You are trusting us with something private. So the short version first: your climb is yours, we collect as little as we can, and we do not sell any of it.
Who we are
Stillmonk is operated by WOICE d.o.o., Ulica škofa Maksimilijana Držečnika 6, 2000 Maribor, Slovenia, which decides how your data is used (the data controller). If you want anything on this page explained, or you want your data deleted, write to support@stillmonk.io and a person will answer.
What the app stores
Stillmonk uses Supabase for account authentication and storage. Your account ID and email address connect you to your saved data. If you use Apple or Google sign-in, those providers handle authentication and share the account information needed to sign you in.
We store your onboarding answers (unless you choose to keep them on your phone only, see below), reasons, triggers, start date, day count, longest climb, mood check-ins, private notes, Sage conversation history, earned badges, activity counts, Library reading history (which entries you first opened or marked as read or kept, and the local dates of those actions), how long your climb was before your latest restart, and preferences such as reminder time. We use these to provide your journey, remember your choices, and personalize the support you see. Habit history and conversations may contain sensitive personal or health information.
You can also save a profile name, phone number, pronouns, and location, and up to three trusted people's names, relationships, and phone numbers. Optional fields can be left blank. The location is a place you enter yourself; we do not request GPS access or read your phone's address book, photos, or microphone. Only add a trusted person's details with their permission. Stillmonk never contacts them: Call and Text open your own phone and messages apps, and you choose whether to send.
The crisis line the app shows is picked on your phone from its time zone and language settings; Stillmonk does not store your region. If you write to Sage in a way that sounds like a crisis, Sage gives the same fixed reply in every region, which names no line, and it is saved with your Sage conversation like any other reply; the line for your region is shown only on your screen. Where we have no verified line for your region, the app shows your local emergency number when it is known, and a link to findahelpline.com, which is run by an independent organisation. Next to the line, the app lists the trusted people you added.
This data is linked to your account. Your notes and conversations are private to your account, not posted to the community or shared with other users. What you choose to post in the community is public; see the next section. Our service providers process data to operate the app; this is not a promise of end-to-end encryption. A session credential is stored on your device so you can stay signed in.
Reminders you turn on are scheduled on your device by the operating system. We do not use a push-notification service or collect a device push token, and the app contains no third-party analytics or advertising SDKs.
To time reminders, the app can keep a short log on your phone of when you open it or begin again, and which reminders it sent and you answered. Entries are deleted after 60 days (90 for begin-agains). A paused reminder is remembered until you switch it back on. In Settings you can erase what it learned, or turn learning off to erase the log. Whether learning is on or off, the phone also keeps which reminders are scheduled and which went out today, only so it never sends more than your daily limit. None of this leaves your phone unless you export your data, and none of it is sent to us or anyone else. Signing out erases the log and that record.
While you set up, before you choose where your answers are kept (see below), your phone keeps them for up to 7 days so you can pick up where you left off. Starting over, finishing setup or deleting your account erases them. The phone also keeps whether you are 18 or older (never the age you typed), which version of setup it showed you, and how many times you opened setup. When you finish, that count is saved with your account as 1, 2, or 3 or more, and your account records which version of setup you saw, so the two versions can be compared.
When you finish setting up, you choose where your reasons, triggers, hardest hour, what you have tried, the view you chose and your urge plan are kept: on your phone only, or in your private account. On your phone they are kept for your account only, are never sent to us, stay when you sign out, and are erased when you delete your account. You can move them either way, or delete them, in Settings. Your start date, day count and check-ins are always kept in your account. Until your second day, the phone also notes whether you opened your urge plan on your first day. The words you write in your own words during setup stay on your phone.
When you begin again, the app keeps the local dates of up to five recent restarts, and whether they came close together, on your phone for your account, so the first days of a new climb can suggest what fits. This is never sent to us. It is included when you export your data, stays on the phone when you sign out, and is erased when you delete your account.
The community is public
The Stillmonk Community, the Community tab in the app and stillmonk.io/community on the web, is public. Anyone can read posts and comments without an account, and search engines such as Google can show posts in their results. That includes every category, Struggles & Support too. Share only what you are comfortable having public, and leave out your full name, where you live or work, and anything that identifies other people.
Before your first post or comment you choose the name others see, and confirm that what you post is public. We never use your email address or the name on your Apple or Google account for it. Your community profile shows that name, a handle, the date you joined, your posts, and how many posts and comments you have written. Profile pages ask search engines not to list them. Your email address, day count, check-ins, reasons, notes and Sage conversations are never shown in the community. Posts cannot include photos.
When you post, comment, like, report or mute someone, we store what you wrote or chose and when. To confirm that you are a member, our server asks our subscription provider, RevenueCat, whether your account has an active membership, and keeps that answer with the plan, the store and when it ends.
On the web you sign in with the same account as the app, by email and password or with Google. Your browser keeps the sign-in session in first-party cookies on stillmonk.io, so the community pages can show you signed in. They are needed for signing in, are never used for advertising or tracking, and stay until you sign out.
