete them or remove the app. Delete entries while both paired apps can synchronize if you want the deletion reflected on both devices. Any image or journal file you deliberately export is a separate copy; manage it in the app or service you sent it to.

Subscriptions and reminders

Apple processes App Store payments. Still uses verified StoreKit transactions to decide whether Plus is active. We do not receive payment-card details. Purchase and refund information is also handled under Apple's privacy terms.

RevenueCat helps us validate and record subscriptions and understand purchase, renewal and refund revenue. The iPhone app uses a random anonymous RevenueCat identifier and sends purchase history, product and transaction identifiers, subscription status and technical app/platform information. RevenueCat may process connection information to operate its service. We do not send Health measurements, scores, journal content, notification identifiers, names, email addresses, advertising identifiers or payment-card details to RevenueCat. There is no advertising attribution integration. Apple remains the payment provider; verified Apple access remains available if reporting is temporarily offline.

RevenueCat processes subscription information on our behalf, including on infrastructure in the United States under its applicable data-processing arrangements. See RevenueCat's privacy policy. Subscription records are retained as needed to operate subscriptions, resolve purchase issues and meet applicable legal obligations; deleting local diary entries does not delete subscription records. Contact us for access or deletion requests. Settings shows your anonymous subscription support ID so we can locate the relevant record without requesting your diary.

Reminders are optional and scheduled locally after notification permission. Health measurements and journal text are excluded from reminder content. Remote app news is a separate optional setting, off by default, in builds that support the hosted notification service. When you enable it, Still sends a random installation ID, an installation credential, an Apple notification token, your chosen app language, time zone and a consent revision over HTTPS. We store a hash of the credential and encrypt the token. No Health measurements, scores, journal content, advertising ID, name or email are sent to this service. Apple APNs processes the token and neutral notification content to route a notification. Silent notifications may ask the app to refresh local data; they do not upload Health data.

Notification hosting and deletion

The notification API runs on Vercel and its registry uses Neon Postgres. The API execution region and database are configured in Frankfurt, Germany; provider support, security and infrastructure processing may involve other countries. Providers process technical connection information, including IP addresses, to deliver and secure their services. See Vercel’s privacy notice, Neon’s privacy notice and Apple’s privacy policy.

Still uses registration information only to operate optional notifications and protect the service. Turning off remote news requests deletion of the stored notification token, language and time zone. If offline, the app retries the deletion when reopened. A minimal installation ID, hashed credential and consent revision remain temporarily to reject delayed registration requests. Active registration records and deletion markers expire after 30 days without registration activity, with daily cleanup. A keyed hash of the source IP limits new registrations for one minute and is removed by daily cleanup. Delivery event IDs, type, attempt time and acceptance state are retained for up to 24 hours plus the daily cleanup interval. The application does not log notification tokens, credentials, Health data or diary text; hosting security/access logs and backups follow the providers’ retention processes. Notifications already submitted to Apple may still arrive after you turn the setting off.

This website

The Still website does not access Apple Health, upload diary entries or run advertising/behavioral analytics. It stores only your selected page language in local storage. Its hosting provider, GitHub Pages, processes technical connection/request information to deliver and secure the website. See GitHub's privacy statement for provider processing.

If you choose to email support, we receive the address and content you send. Please do not send detailed medical records or your full diary. Correspondence is retained only as needed to handle the request and applicable legal obligations. Our purpose is responding to your request, not adding you to a marketing list.

Your privacy rights

Where applicable, you may request access, correction, deletion or restriction of personal information we hold, object to processing or request portability. Contact the address above. For local-only app content we cannot read or remotely erase your device; use the app's export/deletion controls. You may also contact the Spanish data-protection authority, AEPD. These rights do not remove obligations to retain information when law requires it.

Updates

Material changes will be explained in the app or on this page before newly introduced processing. There is currently no external AI fallback or uploaded health journal. Contact us if any part of this policy needs clarification.