Privacy Policy

Overview

StillYours (“we”, “us”, or “the app”) is a private mobile application for two partners who share a digital nest. This Privacy Policy explains what information the current production app collects, how it is used, which third parties help operate the service, and the choices available to you.

This policy describes the app as implemented today. It does not invent features that are not present in the product.

Information We Collect

Depending on how you use StillYours, we may process the categories below.

Account Information

When you create or sign in to an account, we may process:

• Authentication identifiers from Sign in with Apple, Google Sign-In, and/or Supabase Auth
• Email address associated with your sign-in method (when provided by the provider)
• Display name and optional first/last name you enter in your profile
• Profile avatar image you choose or upload
• Language, timezone, and in-app notification preference settings
• Account status and basic account timestamps

Guest / anonymous sign-in may be available in some builds. Linking Apple or Google later associates that identity with your nest account.

User Content

Content you and your partner create in the shared nest may include:

• Private chat messages between paired partners
• Memories vault photos and videos
• Calendar events and related media
• Bond moments, drawings/canvas content, and related media
• Bucket-list items and related media
• Care / companion state such as companion name, needs, rest sessions, progression, and inventory
• Virtual economy balances and transactions (Nest Pebbles and Heartlights)
• Room decoration and store ownership state

Uploaded media is stored in private Supabase Storage buckets associated with your nest. Shared nest content is available to your paired partner according to the app’s access rules.

Partner and Relationship Data

To operate pairing and shared features, we process:

• Couple / nest membership and invitation or invite-code state
• Optional relationship start date and “nest since” style presentation dates
• Partner sharing preferences (for example location, battery/presence, photos, and certain notifications)
• Partner hub activity needed to keep the shared nest in sync

Partner data is intended for the two members of a nest. It is not a public social feed.

Location Data

If you enable partner location features, the app may collect precise or approximate location points, accuracy, related sensor fields (such as altitude or speed when provided by the device), capture time, sharing mode, and device/session identifiers used for live and route history sharing. Battery and presence status may also be shared with your partner when those options are enabled.

Background location may run when you grant the corresponding operating-system permission and keep sharing turned on. You can pause or disable sharing in the app’s privacy / partner controls and in system settings.

Maps in the app may load map tiles from map providers (including Carto/OpenStreetMap-style tile services). Google Maps SDK support may also be present when configured for a build. Map providers process technical requests needed to render the map.

Advertising and Rewarded Ads

StillYours uses Google Mobile Ads (AdMob) for optional rewarded ads, including Care Boost and Watch & Earn. Rewarded ads are voluntary and are not required to use core nest features.

Advertising providers may process device and advertising information—such as advertising identifiers, IP address, device/app signals, and approximate location derived by the ad network—according to your consent choices and applicable law. Where required, the app uses Google’s User Messaging Platform (UMP) consent flow before ad requests.

On supported devices, you can open Ad privacy choices from the app’s Settings when Google’s privacy options form is available for your region/configuration. Your device may also present tracking-permission prompts when the AdMob privacy message configuration requires them.

Watch & Earn Nest Pebble rewards are confirmed through AdMob server-side verification to the app backend. That verification uses opaque claim identifiers and does not send private messages, photos, partner identity, or relationship content into ad custom data.

In-App Purchases

Optional purchases (such as Heartlights packs) are processed by the app marketplace through which you obtained the app. That marketplace provider handles payment credentials. StillYours receives purchase tokens / signed transaction payloads needed to verify entitlements and credit virtual items to your account. We store purchase verification and ledger records as needed to prevent double-crediting, support restore flows, and meet accounting or fraud-prevention needs. We do not receive your full card number.

Notifications

If you allow notifications, we store device push tokens and related device metadata (platform, app install identifier, app version, locale) so we can deliver push messages through Firebase Cloud Messaging and/or Apple Push Notification service. In-app notification preferences can limit certain notification categories.

Safety Reports and Blocks

Because StillYours is a private paired product, we do not route partner messages through a third-party AI moderation service. You can report abusive or illegal partner conduct and block/disconnect from inside the app. Reports include category, optional details, reporter and reported user identifiers, and nest context needed for support review. Block records prevent the blocked pair from re-inviting each other through the nest invitation flow.

