Privacy Policy

1. Who we are

STILL is operated by STILL Technologies, Inc., a Delaware corporation, 1209 Orange Street, Wilmington, Delaware 19801, United States (“STILL”, “we”, “us”). We are the controller of the personal data described in this policy. For any privacy question, contact privacy@still.dating.

2. Data we collect

• Account data. Your email address or the identity returned by the sign-in provider you choose, and the timestamps of account creation and last activity.
• Profile data you publish. Display name, age, pronouns, gender, what you are looking for, headline, about text, prompt answers, interests and a general area label.
• Private profile data. Your date of birth, your phone number and coarse coordinates. These are held in a separate private record and are never shown to other members.
• Photos. Each photo you add is stored twice: the version you uploaded, and a separately generated blurred derivative.
• Personality answers. Your answers to our question set and the trait scores we derive from them, which drive compatibility.
• Interaction data. Vibes, mutual states, game answers, Connections, messages, passes, blocks and reports.
• Verification data. One-time codes sent to your phone are stored only as a hash, with an expiry and an attempt counter.
• Technical and usage data. Device platform, session timestamps, product events and error diagnostics.

We do not buy personal data about you, and we do not run third-party advertising trackers.

3. Why we use it, and on what basis

• To provide the service — building your profile, showing mutually eligible members, running the Vibe ladder, games, Connections and messaging. Basis: performance of our contract with you.
• To keep members safe — phone verification so one person is one account, age enforcement, rate limits, blocking, reports and moderation. Basis: legitimate interests in a safe community, and legal obligations where they apply.
• To improve the product — aggregate, minimal product analytics. Basis: legitimate interests.
• To communicate with you — service notifications about Vibes, games and messages, which you can adjust in your notification settings. Basis: contract and consent where required.
• Sensitive data. Information you choose to publish may reveal your sexual orientation. Where that is treated as a special category of data, we rely on your explicit consent, given by publishing it. You may remove it at any time.

4. Photos and progressive reveal

Our photo bucket is private. Nothing in it is publicly addressable. Before a mutual Vibe, only the blurred derivative can be requested, and only through a short-lived link issued by our server after it checks what the requester is entitled to see. Clear-photo links expire within about five minutes and cannot be issued at all once someone blocks you, a Vibe ends, or a Connection closes.

5. Location

We store deliberately coarse coordinates so we can estimate distance. Exact coordinates never leave our servers and are never returned to another member. Other members see only a general area label.

6. Who we share data with

We share only what is necessary, with processors acting on our instructions: our cloud hosting, database and storage provider; our SMS provider for verification codes; and, if you enable them, push notification and payment providers. We may disclose data where legally required, or where necessary to protect the safety of a member or the public. We do not sell personal data.

Data is processed in the United States and in other countries where our processors operate. Where data leaves your region, transfers rely on the safeguards required by applicable law, such as standard contractual clauses.

7. Retention

• Profile, private profile and photos: kept while your account exists.
• Verification codes: minutes — they expire and are then unusable.
• Messages and interaction records: kept while the Connection or Vibe exists, and cleared or anonymised when you delete your account.
• Safety records — reports, blocks and moderation decisions — are retained for up to three years after deletion so we can continue protecting the people involved and prevent banned members from returning.
• Records we must keep for legal, tax or dispute purposes are kept for the period the law requires.

8. Security

Access to member data is enforced in our database and on our servers, not in the app on your device: browsers cannot query our tables directly, private data sits in separate records, media is private and only ever reachable through expiring links, and every state change in the Vibe ladder is authorised server-side. No system is perfect; if a breach affects you we will notify you and any regulator as required.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, delete or restrict our use of your data, to object to processing based on legitimate interests, and to withdraw consent. Ask at privacy@still.dating; we respond within the period required by law and within 30 days at the latest. You can also complain to your local data protection authority.

10. Children

STILL is strictly for people aged 18 and over. We verify age at sign-up and remove accounts we believe belong to minors. We do not knowingly collect data from children.

11. Cookies and local storage

We use local storage and strictly necessary cookies to keep you signed in and to remember interface preferences. We do not use advertising or cross-site tracking cookies.

12. Deleting your account

You can delete your account from your profile at any time, or start the process without the app on our account deletion page.

13. Changes

When we change this policy we update the date above and, for material changes, notify you in the app before the change takes effect.