Privacy Notice

This notice explains how life change from the onside ("we", "us") handles your personal data when you use StillPath. We are the data controller, which means we decide how and why your personal data is used.

What we collect and why

• Account details (email address and password, stored securely) — to create and secure your account. Legal basis: performing our contract with you.
• Program activity (days completed, practice minutes, journal entries) — to provide the program and sync it across your devices. Legal basis: contract.
• Purchase records (your plan, its status and renewal dates, and order references from our payment provider) — to give you access to what you paid for. Legal basis: contract and legal obligations.
• Technical data (IP address, device and browser details, error logs) — to keep the service secure, prevent fraud, and fix problems. Legal basis: legitimate interests.
• Messages you send us — to answer support requests. Legal basis: legitimate interests.

We do not sell your personal data and we do not use your journal entries for marketing.

Who we share it with

• Paddle.com, our Merchant of Record, which handles the sale of our product, subscription management, payments, tax compliance and invoicing. Paddle processes payment details under its own privacy policy; we never see your full card number.
• Service providers that host the app, store data and help us run the service.
• Professional advisers such as legal and accounting advisers, when needed.
• Authorities, where the law requires it.

International transfers

Our providers may process data in other countries. Where that happens, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

How long we keep it

We keep your account and program data while your account is active. When you close your account, or when the data is no longer needed, we delete or anonymize it. We keep purchase records for as long as tax and accounting laws require.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or export your personal data, to object to certain uses, and to withdraw consent at any time. You may also complain to your local data protection authority. We respond to requests within one month.

Security

We use appropriate technical and organizational measures to protect your data, including encrypted connections, access controls, and per-account data isolation.

Cookies and local storage

StillPath only uses essential browser storage to keep you signed in and to remember your progress on your device. We do not use advertising or analytics cookies. You can clear this storage through your browser settings, which will sign you out.

See also our Terms & Conditions and Refund Policy.