1. Scope and categories of consumer health data

Still is operated by 1601684 B.C. LTD. This policy applies to consumer health data covered by Washington law. Depending on how you use Still, that data may include:

• answers you choose during onboarding about stress, overthinking, desired feelings, reflection needs, or similar wellbeing interests;
• content, reflection, or reminder preferences that reveal or allow an inference about your mental or physical wellbeing;
• interactions with wellbeing-oriented content or breathing and reflection features; and
• technical information, such as an installation identifier or IP address, when reasonably linkable to the information above.

For 13-year-olds in Quebec, a parent or guardian must first complete our human-reviewed consent process. Approval of general content does not enable the optional wellbeing and faith questionnaire. The child can also skip optional personalization after guardian approval.

Still does not collect diagnoses, medical records, prescriptions, precise location, or biometric data, and does not connect to Apple Health or HealthKit.

2. Sources of consumer health data

We receive this information directly from your selections and use of the app. Still may also derive a content preference from selections you make. Before the optional wellbeing-style questions, you can choose “Personalize” or “Skip.” Skip uses general recommendations. Raw onboarding answers and derived personalization tags are stored on your device. Selected content categories are sent to our backend only when needed to return the feed you request. Still does not send those categories for product analytics. Opening a reflection also sends the selected quote, attribution, category and available source details to Convex to return that reflection; it does not send your private answers.

3. Why we collect and use it

We use consumer health data only to:

• provide the personalization, content, and reflection features you request;
• remember your choices on your device;
• deliver the selected content feed and avoid unwanted repetition;
• secure, troubleshoot, and operate those requested features; and
• comply with law and respond to your privacy requests.

We do not use consumer health data for targeted advertising, build an advertising profile, or use it to make decisions about employment, insurance, credit, housing, or healthcare eligibility.

4. Categories shared and recipients

We may share the categories described in section 1, together with technical request information needed to provide the service, with the following processors:

• Convex: backend content delivery, limited app data, security, and storage;
• Cloudflare: image delivery, hosting, network security, request processing, and support email routing;
• Google: support and privacy correspondence and related private case records, if you include health-related information in a request. Please avoid sending unnecessary health details; and
• service providers or authorities only when required by law or reasonably necessary to protect legal rights or safety.

We do not sell consumer health data. We do not share it with data brokers, advertising networks, or social-media advertising platforms. We do not use geofences around healthcare facilities.

5. Your Washington rights

You may ask us to:

• confirm whether we collect, share, or sell your consumer health data;
• provide access to that data and a list of third parties or affiliates with whom it was shared;
• withdraw consent to collection or sharing; or
• delete consumer health data, including by notifying processors and other recipients as required by law.

Email support@stillwidget.app with “Washington health data request” in the subject. You can use the “Privacy or data request” action in the app’s About settings to prepare an email with the installation reference if your request concerns server-side data. The “Stop personalization & erase data” action also clears local personalization data. Server deletion requires ownership verification; the installation reference is a lookup key, not proof of ownership. Check the app’s request status and contact us when verification is needed. We will authenticate and respond without undue delay and generally within 45 days. If reasonably necessary, we may extend that period once by up to 45 additional days and will tell you why. Requests are free up to twice in a 12-month period.

Deletion from an archived or backup system may be delayed until that system is restored, but no longer than six months after authentication. Deleting the app does not itself submit the server deletion described above. OS backups, secure installation references and saved or shared photos may remain. Managing an App Store subscription is a separate action through your Apple ID.

6. Appeals

If we decline your request, you may appeal by replying to our decision or emailing support@stillwidget.app with “Washington privacy appeal” in the subject. We will respond to the appeal within 45 days. If the appeal is denied, you may submit a complaint to the Washington State Attorney General at atg.wa.gov/file-complaint.

7. Changes and contact

We will post material changes to this policy here before collecting or sharing consumer health data for a materially different purpose. Questions may be sent to support@stillwidget.app. 1601684 B.C. LTD. is based in Vancouver, British Columbia, Canada.