Privacy Policy

Who we are

Fog and Iron Labs LLC ("Fog and Iron") operates Still from the United States. For the account tools available today, sign in, open You, and use Download my data or Delete this account. For other privacy requests, email support@fogandiron.com.

Accounts

You create an account using one of the sign-in methods shown in the app. We store your user id, name, email, whether the email is verified, a profile image if the sign-in provider sends one, session tokens, and (for email sign-in) a hashed password — never the password itself. Password-reset links go only to that email and expire in one hour.

What we collect

Information you give us: display name, check-in hour and time zone, optional daily notes and mood, people you name in a private circle (name and relation), an optional emergency card (name, blood type, allergies, medications, conditions, notes), and safety-consent choices.

Information we create: whether you tended each day and the account data needed to keep your private ritual available across devices.

Information from devices: IP address and user agent on a session, approximate time zone, and whether the app is installed on a Home Screen. We do not collect precise GPS, contacts, photos, or the contents of other apps.

How we use it

To run the ritual, keep you signed in, show the in-app check-in prompt you choose, detect clear crisis language so we can show resources, improve reliability, and comply with law. This release does not notify a circle. We do not use your notes or circle names for advertising, sell personal information, or “share” it for cross-context behavioral advertising as those terms are used in California law.

Payments

Still does not offer paid plans or collect card data on this release. If paid plans are added later, the payment processor and its privacy terms will be identified before a checkout is offered.

Processors

Hosting and database providers store the account and ritual. The sign-in service receives what it needs to authenticate you. Resend, our transactional-email provider, receives the account email and password-reset link only when the account holder requests recovery. If Fog and Iron later enables a payment, delivery, or optional companion service, the relevant provider will receive only what is needed for that service under its own terms.

SMS program

Still does not operate an SMS program on this release. It does not collect mobile numbers or send text messages. Any future SMS program will publish its consent, frequency, HELP, STOP, and carrier disclosures before activation.

Mobile information

This release does not collect mobile information for messaging. We will not share mobile information with third parties or affiliates for marketing or promotional purposes.

Opt in and opt out

There is no promotional or alert messaging opt-in or opt-out process on this release. A password-reset email is sent only when an account owner asks for recovery.

Your writing

Notes stay on your account. The private circle does not receive them because this release does not send notices. Crisis resources may appear in the app if your writing matches clear self-harm language. That is not diagnosis or monitoring.

Cookies and sign-in

We use a session cookie (or an equivalent token in the preview window) to keep you signed in. It is necessary to run the account. We do not use advertising cookies or sell analytics to data brokers.

Your rights

You can access and download a copy of your ritual from You (Download my data). You can correct profile fields in You. You can start from nothing, which wipes ritual data on the account. You can delete the account.

If you are in the EEA, UK, or a similar regime, we process this data to perform the ritual you asked for and as needed for security and law. You may have rights to access, correct, delete, restrict, port, or object, and to complain to a supervisory authority.

Deleting your account

In Still: sign in → You → Delete this account. That permanently removes your light, circle, emergency card, invites, notice log, Still+ row on this service, sessions, and sign-in. It cannot be undone.

This release has no paid subscription or delivery processor record to cancel. We may keep a minimal record that an account at an email was deleted, if required to prevent abuse or to honor a later legal request.

Children

Still is not directed at children under 13. We do not knowingly collect personal information from children under 13 (COPPA). If we learn we have, we will delete it. Do not put a child’s contact in a circle.

How long

Ritual data stays while the account does. Free logs are kept for 30 days of lights; Still+ keeps a year. After deletion, we remove service copies as described above.

Security and transfers

Data is stored with our hosting and database providers, which may process it in the United States. No method of transmission is perfectly secure. You are responsible for the email and devices on the account.

Changes

If we change this policy in a material way, we will update the date above and, when required, notify the email on the account.

Questions

Use You in the app. Still is not a medical device or emergency service. In danger, call your local number. In the United States, call or text 988.