Privacy Policy

Last updated: 9 September 2026

Stillpoint is built with privacy at its core. This policy explains what data we collect, how we use it, and the choices you have.

Summary

Your journal entries stay on your device. We don't have user accounts. We don't run ads. We don't sell or share your personal data.

Data stored on your device

The following data is created and stored locally on your iPhone, protected by iOS Data Protection encryption:

This data is not uploaded to any server and is not accessible to us. You can export or delete all your data at any time from the app's Settings.

Self-discovery prompt responses (such as "What do you think shifted?") are stored only on your device. They are never sent to our servers and are never used to train any AI model. If you delete the app or your device, these responses are gone with it.

Data sent to our servers

If you have premium access, your gratitude entries and onboarding context are sent to a Firebase Cloud Function proxy, which forwards the request to Anthropic's Claude API to generate personalised AI reflections. This data is:

Our Firebase Cloud Function proxy does not log or store any user data. It forwards the request to Anthropic's API and returns the response directly to the app.

Free users receive pre-written reflections and no data is sent to our servers.

Reflection feedback (optional)

If you long-press a past reflection and tell us how it landed, we send a small piece of feedback to our Firebase server so we can improve the AI reflection prompt. The feedback record contains:

Whichever rating you choose, the switch is shown before anything is sent, and turning it off sends your rating and comment alone. We use this data only to improve the AI reflection prompt. It is not used to train AI models and is not shared with any third party.

Screen Time API

Stillpoint uses Apple's Screen Time API (FamilyControls framework) with individual authorisation. This means:

Location (optional)

Stillpoint can request your approximate location to set the greeting and visual theme in rhythm with your local sunrise and sunset. This:

If you decline, the app falls back to an approximate clock-based schedule that adjusts the greeting and theme at preset hours.

Analytics

Stillpoint uses Firebase Analytics and Firebase Crashlytics to understand how the app is used and to identify crashes. This data is not linked to your name, email, or any account, because the app has no accounts. It includes:

What we want to be straightforward about: these events are recorded against an anonymous identifier that is stable for as long as the app stays installed on your device. That means the record is not only a set of totals. It can show one anonymous device's sequence of events over time, including the feelings and energy levels chosen on different days. We use this to understand whether the app actually helps people over weeks rather than days, which is difficult to learn any other way.

What this record does not contain: anything you write. Your gratitude entries, what you did for yourself, your self-discovery answers and your reflections are never included in analytics. They stay on your device, as described above. The identifier is not linked to your name or email, we do not attempt to work out who a device belongs to, and no advertising identifiers (IDFA) are collected.

This analytics data is retained for a maximum of 14 months, after which it is deleted automatically. See Firebase's privacy documentation.

Bursary (Community Access)

Stillpoint offers a bursary for users who cannot afford a subscription. When you apply for a bursary, we collect:

This data is sent to our Firebase server and forwarded to our team. Your email will only be used for bursary-related communication (and marketing updates if you opt in). The bursary grants 60 days of full premium access. The access expiry date is also stored locally on your device.

Subscriptions

Stillpoint offers three monthly subscription tiers, all handled entirely by Apple through StoreKit and the App Store:

All three tiers provide identical premium features. The different price points exist so you can choose what feels right for you. We do not collect or store your payment information. Subscription management and billing are governed by Apple's terms.

Children's privacy

Stillpoint is suitable for users aged 13 and over. The app stores data locally on the user's device and does not require an account. Parents and guardians can review or delete a user's data at any time using the Export and Delete features in Settings.

Data export and deletion

You can export all your data as a JSON file or permanently delete all data from within the app's Settings screen. Since data is stored locally, deleting the app also removes all data.

Your rights under GDPR

If you are located in the European Economic Area or the United Kingdom, you have the right to access, correct, delete, or export your personal data. Since your data is stored locally on your device, you can exercise these rights directly using the Export and Delete features in the app's Settings.

If you have any questions or wish to exercise your rights, contact us at hello@stillpoint.tools. We will respond within 30 days.

Data controller

The data controller for Stillpoint is Will Perkins, operating as a sole trader based in England. For data protection enquiries, contact hello@stillpoint.tools.

Third-party data processors

When you use premium AI reflections, your session data is processed by:

No other third parties receive your personal data.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy, contact us at hello@stillpoint.tools.