Privacy Policy

1. Information we collect

Information you provide and sign-in data

We collect information you provide when you create an account, agree to our Terms of Service and Privacy Policy, choose content preferences, change settings or contact us. This may include your email address, a display name if you provide one, preferences, notification choices, support messages, and records of the document versions and time of acceptance.

Sign in with Apple. If you choose Sign in with Apple, we may receive the name and email address you choose to share (which may be an Apple relay address), an Apple-specific account identifier and a sign-in token or similar authentication information. We do not receive your Apple ID password.

Sign in with Google. If you choose Sign in with Google, we may receive information Google makes available according to your choice and settings, such as your name, email address, profile image, a Google-specific account identifier and a sign-in token or similar authentication information. We do not receive your Google Account password.

Facebook Login. If you choose Facebook Login, we may receive information Facebook makes available according to your choice and settings, such as your name, email address if available, profile image, a Facebook-specific account identifier and a sign-in token or similar authentication information. We do not receive your Facebook password.

Email sign-up. If you create an account using email, our authentication system processes your email address and the authentication information needed to create, secure and access your account.

Account and listening activity

We collect information needed to operate and personalise the Service. Depending on the features you use, this may include searches, meditations or sounds selected or played, playback progress, favourites, listening history, streaks or minutes, content preferences, and interactions with Service features.

Device, network and diagnostic information

To operate, secure and improve the Service, we may collect technical information generated by the App, your device and the services that support it. Depending on the production configuration, this may include IP address, device type or model, operating system and App version, language or region, access times, device or application identifiers used for operation or security, network and server logs, and crash, error, performance and diagnostic information. Crash or performance information may be associated with an account or device where reasonably needed to diagnose a problem, protect the Service or prevent repeated failures.

Website, cookies and similar technologies

When you visit our website, we may use cookies, pixels, local storage and similar technologies to operate and secure the site, remember choices, understand traffic and performance, and measure the effectiveness of Still Sky marketing. Depending on the technology used, this may include IP address, browser and device information, referring page, pages viewed and interactions. We will provide any notice, consent or opt-out controls required by applicable law. At launch, we do not use these technologies for cross-site behavioural advertising. If that changes, we will update this policy and applicable controls before activating them.

Purchases and subscriptions

Subscriptions purchased through Apple's App Store or Google Play are processed by the applicable store. Still Sky may receive subscription information needed to confirm access, such as the subscription product, a transaction identifier, purchase, renewal or expiry information, and current subscription status. We do not receive your full payment-card or bank-account details from an app store.

Wellbeing-related information

Still Sky is a general-wellness service, not a healthcare service. We do not ask for medical diagnoses, treatment records, medical records, or Apple Health or HealthKit data. Content preferences and listening activity may nevertheless relate to wellbeing. We use them to provide and personalise the Service, not to diagnose you or create a clinical or medical profile. For information that may be treated as consumer health data under certain U.S. state laws, see our separate U.S. Consumer Health Data Privacy Notice at https://stillskyapp.com/us-consumer-health-data.

2. How we use information

• Provide, personalise, maintain and deliver the Service.
• Create and secure your account, remember settings, and sync progress, favourites and history.
• Confirm subscriptions, unlock paid features and restore purchases.
• Respond to support, privacy, consumer-health-data and grievance requests.
• Send operational messages and, where permitted, Still Sky news or offers.
• Measure performance, diagnose crashes and errors, improve reliability, and develop or improve content and features.
• Create de-identified or aggregated insights about overall usage and content popularity.
• Prevent fraud, abuse and security incidents, comply with law, resolve disputes and enforce our Terms of Service.

Where applicable law requires a legal basis, we process information with consent, as needed to provide the Service you request or perform our agreement, to comply with legal obligations, or on another lawful ground permitted by that law. You may withdraw consent where processing depends on consent, but withdrawal does not affect earlier lawful processing and may make a feature or account unavailable if the information is necessary to provide it.

3. Advertising and marketing

No sale and no cross-app tracking. Still Sky does not sell personal information. At launch, we do not link Still Sky user or device data with data from other companies' apps, websites or offline properties for targeted advertising or advertising measurement, and we do not share personal information with data brokers. We do not give advertising networks your email address, meditation choices or identifiable listening history to create custom or lookalike audiences.

We may use de-identified or aggregated trends across users to understand which categories are popular and to decide what content to create, improve or promote generally. For example, an aggregate trend may show that sleep content is popular. We do not use an identifiable person's listening history to target advertising to that person.

We may promote Still Sky through contextual advertising, app-store advertising, creator or referral campaigns, platform tools that do not require us to disclose your personal information, and privacy-preserving campaign measurement.

We may personalise messages within Still Sky or, with the permissions required by law, send Still Sky email or push messages. You can unsubscribe from marketing emails and change push-notification permissions in your device settings. Essential service messages may continue.

