Stillae Privacy Policy
Ryoma Services LLC · Last updated November 2026
The short version
Stillae exists to help you notice and relieve stress — not to harvest your data. We collect the minimum, keep it yours, and never sell it. We do not use your health data for advertising.
Health data
With your permission, Stillae reads heart rate and heart-rate variability from Apple Health (or a Bluetooth heart-rate device you connect) to detect stress and measure how well relief exercises work for you. If your Apple Health profile includes menstrual cycle data, Stillae reads it on your device to adjust your stress baseline for cycle phase; cycle data is never stored on our servers. Raw biometric streams are processed on your device. Apple Health data is never sold, never used for advertising or marketing, and never shared with third parties.
If you connect Whoop, Oura, or Garmin, that heart rate and HRV are used for your stress load. For Whoop and Oura, our server retrieves your daily recovery (HRV and resting heart rate) from their APIs using access tokens stored server-side and tied to your anonymous identifier. Garmin data comes in through Apple Health and Garmin Connect. Disconnect Whoop or Oura any time in Setup; disconnecting deletes the tokens.
Calendar data
If you enable calendar-aware relief, Stillae reads event titles and times on your device to schedule reminders. Calendar data never leaves your device.
What we store
Your session history, detected stress events, daily summaries, and settings are stored on your device and backed up to our servers as an encrypted-in-transit snapshot tied to an anonymous identifier — no name, email, or account required. You can erase everything, on device and server, from Setup → Erase all data at any time.
Product analytics
If analytics are enabled for this build, Stillae sends product analytics to PostHog — named product events (first open, onboarding, paywall, purchase, trial start, reset, sync, and whether an iOS install came from an Apple Search Ad) — and the IP address is discarded. Those events include an analytics identifier stored on your device, the app version, and whether the install is TestFlight, a sandbox build, or the App Store. On our App Privacy label, product interaction is linked to you, used for analytics, and not used for tracking across other companies' apps. Events do not include heart rate, heart-rate variability, stress scores, cycle or sleep data, or counts estimated from them. We do not read Apple's advertising identifier, and we do not show an App Tracking Transparency prompt. On the first iOS launch we ask Apple if this install came from an Apple Search Ad. That request uses Apple's attribution token, which is not the advertising identifier. The token is sent only to Apple and is not stored in our analytics. When Apple names a campaign, we keep the campaign, ad group, and keyword ids. RevenueCat receives the same token so a trial or purchase can be tied to that campaign.
Purchases
Subscriptions and one-time Lifetime purchases are processed by Apple. We use RevenueCat to manage entitlement status; it receives your anonymous app identifier and purchase receipts, never your health data.
Contact
Questions or data requests: privacy@ryoma.services