Privacy Policy

Effective 10 May 2026.

This Privacy Policy explains how StillHearth collects, uses, and protects your information. StillHearth is operated by Evie Maxine ROSE, a sole trader registered in New Zealand, trading as StillHearth (NZBN: 9429049441673).

We have written this policy to be readable. If anything is unclear, email skogsmuset@gmail.com.

1. What data StillHearth collects

Locally stored data

StillHearth stores the following on your device only, using your device's standard local storage. None of this data is sent to StillHearth or any third party other than what is described in Section 2:

• Your name (optional, entered during onboarding).
• Your onboarding responses (life season, motherhood, cycle-tracking preference).
• Your daily notification time preference.
• Verse traces — your one-line reflections attached to specific verses, with dates.
• Saved verses — verse references you have bookmarked.
• Your streak count and last-opened date.
• Daily Bite verse and reflection question for the current day.
• Guided Path progress — which path you are on and which days you have completed.
• A flag indicating whether you have completed onboarding.
• Your premium subscription status (cached locally for display and verified through the Apple App Store purchase system).

What StillHearth does not collect

• Your email address, phone number, or physical address.
• Account credentials — StillHearth has no accounts.
• Your location.
• Your device's unique identifiers for advertising or tracking purposes.
• Analytics or usage telemetry.
• Crash reports beyond what your operating system provides to its developer.
• The content of your verse traces or journal entries — these never leave your device.

2. Third-party services

Apple App Store

If you download StillHearth through the Apple App Store, Apple collects its own data about your download and any in-app purchases. Subscription purchases and restoration are handled by Apple's App Store purchase system. That collection is governed by Apple's privacy policy at apple.com/legal/privacy.

Push notifications

If you enable the daily reminder, StillHearth schedules a local notification on your device using iOS local notification features. This notification is generated and delivered entirely on your device — no notification content is sent to any server.

3. Why we collect what we collect

Data	Purpose	Legal basis (GDPR)
Onboarding preferences	Personalise verse and path recommendations	Consent
Verse traces	Show your reflection history on the home screen	Consent
Saved verses	Surface bookmarked verses on the home screen	Consent
Streak and open date	Track your daily engagement streak	Legitimate interest
Guided Path progress	Resume your path from the correct day	Consent / performance of contract
Premium status cache	Avoid a loading state on every app open	Legitimate interest
App Store purchase status	Verify and restore subscription entitlement	Performance of contract

4. Data retention

All locally stored data remains on your device until you delete it. You can delete it by:

• Uninstalling StillHearth — this removes all locally stored data.
• Clearing the app's storage through your device's system settings, where available.

Apple retains App Store purchase records according to its own policies. You can manage subscriptions through your Apple ID account settings.

5. Your rights

Depending on where you live, you have rights over your personal information under one or more of: the New Zealand Privacy Act 2020, the Australian Privacy Act 1988, the EU/UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA/CPRA).

These rights generally include:

• Access — to find out what data we hold about you.
• Correction — to correct inaccurate data.
• Deletion — to have your data deleted.
• Portability — to receive your data in a machine-readable format.
• Objection — to object to certain processing.
• Withdrawal of consent — to withdraw any consent you have given.
• Complaint — to lodge a complaint with your local privacy regulator.

Because StillHearth stores essentially everything on your own device and holds no server-side records, most of these rights are exercised directly on your device. To make a formal request or ask a question, email skogsmuset@gmail.com and we will respond within 30 days.

Privacy regulators you can contact:

• New Zealand: Office of the Privacy Commissioner — privacy.org.nz
• Australia: Office of the Australian Information Commissioner — oaic.gov.au
• EU: Your national Data Protection Authority
• California: California Attorney General's Office

6. Children

StillHearth is intended for users aged 17 and over, consistent with its App Store rating. We do not knowingly collect information from anyone under 17. If you believe a person under 17 has used StillHearth, contact us and we will take appropriate action.

7. Security

Subscription-related communication with Apple uses standard secure App Store systems. Locally stored data is protected by your device's standard storage security. Because StillHearth does not maintain its own servers, the app does not have a server-side data breach surface.

No system is completely secure. If a security incident occurs that affects your data, we will notify affected users and the relevant privacy regulator where required by law.

8. International transfers

When you make or restore a subscription, purchase data is processed by Apple through the App Store. By using StillHearth+, you understand that subscription data may be processed in countries outside your own according to Apple's policies.

No other data leaves your device or crosses international borders.

9. Changes to this Policy

We may update this Privacy Policy as the app evolves. Material changes will be reflected in the "Effective" date at the top of this page. For significant changes, we will surface a notice within the app on next launch.

10. Contact

Privacy questions, complaints, or requests: skogsmuset@gmail.com