Privacy Policy

The short version

• There is no account and no sign-up.
• We do not collect, receive or store anything you create in the app.
• Your photos and your face never leave your device unless you save or share a photo yourself.
• From version 1.0 (October 2026), if you use friend codes, our server keeps your code with a one-way scrambled form of a random ID made for this app, and a record of purchases made at the friend price. Nothing that identifies you, and you can delete it from the app at any time.
• From version 1.0.1 (October 2026), and only if you agree (in the US, unless you turn it off), the app sends us anonymous usage data: which features you use and when something goes wrong. Never your content, your name or anything that identifies you. Turn it off or delete it in Settings at any time. Earlier versions send nothing at all.
• There are no ads, and no third-party analytics or tracking SDK in the app. Nothing is used to track you across other companies' apps or websites.
• No third party receives your data for its own use. Google Cloud stores our usage data for us, in London.

What the app stores, and where

Stillpass stores the photos you choose to keep on your device, inside the app's own storage area. That data is not accessible to other apps, is included in your device backups if you back up your device, and is deleted when you delete the app.

Your preferences — spoken instructions and the photo types you used recently — are stored the same way.

Camera and face analysis

Stillpass uses the camera only while its camera screen is open, to show you a live preview and take the photo you asked for.

To check your photo, Stillpass measures your face on your device using Apple's on-device Vision framework: where your eyes, chin and the top of your head are, whether your head is level, and how even the light and background are. These measurements are used only to guide you and to crop the photo. They are not stored, are never uploaded and are never used to identify you.

Stillpass does not retouch, beautify or replace any part of your photo. It only crops and resizes it.

Photos

Photos you choose to keep are stored in the app's own storage on your device. Stillpass asks only for permission to add to your photo library, and only when you tap Save to Photos. It cannot see, read or change anything already in your library.

When you share a photo or print sheet, it goes only where you send it.

Friend codes

From version 1.0 (October 2026), friend codes are optional. In Settings → Give 10% off you can get a code to share; a friend who enters it in the purchase screen pays 10% less. You don't get a reward. Earlier versions have no friend codes and no server of any kind.

What is sent, and when. When you tap Get my code, the app sends our referral server a random ID it made for this app (not your device's identifier, and different in each of our apps, so nothing links your use of one app to another) and your code. When you enter a friend's code, the app sends that code so the server can check it, together with your own random ID if you have a code, so you can't use your own. After you buy at the friend price, the app sends Apple's signed record of that purchase, which the server verifies against Apple's certificate. Nothing else ever goes to this server: never your photos, your face measurements, your name, your email or your Apple Account.

What we keep. A one-way scrambled (hashed) form of your random ID, your code, and for each friend-priced purchase: the code used, the product, the price and currency, and the month of purchase. Apple's transaction number is kept only in a hashed form, so the same purchase can't be counted twice, and your country and IP address are not recorded. These records are kept for 24 months, then deleted automatically.

Why. To run the friend-code scheme, to stop it being abused (such as using your own code), to see which codes bring sales, and to pay people we work with whose codes we count.

Who. Tyche Labs Ltd is the controller. Google Cloud (Cloud Run and Firestore in London, europe-west2) processes the data for us and uses it for nothing else. Our legal basis under UK GDPR is our legitimate interest in running the scheme fairly and preventing fraud.

Your choices. Settings → Give 10% off → Delete my referral data removes your code and ID from our server straight away; purchases made with your code stay as anonymous sales with the code removed. If the app can't reach our server, nothing is deleted and it tells you, so you can try again. To object to a purchase record, email support@tychelabs.net with the transaction ID shown in the app (or the order details from your Apple receipt), and we will remove it.

Usage data

To find out which features help people and what goes wrong, Stillpass can send us anonymous usage data from version 1.0.1 (October 2026); earlier versions send nothing. It goes only to our own server, not to an analytics company, and there is no tracking: it is never combined with data from other apps or companies, never used for advertising, and Stillpass never asks to track you for it.

What is sent: events such as opening the app, choosing a photo type (the catalogue entry, never a photo), opening the camera, taking a photo, whether the checks passed and which ones failed, opening the purchase sheet and the outcome of a purchase (which product, and whether it went through), exporting, and getting or entering a friend code (never the code itself). Each event carries the app version, the iOS version, the device model (such as "iPhone18,2"), the app's language, the country of your App Store account, whether you have a paid upgrade, and a random ID the app makes for this purpose. The ID is not your device's identifier or advertising identifier and is different in each of our apps. Error reports contain only an error code.

What is never sent: your photos, face measurements, friend codes, your name, email, contacts, location or IP address. Our server does not record IP addresses.

Your choice: in the UK, the EU and most countries, nothing is collected unless you tap Share usage data when the app asks. In the US, the app tells you once that usage data is on and lets you turn it off straight away. Either way, Stillpass Settings → Usage data → Share usage data turns it off or on at any time. Turning it off deletes anything not yet sent and the random ID.

Deleting it: Stillpass Settings → Usage data → Delete my data asks our server to erase everything sent under your random ID. It is removed from our reports at once and from storage within a day, and the app starts again with a new random ID. If you are offline, the app sends the request the next time it can.

How long we keep it: individual events for 13 months, then they are deleted automatically. We keep daily totals (such as how many people used the app that day) for longer. These contain no IDs.

Legal basis and where it is kept: where we ask first, your consent. In the US, our legitimate interest in improving the app. The data is stored on Google Cloud in London (europe-west2), which processes it only for us. On the App Store's privacy label this appears as usage data, diagnostics, a device ID and purchase history, collected but not linked to you and not used to track you.

On Android

Stillpass for Android works the same way and handles your data the same way. The face checks use Google's ML Kit with its models built into the app, so they run entirely on your device: ML Kit receives your photo only in memory, its usage logging to Google is removed from the app, and no photo or measurement is ever uploaded. Purchases go through Google Play Billing, so Google handles payment and we never see your payment details. Usage data works as described above, through the same server, with the same choices. Friend codes are not in the Android app yet; when they arrive they will work as described above. The Android app does not use the advertising ID or any other device identifier.

Purchases

In-app purchases are handled entirely by Apple. We never see your payment details. Apple tells the app only whether a purchase is active.

Stillpass sells only one-time purchases. Nothing renews and there is nothing to cancel.

Children

Stillpass is not directed at children under 13 and we do not knowingly collect information from them.

Your rights

The only information we hold is the friend-code data and the usage data described above, each linked to a random ID rather than to you. Delete them any time from Stillpass (Settings → Give 10% off → Delete my referral data, and Stillpass Settings → Usage data → Delete my data). Because we can't tell who a random ID belongs to, those buttons are the reliable way to reach your data; for anything else, including a friend-priced purchase record, email support@tychelabs.net. To remove everything stored on your device, delete the app. You can also complain to the Information Commissioner's Office (ico.org.uk).

Changes

If this policy changes, the updated version will be posted here with a new effective date. Material changes will also be described in the app's release notes.

This policy describes what version 1.0.1 adds. Versions before it have no server contact of any kind.