Privacy Policy

Last updated: July 18, 2026

Thank you for choosing to use StillReads ("we", "us", "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

        Our Privacy Promise: StillReads is designed as a privacy-first application. By default, your reading content, notes, and OCR results are processed locally on your device or securely synced via your personal iCloud. We do not read, collect, or store your private reading content on our servers.
    

1. Information We Collect & Account Management

To provide our services (such as cross-device synchronization and premium feature access), we collect and manage the following limited information:

Account Authentication: We support Sign in with Apple and Google Sign-In. Your actual login credentials (like passwords) are managed entirely and securely by Apple or Google. We only receive basic profile information (such as your email address and an anonymous user ID) via our backend provider (Supabase) to create and verify your account.
Purchase and Subscription Data: We use RevenueCat to manage In-App Purchases and subscriptions. We collect your anonymous app user ID and purchase history to verify your premium status across devices. We do not process or store your payment details (e.g., credit card numbers); all financial transactions are handled securely by Apple.

2. How We Handle Your Content & User-Provided AI Services

StillReads offers features that summarize or process the text you save. Here is how your content and credentials are handled depending on your settings:

Local Processing (Default): Unless configured otherwise, your content data stays on your device.
User-Configured Cloud AI (Opt-in): We offer the option for you to manually configure third-party AI services (such as OpenAI/ChatGPT, Grok, or Google Gemini) by entering your own personal API keys.

Keychain Security: If you provide your own API keys, they are stored securely within the Apple Keychain locally on your device. We do not transmit your API keys to our servers.

Data Transmission: If you use this feature, the text you request to be summarized will be transmitted directly from your device to the respective third-party AI provider you selected. We do not route this data through our servers. Please review the privacy policies of the AI providers you choose to connect (e.g., OpenAI, xAI, Google), as they govern how your transmitted data is handled.

3. Data Export & Import

StillReads allows you to export and import your reading content, notes, and app data so that you always remain in full control of your own information. This feature is designed with privacy as the top priority:

No Server Involvement: The export and import process is performed entirely on your device. Your exported data is never uploaded to, routed through, or stored on our servers at any point.
Export via Local File: You can export your data as a local file saved directly to your device storage (e.g., the Files app), or share it to another location you choose using the system share sheet.
Export via Email: You may optionally send your exported file as an email attachment using your own email account and mail client. The email is sent directly from your device through your email provider — we have no access to the message or its contents.
Import from Local File: When you import data, the file is read and processed locally on your device. No imported content is transmitted to us.

        In short: Export and import are fully local operations. Whether you back up to a file or send data by email, your content moves only between your device and the destination you choose — never through StillReads servers.
    

4. Information We DO NOT Collect

We believe your data is yours. Therefore, our servers strictly do not collect or store:

Your Reading Content: Any web pages you save or texts you scan.
Your Credentials: Your Apple/Google passwords and third-party API keys.
Analytics and Tracking: We do not use third-party tracking tools to monitor which websites you visit or what specific articles you read.

5. Third-Party Infrastructure Services

We use the following third-party infrastructure services to power core app functionalities. These services have their own privacy policies regarding how they handle account data:

Supabase: For user authentication and secure backend infrastructure.
RevenueCat: For managing subscriptions and In-App Purchases.
Apple (iCloud): If you choose to sync your reading data across devices, this data is stored in your private Apple iCloud account.

6. Data Retention and Deletion

We retain your account information and purchase history only for as long as you maintain an active account with us. You have the right to request the deletion of your account and associated data at any time. You can initiate account deletion directly within the StillReads app settings or by contacting us.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.

If we make material changes to how we treat your data (for example, beginning to collect usage analytics or browsing history), we will notify you through a prominent notice within the StillReads application before the changes take effect, and request your explicit consent where required by law.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our practices regarding your personal information, please contact us at:

Email: contact@stillreads.com