What We Collect
When you use Still, we collect:
- Account information: Email address and display name from Google Sign-In
- Your thoughts: Text content you enter into Still via web or SMS
- Phone number: If you link your phone for text reminders (optional)
- Email content: If you connect Gmail, we scan emails to find bills, deadlines, and appointments (optional)
- Usage data: When you access Still and how you interact with features
How We Use Your Data
- Store and organize: Keep your thoughts and surface relevant information when needed
- AI analysis: Detect patterns, generate insights, and understand context
- Reminders: Send notifications via email, SMS, or push based on your preferences
- Email scanning: If connected, extract important dates like bill due dates and appointments
- Product improvement: Aggregate, anonymized usage helps us improve Still
SMS and Phone
If you link your phone number:
- Your phone number is stored securely and used only to identify your texts and send reminders
- Text messages you send to Still are processed and stored as thoughts
- SMS reminders are sent via Twilio, our messaging provider
- You can unlink your phone and disable SMS reminders at any time in Settings
Gmail Integration
If you connect Gmail:
- Still requests read-only access to your emails
- We scan for bills, appointments, flight confirmations, and other time-sensitive information
- Email content is processed by AI to extract dates and amounts, then discarded
- We do not store full email content, only the extracted reminders
- You can disconnect Gmail at any time in Settings
Note: Gmail access uses OAuth, meaning we never see your Gmail password. You can revoke access from your Google Account settings at any time.
Third-Party Processing
To provide Still's features, your content is processed by third-party services for AI analysis, storage, messaging, and payments.
We do not sell your data. Content is only shared with service providers as necessary to operate Still. Per our AI providers' API terms, data sent via API is not used to train their models.
Data Retention
- Your thoughts are stored until you delete them or delete your account
- Archived thoughts remain unless permanently deleted
- When you delete your account, all data is permanently removed within 30 days
- Extracted email reminders are stored until completed or deleted
Your Rights
You can:
- Access: View all data we have about you
- Delete: Remove individual thoughts or your entire account
- Disconnect: Unlink phone or Gmail at any time
- Export: Request a copy of your data
- Opt-out: Disable any notification type in Settings
Security
We protect your data with:
- HTTPS for web traffic
- Secure authentication via Google Sign-In
- Access controls on stored data
While we take security seriously, no system is 100% secure. We encourage you to use a strong Google password and enable 2FA.
Cookies
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.
Changes
We may update this policy periodically. Significant changes will be communicated via email or in-app notification.