How We Use Information

We use the information described above to:

• Create and authenticate accounts
• Operate the shared nest between paired partners
• Provide Care, Store, chat, memories, calendar, drawings, and related features
• Sync nest state across devices
• Send the notifications you allow
• Show optional rewarded ads and honor advertising consent choices
• Verify in-app purchases and maintain related ledgers
• Protect security, prevent abuse, review safety reports, and maintain service reliability
• Respond to support or account requests you initiate
• Comply with legal obligations where applicable

We do not sell your personal information. We do not use private messages, vault media, partner photos, or relationship content for advertising targeting.

Third-Party Services

The app relies on infrastructure and platform providers. Those providers process data as needed to deliver their services under their own terms and privacy notices:

The current production app does not include a separate analytics or crash-reporting SDK such as Firebase Analytics, Crashlytics, or Sentry.

Data Sharing

We share information only as needed to operate the product:

• With your paired partner, for shared nest features you use together
• With service providers listed above that host or deliver the app’s infrastructure, ads, maps, and notifications
• With platform operators (Apple, Google) as required for sign-in, marketplace distribution, push, and advertising consent tooling
• For legal reasons, if we are required to respond to a valid legal process or to protect the rights, safety, and integrity of users or the service

We do not sell personal information to data brokers.

Data Retention

We retain account, nest, and content data while your account remains active and as needed to provide the shared nest to an active partner. After account deletion is initiated, personal access is revoked and certain profile fields are tombstoned, while shared nest history may remain available to a remaining partner so their experience is not destroyed. Backups and logs may persist for a limited period according to our infrastructure providers’ backup cycles. We do not promise immediate physical erasure of every backup copy worldwide at the moment of deletion.

Account and Data Deletion

You can start account deletion inside the app:

1. Open Profile
2. Choose Delete account (also reachable from About / related account screens)
3. Confirm by typing DELETE when prompted

If you no longer have the app, use the public deletion page: https://zsqymapyvbixurbrzjvq.supabase.co/functions/v1/delete-account. That page requires email verification (one-time code) plus typing DELETE. Knowing an email alone cannot delete another person’s account.

When deletion runs, the current server flow:

• Removes you from the active couple membership and turns off partner sharing preferences where applicable
• Cancels pending invitations related to your account
• Deletes notification inbox/outbox items tied to the deletion preparation
• Clears personal push tokens where applicable
• Clears personal avatar files from your user-media avatar folder when possible
• Replaces your profile with a tombstone (for example display name becomes “Former partner”, avatar cleared, account marked deleted) so a remaining partner’s shared history references remain intact
• Revokes sign-in by banning the auth user and signing out sessions (this is not an immediate hard wipe of every historical shared nest row)

Shared couple content (such as chat history, vault items, care state, or balances belonging to the nest) may remain for the remaining partner. Purchase verification records may be retained as needed for fraud prevention and platform obligations. Backups and logs may persist for a limited period; we do not claim instantaneous physical erasure of every backup copy. If you need help, email bekirsucikaran00@gmail.com or open the Support page.

Security

We use industry-standard protections appropriate to a mobile backend, including encrypted transport (HTTPS), authenticated API access, and database/storage access controls (including row-level security on Supabase). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

International Data Processing

StillYours is operated using cloud infrastructure (including Supabase and Google/Apple platform services) that may process data in the United States and other countries. If you use the app from another region, your information may be transferred to and processed in countries that may have different data-protection laws than your own.

User Choices and Consent

• You can edit profile information in the app
• You can manage partner sharing and location permissions in the app and in system settings
• You can control notification categories in Settings and disable system notifications
• You can use Ad privacy choices / UMP options where available
• You can decline rewarded ads; they remain optional
• You can report or block a partner and disconnect the nest
• You can delete your account as described above
• You can review the Terms of Use

Children / Age Requirements

StillYours is designed for adults using a private partner nest. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can take appropriate steps. You must also meet any minimum age required by Apple, Google, and the laws that apply where you use the app.

Changes to This Policy

We may update this Privacy Policy as the product or legal requirements change. The “Last updated” date at the top will change when we publish revisions. Continued use of the app after an update means you are informed of the revised policy as presented at this URL.

Contact

For privacy questions or requests, use the Help section inside the StillYours app, or email bekirsucikaran00@gmail.com. You can also open the public Support page.

App name: StillYours
Privacy Policy URL: https://zsqymapyvbixurbrzjvq.supabase.co/functions/v1/privacy