Privacy Policy

1. In short

• Stillpoint has no accounts. Your tasks, projects, tags, focus sessions, session notes and ratings, statistics, achievements and settings are stored only on your device. They are never sent to us.
• If your operating system's backup is on, this data is also in your own iCloud or computer backups (iOS) or in the Android backup in your Google account. You manage those backups; we have no access to them.
• Crash reports (Sentry) and anonymous usage statistics (Aptabase) are off by default. They only run if you turn them on, and you can turn them off at any time.
• Purchases are made through the Apple App Store or Google Play; RevenueCat is used to verify your subscription. We never see your payment details.
• No ads, no tracking. We do not sell or share your data and do not build profiles about you. On iOS we do not ask for App Tracking Transparency permission, because we do not track.

2. Controller and contact

Data controller: Aziz Kurt, Atatürk Üniversitesi Yerleşkesi, İpekyolu Caddesi, Teknoloji Geliştirme Bölgesi A Blok No: 106, 25240 Yakutiye / Erzurum, Türkiye. Email: support@stillpointfocus.app.

In the app, Settings › Support › Contact support opens an email draft with the app version and your Support ID filled in.

3. Data that stays on your device

Widgets, the Live Activity, notifications and quick actions. The Home Screen and Lock Screen widgets, the Live Activity (iOS), the timer notification on Android and the quick actions on the app icon only read this data on your device; none of them connects to a server, and the Live Activity is not updated from a server (push). They can show the title of the task you picked, the time left and today's progress, and they can be visible on the Lock Screen while the device is locked. If you don't want that, remove the widget, or turn off Live Activities (iOS: Settings › Stillpoint) or notification previews on the Lock Screen in your operating system's settings.

This data is under your control:

• Settings › Your data › Export a backup writes everything to a JSON file; the CSV export (Pro) gives you session and task tables. You save or share the files wherever you choose; they never reach us. You can import your backup on another device. Data portability is never a paid feature.
• A task, project, tag or session you delete on its own stays marked on the device for 30 days (for undo and for merging backups); after 30 days what you wrote in it (task title and note, project and tag name, session note) is erased from the device too, the next time the app starts.
• Settings › Your data › Delete all data removes your tasks, sessions, statistics, settings and privacy choices from this device (crash reports and usage statistics turn off again) and replaces your Support ID; only the app's language is kept. Your purchases belong to your store account, so Pro stays on. Deleting the app also removes the data from the device; operating system backups made earlier remain in your account.
• Operating system backups (iOS: iCloud Backup or computer backups; Android: backup to your Google account) are governed by Apple's and Google's terms and managed in their settings.

4. Data that leaves your device

All of the transfers below use encrypted connections (HTTPS). None of them contains your tasks, notes, or project and tag names.

4.1 Purchases and subscription status (Apple, Google, RevenueCat)

• Payment is taken by Apple or Google. Your card and payment details stay with them; we cannot see them.
• RevenueCat (RevenueCat, Inc., USA) is Stillpoint's subscription backend. When the app starts, when you buy and when you restore purchases, the following is sent to RevenueCat:
  • a random, anonymous user ID created by the app on first launch (not linked to your name, email or Apple/Google account),
  • the store's purchase record (receipt or purchase token, transaction IDs),
  • the product, price, currency and store country; purchase, trial, renewal, cancellation and refund dates,
  • platform, operating system and app version, and the device language,
  • on iOS, Apple's per-developer device identifier (identifierForVendor; it is the same only across our apps and changes when you delete them from the device) and the device model; on Android, the device model and brand. RevenueCat's software adds these to every request on its own.
• Purpose: unlocking Pro, showing your subscription's status (renewal, trial, billing issue), restoring purchases, and aggregate revenue reports.
• Legal basis: performance of the contract for what you bought (GDPR Art. 6(1)(b)); legal obligations such as tax and accounting (Art. 6(1)(c)); if you have never bought anything, our legitimate interest in checking the status at launch (Art. 6(1)(f)).

4.2 App updates (Expo)

At launch, the store version asks Expo's update server (EAS Update; 650 Industries, Inc., USA) for small fixes. The request contains a random installation ID created by the app (EAS Client ID), the platform, the app and runtime versions, and the ID of the installed update. Purpose: delivering fixes and seeing which versions are in use. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).

4.3 Crash reports (Sentry) — only if you allow them

If you turn them on in the last onboarding step or in Settings › Privacy › Crash reports, a technical report is sent to Sentry (Functional Software, Inc.; data in the EU data region, Germany) when the app crashes or runs into an error:

• the error type, the technical error message and where in the code it happened (stack trace), and the part of the app where it happened,
• device model, operating system and version, app version and build number,
• the app's technical trail before the error (e.g. screen changes); console output, network addresses and the names of touched elements are removed,
• your Support ID and a random ID the Sentry library creates for this installation.