4. How we share information

We disclose personal information only when reasonably needed for the following purposes:

• Service providers that support authentication, database and cloud infrastructure, media delivery, communications, customer support, analytics, diagnostics, performance, fraud prevention and security.
• Apple, Google, Facebook or another authentication provider you choose, to complete sign-in and account security.
• Apple's App Store, Google Play or another authorised app store, for distribution, subscriptions, purchase validation and restoration, and related services.
• Professional advisers, courts, regulators and public authorities when required by law or reasonably necessary to establish, exercise or defend legal claims, or protect rights, safety and security.
• A buyer, successor or new operator if Still Sky is incorporated, financed, reorganised, sold or transferred, subject to Section 12.
• Another person when you direct us to share information or give valid consent.

We require service providers that process personal information for us to protect it and use it only to provide their services or meet legal and security obligations. We do not name infrastructure vendors in this policy because providers may change; the categories and purposes above remain the controlling disclosure.

5. De-identified and aggregated information

We may de-identify or aggregate information so it is no longer reasonably capable of identifying or being linked to a person. We may use and disclose that information for analytics, security, service improvement, reporting and general business or marketing decisions. We take reasonable measures designed to prevent re-identification and do not attempt to re-identify it except where permitted by law for security, quality testing or validating the de-identification process.

6. International processing

Still Sky is operated from India. We and our service providers may store or process information in India and other countries where they operate. Privacy protections may differ between countries. Where applicable law requires it, we use an appropriate transfer mechanism or other safeguard.

7. How long we keep information

We keep personal information only for as long as reasonably needed for the purposes described in this policy. We consider the nature and sensitivity of the information, the duration of your account or subscription, security and support needs, and applicable legal, tax, accounting and regulatory requirements.

After account deletion, we delete or de-identify account information unless retention is required or permitted by law. Limited records may be kept for legal acceptance, subscription or transaction administration, privacy and grievance requests, fraud or security prevention, accounting or tax obligations, and disputes or legal claims. Information may remain temporarily in protected backups until it is overwritten or deleted through normal cycles, subject to any shorter period required by applicable law.

8. Security

We use reasonable technical and organisational safeguards designed to protect personal information, including measures appropriate to the nature of the information and the Service. No system is completely secure, so we cannot guarantee that loss, misuse or unauthorised access will never occur. Where law requires, we will notify affected people and authorities of a qualifying personal-data breach.

9. Your choices and rights

Depending on applicable law, you may have rights to ask whether we process personal information about you, access or receive a copy, correct or delete it, withdraw consent, object to or restrict certain processing, and raise a grievance or complain to a competent authority. Where applicable law specifically requires it, you may also request certain information in a structured, commonly used and machine-readable format (data portability). These rights are subject to identity verification and the exceptions, limits and timelines permitted by applicable law.

We may ask for reasonable information to verify your identity and may deny or limit a request where law allows, including where we cannot authenticate it, a legal exception applies, or the request is manifestly unfounded, excessive or repetitive. We will not unlawfully discriminate against you for exercising a privacy right.

• Account and preferences: review or change settings that are available in the Service.
• Email marketing: use the unsubscribe link in a marketing email or contact [email protected].
• Push notifications: change permissions in the App, if available, or in your device settings.
• Privacy requests: email [email protected] from the address associated with your account and describe the request. U.S. consumer-health-data requests are handled under the separate notice linked above.

10. Account deletion

You may initiate deletion through Settings > Account > Delete Account. Deleting the App does not delete your account. Account deletion is separate from cancelling an app-store subscription, which you should manage through the subscription settings of the store that billed you.

When you request deletion, we will delete or de-identify personal information linked to your account unless retention is required or permitted by law. We may also direct relevant processors to delete information where applicable law requires it.

11. Third-party services

The Service may use or link to services operated by Apple, Google, Facebook or other third parties. Their handling of information for their own purposes is governed by their privacy terms, not this policy. Review those terms before using a third-party sign-in, app-store or linked service. Still Sky remains responsible for its own collection and use described here.

12. Age requirement

Still Sky is intended only for people who are at least 18 years old. We do not knowingly allow anyone under 18 to create an account. We do not ordinarily collect a complete date of birth or government identity document to verify age. If we learn that a person under 18 provided personal information, we will take appropriate steps to delete the account and information, subject to applicable law. If you believe this has happened, contact [email protected].

13. Business changes

If Still Sky is incorporated, financed, reorganised, sold or transferred, personal information may move to the new operator as part of that change. The recipient must handle the information consistently with this policy and applicable law unless it gives legally required notice and obtains consent where required. We will provide additional notice if the change materially affects how your information is handled.

14. Changes to this policy

We may update this policy when the Service, our business or the law changes. We will post the updated policy and revise the date above. If a change is material, we will provide additional notice where appropriate. Where applicable law requires consent for a materially new category, purpose or disclosure, we will request that consent before beginning the new processing.

15. Contact and grievances

For privacy questions, rights requests or grievances, contact:

Still Sky

Email: [email protected]

Please include enough information for us to understand the issue, but do not send passwords, payment-card details, medical records or other information we do not need.