Privacy Policy
Last updated: 23 October 2026 · Still Path is made by Juned Ahmed Mohammed, an individual developer in India, publishing as Kanagal (“we”, “us”). Contact: hello@stillpath.life
The short version
- Your practice (sessions, notes, badges) is saved on your phone, with a private cloud backup that only you can access.
- Signing in is optional. It only lets you get your practice back on another phone.
- We collect anonymous usage data to improve the app. It never includes your notes, and you can turn it off.
- No ads. We never sell your data, and we don’t track you across other apps or websites.
- You can export or delete everything, any time, from the app.
What we collect, and why
Your practice
The sessions you complete (date and time, length, the guided session or sound, and the type of session), how you felt afterwards if you tag it, the notes you write, the badges you earn and your favourite sessions. This is what the app is made of. It is stored on your phone and automatically backed up to our cloud database so it isn’t lost if your phone is. The backup is tied to an anonymous account the app creates for you; nobody but you can access it.
Your account, if you link one
If you choose to link Google or Apple, we receive your email address (Apple may give a private relay address) and an account identifier from them. We use these only to let you sign in and restore your practice on another phone. We don’t send you marketing email.
Purchases
Subscriptions are bought and paid for through Apple (or Google on Android). We never see your card or payment details. We receive confirmation of your subscription (plan, trial, renewal dates) so the app knows you have Premium.
Anonymous usage data
To understand how the app is used and improve it, the app sends anonymous events, for example: a session was started or completed, its length, which guided session or sound, a badge was earned, a screen was opened, a trial began. These come with basic technical details (device type, operating system and app version). They are not linked to your name or email, and they never include your notes or anything you type. You can turn this off any time in the app: You › Your data › Share anonymous usage data.
Session totals in the Library
The Library can show how many times each guided session was played in the last 30 days and how many people saved it as a favourite. These are anonymous totals per session, counted from backed-up sessions and favourites; they never show or reveal who played or saved anything, and small numbers are never shown. If you turn off Share anonymous usage data, your sessions and favourites are left out of these totals too.
Crash reports
If the app crashes or hits an error, it sends a technical report (what went wrong in the code, device model, operating system and app version) so we can fix it. Crash reports contain no personal information, and we don’t store IP addresses with them.
Our website
On stillpath.life we count visits anonymously (which pages were viewed, where visitors came from, and whether the App Store or Google Play button was tapped) using PostHog. The website uses no cookies and stores nothing on your device, and we don’t store IP addresses.
Reminders
Daily reminders and the weekly recap are scheduled on your phone. We don’t run a notification server and don’t receive anything when a reminder appears.
What we never do
- We don’t sell your data, share it for advertising, or show ads.
- We don’t track you across other companies’ apps or websites.
- We don’t read your notes, use them to train AI, or use them for anything except showing them to you.
Who helps us run Still Path
We use a small number of service providers, who process data only on our behalf and under their own security commitments:
- Supabase: cloud backup database and sign-in (United States).
- RevenueCat: subscription status.
- PostHog: anonymous usage analytics (United States).
- Sentry: crash reports (United States).
- Google and Apple: optional sign-in; Apple and Google also process payments.
- Cloudflare: this website and email forwarding.
Where your data is stored
Your backup, analytics and crash reports are stored in the United States. If you live elsewhere (for example in India), your data is transferred there and protected as described in this policy.
How long we keep it
- Your backup: until you delete it. Deleting all your data in the app removes it from our servers immediately.
- Anonymous usage data: up to 1 year.
- Crash reports: up to 90 days.
Your choices and rights
- Export your practice as a file: You › Your data › Export my practice.
- Delete everything, on your phone and in our cloud: You › Your data › Delete all my data. This can’t be undone. It doesn’t cancel a subscription; manage that in the App Store or Google Play.
- No longer have the app? See how to delete your account and data.
- Turn off anonymous usage data: You › Your data.
- To access, correct or delete your data, or with any privacy question or complaint, email hello@stillpath.life. We reply within 30 days. This includes requests under India’s Digital Personal Data Protection Act and US state privacy laws.
Children
Still Path isn’t directed at children under 13, and we don’t knowingly collect their data. If you believe a child under 13 has used the app, email us and we’ll delete their data.
Security
Data is encrypted in transit and at rest. Our database only lets each account read and change its own data. On your phone, your sign-in is kept in the iPhone Keychain or Android’s encrypted storage.
Changes and transfers
If we change this policy, we’ll update the date above and, for important changes, tell you in the app. If Still Path is transferred to a company controlled by its owner, or to a new owner, your data moves with it under the same protections, and we’ll update this policy.
Contact
Juned Ahmed Mohammed (Kanagal) · hello@stillpath.life