Android-specific privacy policy. This policy applies only to Stillpoint package com.ryantinklepaugh.stillpoint. It does not change the iOS app’s privacy policy or receipt history.
Scope and controller
Uncommon Weather LLC controls the processing described here. Contact team@uncommonweather.com. Stillpoint is a private, self-guided reflection journal for putting a looping thought into words, keeping a worry shelf, revisiting it in daylight, and noticing patterns in your own records.
Information handled
- reflection responses, unfinished drafts, completed sessions, personal notes, and optional self-reported intensity scores
- worry-shelf entries, tags, notes, dated daylight outcomes, and locally counted patterns
- breathing-session summaries and user-directed JSON archives
- Google Play and RevenueCat purchase or entitlement metadata, and privacy-minimal legal-choice evidence
This Android release does not request microphone, camera, location, contacts, or notification access. Reflection entry uses the Android keyboard you choose. Opening crisis or support resources launches your selected dialer or browser; Stillpoint does not place calls automatically. Export writes only to a document destination you select.
Product storage and providers
Reflections, drafts, worry-shelf records, outcomes, and settings remain in app-private local storage. Stillpoint does not upload their content to Uncommon Weather, Supabase, RevenueCat, or an AI service. Automatic Android app backup is disabled. The app retains recovery copies when a local write cannot be verified rather than silently discarding your words.
Google Play and RevenueCat process purchases, subscription status, and an anonymous app-user identifier. Supabase receives privacy-minimal legal-choice and security evidence, not reflection or worry content. A keyboard or document provider selected by you may process text or an exported file under its own settings. There is no product-data account, automatic cloud sync, advertising SDK, or product-analytics service.
Legal-choice evidence and abuse prevention
To preserve your choice and prevent forged receipts, the app may send privacy-minimal evidence to Supabase-hosted services: package ID, document versions and hashes, acceptance or withdrawal state, coarse adult age band and role, timestamps, a random installation identifier, request identifiers, an Android Keystore public-key proof, and—when configured—Google Play Integrity verdict material. We also process connection metadata such as IP address, user agent, response status, and rate-limit state for security, reliability, and abuse prevention. We do not send your ordinary product records with legal-choice evidence.
Purchases
Google Play supplies transaction and purchase-token data, and RevenueCat supplies entitlement and offering state. We do not receive your full payment-card number.
Retention and deletion
Local records remain until deleted with app controls, app data removal, or uninstall. Deletion controls remove the corresponding readable records and their local recovery copies; unrelated sections and legal receipts are not removed. A user-directed archive may contain sensitive reflections and remains at the selected destination until removed there. JSON export is a readable archive, not an automatic restore or sync service. An unreadable draft or record is retained for recovery or export, not silently overwritten. Purchase and legal-choice evidence follow their respective service and evidentiary policies.
Server-side legal evidence is retained to prove and honor the choice, withdrawal, integrity, and retry history it records. Security logs are retained only as reasonably needed for fraud prevention, troubleshooting, and legal compliance. Contact us to request access or deletion; we may retain evidence where necessary to establish, exercise, or defend legal claims.
Choices and rights
You can deny optional Android permissions, decline or withdraw legal consent, manage purchases where applicable, and request privacy help. Depending on where you live, you may have rights to access, correct, delete, restrict, object, or appeal. We do not discriminate for exercising a privacy right.
Age boundary
The app is not directed to anyone under 18. We do not knowingly collect a precise birth date through the legal-choice flow.
Security and transfers
We use reasonable technical and organizational safeguards, but no device, network, or storage system is guaranteed secure. Providers may process information in the United States or other countries subject to applicable safeguards.