Who we are and what this covers
stillUp operates from Georgia, United States. This policy applies to the stillUp mobile app, website, and support communications. Questions or privacy requests may be sent to admin@stillupapp.com.
stillUp is intended for adults in the United States who are 18 or older. We do not knowingly collect personal information from someone under 18. If you believe a child has created an account, contact us so we can review the situation.
Information we collect
Account and profile information
We process the email address and account identifiers used to create or sign in to an account. If you choose Apple or Google sign-in, we receive the account information those services provide for sign-in, such as a provider identifier and email address. We also process the profile information you provide, including your display name, username, selected city, profile photo, and optional menopause stage. A profile photo is optional and is selected through your device's photo picker. If you choose a menopause stage, it is shown on your profile card to authorized members. You can change it or remove it by choosing “Prefer not to share” and saving your profile.
You choose whether to upload a profile photo using the device photo picker. The app prepares a cropped, resized copy for your profile; it does not upload your whole photo library.
Community activity and content
We process your awake status, presence and other activity needed to show availability in the community. We process direct messages, room messages, conversation requests, blocks, mentions, message read status, reports, and any report reason or selected message content you choose to submit. A report also includes information that identifies the relevant account and conversation. Messages may contain personal or health-related information that you choose to share. We can also receive information about you from other members, such as mentions or reports they submit.
Room messages are automatically checked for certain self-harm-related phrases to show a private support-resource note to the author. The note is shown only to that author in the app; it is not part of public room history or administrator room search. This feature is not clinical assessment or emergency monitoring.
Device, notification, and support information
We process notification permissions and a device push token when you enable notifications, along with technical and operational information used to run, secure, and troubleshoot the service, such as app, device, connection, and error information. The app stores its sign-in session token in secure storage on your device. We process the contents of emails you send to support and information you include in them.
Apple membership information
stillUp does not currently offer subscriptions or in-app purchases, so we do not receive this information today. If subscriptions are enabled in the future, we receive Apple subscription identifiers and status, including transaction and original transaction identifiers, product, purchase and expiration dates, offer information, refund or revocation status, and an account token linking the purchase to your stillUp account. We use these records to verify membership, restore purchases, prevent purchase reuse across accounts, and handle refunds and subscription support. Apple handles payment details; stillUp does not receive your payment-card number.
Website information
The static website currently includes no analytics or advertising scripts and uses self-hosted fonts. Hosting and authentication services can still process network information, such as IP addresses and request metadata.
Location
If you choose Use my location and grant permission, the app accesses your current device location to suggest a nearby city on your device. stillUp saves the city you confirm, not device coordinates or location history. You can choose a city manually without location permission.
How we use information
We use information to create and maintain accounts; provide profiles, city-based discovery, conversations, rooms, and notifications; deliver requested support; protect members and the service; investigate reports; moderate rooms; prevent abuse; and maintain and improve the service. We may use account, activity, and technical information to enforce our community rules and to diagnose service problems.
Who can see information
Other members
Information you place in your profile, including your selected city and photo, can be shown to authorized members through the app. Direct messages are available in the app to the people in that conversation. Room messages are community content: active members can view available room history, and members who join a room can post and receive its updates. A recipient or other member can copy, screenshot, or share information they can see.
Moderators and operators
Administrators can search, review, and remove public room messages to moderate the community. Their moderation tools do not let them browse private direct-message conversations or author-only support notes. When you make a report, administrators can review the reason, relevant account and conversation information, and only the message content you explicitly submit with that report.
Direct messages and room messages are encrypted while sent and stored, but they are not end-to-end encrypted. stillUp's backend can read message content, and people with authorized operational access to stored content can technically access it when necessary to operate or secure the service.
Service providers
We use Amazon Web Services for core infrastructure, data storage, authentication, and related service operations. We use Expo's push service, Apple Push Notification service on iPhone, and Firebase Cloud Messaging (a Google service) on Android to deliver device notifications. On Android, the community map is displayed with Google Maps, which receives the device and network information needed to show the map under Google's own privacy policy; stillUp does not send Google your messages or profile. We also use service providers that support our email and support mailbox. Those providers process information as needed to provide their services. Generic notifications are designed not to include message text.
If you choose Apple or Google sign-in, those providers handle that sign-in under their own privacy policies and provide us the information needed to connect the account. We do not sell or rent member information, use it for targeted advertising, or send member content to outside analytics or AI services. The services described above process information to provide stillUp and support your use of it.
We may also disclose information when reasonably necessary to protect people, address fraud or abuse, comply with applicable law, or respond to a valid legal process.
Retention and account deletion
We keep direct messages without an automatic age-based expiry while your account remains active, unless they are removed through account deletion or another applicable deletion request. Room messages stop appearing in application history after 30 days. Database cleanup is eventual, and backups can retain copies beyond the application-history window. Deleting a room triggers cleanup of its room data, but backups can retain copies under their configured lifecycle.
How to delete your stillUp account. In the stillUp app, open the Profile tab and scroll to the account deletion section, then follow the steps to confirm with the code we email you. If you no longer have the app, email admin@stillupapp.com from the email address on your account with the subject “Delete my stillUp account.” What is deleted and what is kept is described below.
You can request account deletion from within the app, including if you have not finished setting up a profile. We verify that the request comes from you. Once accepted, your account loses community access and we remove associated account information, profile photos, your messages, and related personal data from active systems within 30 days. Your conversation partners may retain their own messages in a read-only conversation, but your messages and profile are removed. Disabling an account for moderation is different from deletion. We delete reports involving a deleted account unless a specific legal requirement requires retention; other resolved reports expire after 90 days. Managed database recovery copies expire within 35 days after the relevant data is removed from the active database. Copies saved independently by other members are outside our control. Support correspondence and any operator-created copies are handled through our privacy-request process. We retain only the restricted records needed to complete deletion, prevent deleted data from being restored, prevent purchase reuse as described below, or satisfy a specific legal requirement.
After account deletion, we retain a restricted record of the Apple subscription’s original transaction identifier and environment, deletion time, a deleted-status flag, and a one-way hash of the former account identifier. We keep this record indefinitely to prevent the same purchase from being attached to a different account after deletion. The retained record does not contain your profile, messages, payment details, purchase receipt, signed transaction, or Apple account token. Ordinary subscription entitlement records are removed with your account. Deleting your stillUp account does not cancel your Apple subscription; manage or cancel it in your Apple Account subscription settings.
Your choices and requests
You can update profile information in the app, choose whether to show an awake status, control notification and location permissions through your device settings, block members, report concerns, and request account deletion. You can select a city manually and use the app without location permission. Blocking someone does not remove information they already received or copied.
For access, correction, deletion, withdrawal of consent, or questions about how we handle your information, contact admin@stillupapp.com. We may ask for information reasonably needed to verify your identity and process your request. Do not email passwords, sign-in codes, or unnecessary health details. We respond within the time required by applicable law. If we cannot fulfill a request, we explain the reason and how to ask us to review that decision. Withdrawing permission or deleting information needed to operate an account may prevent us from providing the affected features. These choices do not limit other rights you may have under applicable law.
Consumer health data
For more about health-related information, its sources and recipients, and how to exercise your rights, see our Consumer Health Data Privacy Policy.
Security
We use safeguards intended to protect information, including encryption in transit and at rest for messages and restricted access controls. No system can promise complete security. Please avoid sharing highly sensitive information in stillUp and take care with what you share with other members.
Changes to this policy
We will update the effective date when this policy changes. We will notify members of material changes through the app or account email before those changes take effect and obtain consent when required.