Effective September 29, 2026
Stillwater Privacy Policy
Cloud account data
Supabase processes your email authentication account, display name, timezone, subscription tier, entitlement state, billing references, and administrative audit records. Stillwater does not intentionally upload private wellness records or raw journal text.
If Recovery Circles are enabled and you choose to use them, Supabase also stores circle membership, your chosen circle display name, the Community Terms version and acceptance time, and only posts, replies, or reports you deliberately submit. Recovery Circles are not enabled in the current production build yet.
How data is used
Account data is used to authenticate you, recover access, provide Stillwater Pro entitlements, prevent abuse, and support the service. In both plans, journal word-and-phrase reflection runs locally. Free does not calculate or store new AMM model output. Pro activates local AMM calculations when you submit relevant information; AMM does not continuously monitor you or run in the background. Stillwater does not sell personal data and contains no advertising SDK.
On-device security
Android wellness records and persisted sessions use AES-256-GCM with a non-exportable Android Keystore key. Removing the app or clearing its data may permanently erase local records.
Recovery Circles
When enabled, Recovery Circles are free, optional, invite-only groups of up to 25 adult members who accept the Community Terms. Choosing “Share with this circle” uploads only the text you entered and necessary membership metadata. Other members can read, answer, copy, or reshare what they can see. Choosing “Keep private” stores the note on that device only. Stillwater never automatically converts a journal, check-in, workbook answer, sobriety record, addiction record, recovery contact, or AMM record into a post.
Report records contain the selected post or reply reference, the reporter, the stated reason, status, and time. A safety block stores the blocker's account ID, the blocked account ID, and time so database policy can hide shared Circle posts and replies between those accounts. Users can reverse their own blocks.
Service providers
Supabase provides authentication and account storage. Cloudflare provides public website and protected administration infrastructure. Google Play will provide distribution and subscription billing when the paid plan launches.
Deletion and retention
You may delete your account inside Stillwater or use the external account deletion page. Account and linked cloud records are deleted, except records retained when reasonably required for security, fraud prevention, billing, or law. Operational logs and backups may persist for limited provider-controlled periods before aging out.
Safety and health information
Stillwater and AMM provide exploratory behavioral reflection. They do not diagnose, treat, monitor, or predict relapse and are not emergency services. Call local emergency services when immediate help is needed.
Contact
Developer: Stillwater System
stillwatersystem.com
support@stillwatersystem.com