No name, email, IP address, device name, screenshot, screen recording or performance measurement is sent; IP address storage is turned off in the Sentry settings. Without your permission Sentry is never started; if you withdraw it, it is shut down at once. Purpose: finding and fixing errors. Legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.

4.4 Anonymous usage statistics (Aptabase) — only if you allow them

If you turn them on, only these events, with only this coarse information, are sent to Aptabase (EU data region):

Each event also carries the app version and build number, the operating system and version, the time of the event and a random session ID that is created anew each time the app starts (and renewed after an hour of inactivity). There is no persistent identifier, so events cannot be linked to you. Free text (task names, notes, etc.) cannot be sent; the app drops anything that is not on the allowlist. Aptabase uses the connection's IP address only to derive the country and does not store it. Purpose: seeing which parts of the app are useful. Legal basis: your consent (GDPR Art. 6(1)(a)).

4.5 Support emails

If you email us, we receive your email address, your message and the diagnostics included in the draft (app version and build, operating system and version, Support ID). We use them only to answer you and to carry out your request (e.g. a deletion request). Legal basis: our legitimate interest in handling your request and the exercise of your rights (GDPR Art. 6(1)(f), Art. 6(1)(c)).

4.6 IP addresses

Like any app that connects to a server, Stillpoint reveals your IP address to the services above when it connects to them. Sentry does not store it; Aptabase only derives the country; RevenueCat and Expo may process it in their own logs for the security and operation of their services.

5. What we don't do

• We show no ads; there is no advertising library; the advertising identifier (IDFA/AAID) is not read.
• We do not track you across apps or websites and do not share data with data brokers.
• We do not sell your data; our service providers process data only on our behalf and for the purposes above.
• No location, contacts, photos, camera, microphone or health data is used.
• We make no automated decisions about you and build no profiles.

6. Permissions

Flip mode reads the device's accelerometer on the device only (no Motion & Fitness permission on iOS); this data is neither stored nor sent. Dimming in focus mode only affects the app's own window.

7. How long data is kept

8. International transfers

Our service providers process data in these regions: Sentry EU (Germany), Aptabase EU, RevenueCat USA, Expo USA. Purchases are processed in Apple's and Google's own infrastructure.

Transfers from Turkey abroad are made under Article 9 of the Turkish Personal Data Protection Law (KVKK) on this basis: the standard contracts published by the Turkish Personal Data Protection Board (KVKK Art. 9(4)), notified to the Personal Data Protection Authority within five business days of signing. Transfers from the European Union / European Economic Area to the USA rely on the EU Standard Contractual Clauses in the providers' data processing agreements.

9. Your rights

Depending on where you live, you have the right to know whether your personal data is processed and to access it, to have it corrected or deleted, to restrict or object to its processing, to data portability, to withdraw your consent at any time, and to lodge a complaint with a supervisory authority (GDPR Art. 15–21, 77; KVKK Art. 11).

In practice:

• Data on your device: you view, correct, export (JSON) and delete it in the app (Delete all data). You don't need to ask us; we don't have it.
• Your consent: withdraw it at any time in Settings › Privacy; it takes effect at once and events not yet sent are discarded.
• Your crash reports: write to support@stillpointfocus.app with your Support ID (Settings › Support › Support ID; copy it with the share button next to it), and your reports are deleted.
• Your purchase records: write to us with the order number from the store's receipt (Apple: "Order ID"; Google Play: the order number starting with "GPA."), and your records at RevenueCat are deleted, except those we must keep by law. For the stores' own records, contact Apple or Google.
• Usage statistics: they carry no persistent identifier, so they cannot be matched to you and therefore cannot be found and deleted individually; turning them off stops new events.

Send your requests by email to support@stillpointfocus.app or in writing to Atatürk Üniversitesi Yerleşkesi, İpekyolu Caddesi, Teknoloji Geliştirme Bölgesi A Blok No: 106, 25240 Yakutiye / Erzurum, Türkiye. We answer free of charge within 30 days at the latest. If you are not satisfied with our answer, you can complain to your local data protection authority (in Turkey: the Personal Data Protection Board, kvkk.gov.tr).

10. Children

Stillpoint is designed for users aged 13 and over and is not directed at children. No account is created, and the optional transfers are off by default. If you believe a child under 13 has turned on crash reports or usage statistics, write to us with the Support ID and the reports will be deleted.

11. Security

All transfers use encrypted connections. Data on the device is protected by the operating system's app sandbox and device encryption. Because we hold no copy of your tasks and notes, there is no copy on our servers that could leak. Protecting access to your device and backups (screen lock, account security) is in your hands.

12. Changes

We update this policy as the app changes and renew the effective date above. We announce significant changes in the app or in the store release notes. If a new transfer requires your consent, we ask for it separately in the app and do not start it without your consent.