Your conversations are yours.

Last updated 24 September 2026. This is a pre-launch draft and will be reviewed by counsel before public launch.

1. Who is responsible for your data

Still Me (“we”, “us”) is the controller of the personal data described here. The operating legal entity, registered address, and any data-protection contact will be stated here before launch. You can reach us at michael@stillme.eu.

2. What we collect

• Account data — such as your email address and authentication details.
• What you tell the coach — your messages, and the people, moments, reflections and notes you save.
• Settings — your preferences, such as tone and reminder time.
• Technical data — basic information needed to run and secure the app, such as device and log data.
• Payment data — handled by our payment processor; we receive confirmation of your subscription status, not your full card details.

We collect what the app needs to work and to remember you between conversations, and no more.

3. How we use it, and our legal bases

• To provide the coaching — to reply to you and carry your history forward (basis: performance of our contract with you).
• To keep the service secure and working, and to improve reliability (basis: our legitimate interests).
• To handle payments and meet legal and accounting duties (bases: contract and legal obligation).
• For anything optional, only with your consent, which you can withdraw at any time.

4. We never train AI on your conversations

Your conversations are never used to train AI models — ours or anyone else’s — and they are not sold, and not used for advertising. Replies are generated by a model provider that processes your messages only to produce your response, under terms that prohibit training on them.

5. Who we share it with

We do not sell your data. A small number of vetted providers process it on our behalf so the app can run — for example hosting and databases, the model that powers replies, payment processing, and email delivery. Each acts under a data-processing agreement that keeps your data confidential and limits it to providing their service to us. We may also disclose data where the law requires it.

6. International transfers

Some providers may process data outside your country. Where that happens, we rely on appropriate safeguards (such as the European Commission’s standard contractual clauses) to protect it.

7. How long we keep it

We keep your data while your account is active. If you cancel, your conversations stay available for 30 days in case you return, then are removed unless you delete them sooner. If you delete your data or account, we remove it promptly, except for the minimum we must retain for legal or accounting reasons.

8. Security

We protect your data with encryption in transit, access controls, and row-level isolation so you only ever reach your own data. No system is perfectly secure, but we treat what you tell the coach as sensitive and design accordingly.

9. Your rights

Under the GDPR and similar laws, you can:

• access a copy of your data, and export it;
• correct data that is wrong;
• delete your data — in a tap from Settings, or by emailing us (see Delete my data);
• restrict or object to certain processing, and withdraw consent where we relied on it;
• lodge a complaint with your local data-protection authority.

10. Cookies, local storage and site analytics

Inside the app we use only what it needs to sign you in, remember your preferences (such as light or dark), and keep it working. We do not use advertising trackers.

On our public website (the home page, articles and pricing pages) we use Microsoft Clarity to understand how visitors use it, through clicks, scrolling and recordings of page visits. Clarity never runs inside the app, and your conversations are never recorded. Anything typed into a form is masked before it leaves your browser. Clarity only loads after you choose “Allow” in the cookie banner, and you can change your mind at any time with “Cookie settings” at the bottom of the page. Microsoft processes this data as described in the Microsoft Privacy Statement.

With the same “Allow”, we also use the Meta pixel on those public pages, to learn which of our ads bring people here. It sees which public pages you visit, that you left your email, opened checkout or subscribed, and the plan and price. If you subscribe, we tell Meta from our server, with your email address scrambled (hashed) so it can match the visit without reading it. Meta never receives what you talk about, what you chose as your focus, or anything from inside the app. Meta processes this data as described in the Meta Privacy Policy. “No thanks” turns all of this off.

11. Children

Still Me is for adults and is not directed at children. We do not knowingly collect data from anyone under 18.

12. Changes

We may update this policy; we will post the new version here and, for material changes, notify you in the app.

13. Contact

Questions about privacy, or want to exercise a right? Email michael@stillme.eu.