Privacy Notice

Who we are

Stillpoint is operated by Mandy's Meditation Space, which is the data controller for the personal data described here. That means we decide what data is collected and why, and we are responsible for looking after it.

What we collect and why

• Account data — your email address, login credentials and sign-in provider. Used to create and secure your account and to give you access to your membership. Legal basis: performance of our contract with you.
• Membership status — plan, status and billing period dates received from our payment provider. Used to unlock member content and to answer your questions. Legal basis: contract.
• Support messages — what you send us. Used to help you. Legal basis: contract and legitimate interests.
• Technical and usage data — device and browser information, IP address, error reports and basic usage events. Used for security, fraud prevention, fixing faults and improving the app. Legal basis: legitimate interests.
• Practice data — streaks, minutes and completed sessions. These are stored on your own device, not on our servers.
• Your voice recordings — recordings you make to narrate sessions stay in your browser's storage on your device. We do not upload, listen to or store them.

Text you choose to have spoken by the generated voice is sent to our text-to-speech provider solely to produce that audio.

Who we share data with

• Paddle.com, our reseller and Merchant of Record, for the sale of the membership, subscription management, payments, invoicing and tax compliance.
• Service providers and subprocessors that host the app, provide the database and authentication, deliver audio and monitor errors.
• Professional advisers such as accountants or lawyers, where needed.
• Authorities, where we are required to by law.

We do not sell your personal data. Where data is transferred outside your region, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

How long we keep it

We keep account and membership data for as long as your account is open, and for a limited period afterwards to meet legal, accounting and fraud-prevention duties. After that it is deleted or anonymised. You can ask us to delete your account at any time.

Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its use, receive a portable copy, and withdraw consent. If you are in the UK or EEA you may also complain to your local data protection authority. Contact us at Mandygudeman@gmail.com and we will respond within one month.

Security and cookies

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level database security, to protect your data. Stillpoint uses only essential cookies and local storage needed to keep you signed in and to remember your settings; we do not use advertising cookies. You can clear them in your browser settings, though you will then need to sign in again.

See also our Terms & Conditions and Refund Policy.