Reports are private: the person you report is not told who reported them, and any signed-in account can report, with or without a membership. The Stillmonk team reviews reports and can hide, lock or remove posts and comments and pause posting. Posts with words that may signal a crisis are flagged privately so the team sees them first. If you mute someone, their posts and comments leave your view and they cannot notify you; they are not told. The community is not a crisis line.
You can edit or delete your posts and comments at any time, with or without a membership. Deleting a post removes the comments under it. Deleting a comment that others replied to leaves an empty "This comment was removed" in its place, so their replies stay. Deleting your account deletes your community profile, posts, comments, likes, reports you made, mutes, your membership record and the team's moderation records about you. Removed posts show as "not found" on stillmonk.io within about a minute, and search engines drop them the next time they visit. Until then, and in copies other people or services have made, they can stay visible for a while; we cannot remove copies held by others.
Sage and AI processing
When you send a message to Sage, your message is saved in Supabase. To check whether the conversation is within Sage's scope and generate a reply, our backend sends a limited recent conversation history (up to 16 messages) through OpenRouter to the configured AI model provider. Replies are also saved in your account. The request does not deliberately include your account email, profile, or trusted contacts, but anything you write in the conversation may be included.
Sage asks before your first message is saved or sent, and the app keeps your answer on that phone, for your account, until you sign out. How Sage handles a crisis is described on its own page.
You can use other Stillmonk features without sending messages to Sage. Avoid including names, contact details, or other information you do not want processed by AI providers. Their processing and retention depend on the provider and service settings; we do not promise that messages are never retained by those services. Sage is an AI companion, not a medical professional or an emergency service.
What this website collects
Apart from signing in to the community (see above), this website does not collect email addresses, and it sets no advertising or tracking cookies. The only cookies it sets are the community sign-in cookies, and only once you sign in. It loads no analytics. Cloudflare hosts and delivers this website and processes connection information, such as your IP address and request details, to deliver and protect it. Fonts and images are served from this website rather than an external service.
If you choose Pause animations at the bottom of a page, your browser remembers that choice in its local storage on that device. It is not sent to us.
Payments
The free plan involves no payment. A membership is an in-app purchase, billed through the Apple App Store or Google Play. We do not receive your payment-card details. RevenueCat processes your account ID, store receipts, purchase and subscription history, and entitlement status to verify purchases, restore access, and provide subscription and revenue reporting. The account ID can be linked back to your Stillmonk account; it is not anonymous. Stillmonk does not send RevenueCat your name, email address, or payment-card details. When the plans screen opens during setup, the app tells RevenueCat that it was shown, with none of your answers, so we can see how many people who see the plans become members.
Who we share it with
We do not sell your data, show ads in the app, or use your app data for advertising tracking across other companies' apps and websites. What you post in the community is published to everyone by design. Our service providers are Supabase (accounts and storage), OpenRouter and the AI model provider it routes to (Sage replies), RevenueCat (purchases), Apple and Google (sign-in and billing), and Cloudflare (this website). The providers described above receive data needed for authentication, hosting, AI replies, or purchases. They may process data outside your country. If disclosure is required by law, we may also share data with the relevant authorities.
How long we keep it
Your saved journey and content remain associated with your account until you delete them or your account. Deleting your account removes its application records from the active Supabase database, including check-ins, Sage history, notes, and trusted contacts. Backup and service-log retention is separate from deletion of active records. Records held by AI providers, RevenueCat, and the app stores are not automatically erased by the app's account-deletion action. Contact us for requests concerning data held by those providers; retention may also be required for legal, security, or transaction-record purposes.
Uninstalling the app does not delete your account. Deleting your account does not cancel an App Store or Google Play subscription; cancel it separately in your store's subscription settings.
Your rights
You can export your saved app data with Download my data (Settings, Privacy & security), edit your profile, or delete your account from Settings. You can also ask us for a copy of what we hold, corrections, or deletion. Write to support@stillmonk.io.
If you are in the UK, the EU or the EEA, you also have the right to ask us to restrict how we use your data, to object to a use, and to receive the data you gave us in a format you can take elsewhere (the export does this). Where something depends on your agreement, such as talking with Sage, you can stop at any time, and stopping does not undo what was lawful before. You can complain to your data protection authority. In Slovenia that is the Information Commissioner (Informacijski pooblaščenec).
We do not make decisions about you by automated means that have legal or similarly significant effects. The automatic checks described on this page, such as the crisis-word check in Sage and in the community, only change what is shown on screen or flag a post for a person to look at.
Children
Stillmonk is not for anyone under 18. We do not knowingly collect anything from children, and if we learn we have, we delete it.
Changes
If we change this policy we will update the date at the top. If a change actually matters to you, we will say so in the app rather than quietly editing this page.
Stillmonk is a wellbeing companion, not a medical service, and nothing here is medical advice. See the terms of service.