Privacy policy

Who is responsible for your data

The controller is Frontier Digital Creations LLC, a Wyoming limited liability company (registered office: Registered Agents Inc, 30 N Gould St Ste R, Sheridan, WY 82801, United States).

For anything about your data, write to privacy@stilltyping.app.

What we keep

• Your email address, your name if you give it, your language and your time zone.
• What you schedule: messages (and, when those features launch, videos and posts). The content is encrypted before we store it.
• Your people (the trusted contacts you choose): the name you give them, their email address and their language.
• Recipients: the name and email address of each person you write to.
• A hashed fingerprint of your IP address when you request a sign-in link or answer "Still there?", to limit abuse. We don't keep the address itself.
• A record of what happens to your switch: check-ins, answers from your people and deliveries.

What we use it for

To run the service you asked for: keep what you write, check in with you, ask your people when you go quiet, and deliver your messages only after they confirm.

To keep it safe: stop abuse, review reported content and keep a record of every step, which is our proof that nothing went out on silence alone.

To answer you when you write to us. We don't sell your data and we don't use it for advertising.

When content is released

Content is released after the death or incapacity of the user only when at least two trusted contacts confirm it. Inactivity alone never releases anything.

With 3 trusted contacts, 2 of them have to confirm; with 2, both do. After that there are 7 days in which we keep trying to reach you on every channel. If you answer, nothing is sent.

Legal basis

Contract (Article 6(1)(b) GDPR): your account, what you schedule and its delivery.

Special categories (Article 9 GDPR): we don't read what you write and we don't ask what it contains. If you choose to store health, beliefs or other special categories of data about yourself, that is your decision; there is no separate consent step today. Consent for optional features, such as connecting Instagram when it launches, can be withdrawn at any time.

Legitimate interest (Article 6(1)(f) GDPR): the details of your people and your recipients, so your instructions can be carried out; security and abuse prevention; and the record of each step.

If someone chose you

If a Still Typing user added you as one of their people or as a recipient, we have your name and email address because they gave them to us. We tell you so in the first email we send you, with a link to this policy and a way to ask us to delete your details (Article 14 GDPR).

Who processes data for us

Our database and sign-in run on Supabase, hosted on servers in the European Union (Hetzner, Finland).

Resend sends our emails.

They act on our instructions and don't use your data for their own purposes. If a provider handles data outside the European Union, the transfer is covered by appropriate safeguards, such as the European Commission's standard contractual clauses.

How long we keep it

• Your account and what you schedule: until your account is deleted.
• A delivered page: one year from the first time it is opened.
• Your people: when the user removes someone, we stop writing to them but keep the name and email with the record of the switch, until the account is deleted or they ask us to delete them.
• Recipients: until the account is deleted.
• Answers from your people and the record of each step of a switch: until the account is deleted. Deleting the account removes them with it.

Account deletion and data export are not available in the app yet. Until they are, write to privacy@stilltyping.app and we do it by hand within one month.

Your rights

You can ask for access to your data, correct it, delete it, restrict or object to its use, and take it with you. Write to privacy@stilltyping.app from the address we have for you. We answer within one month.

If you think we haven't handled your data properly, you can complain to your data protection authority. In Spain, that is the Agencia Española de Protección de Datos (aepd.es).

Security

The content you schedule is encrypted before it is stored. It is decrypted on our servers when you open it to read or edit it, when it is delivered and, after a report, to review it. Each account can only reach its own data.

Age

Still Typing is for people aged 18 or over. We don't knowingly keep data about minors as account holders.

No automated decisions

Nothing that affects you is decided by a machine alone. A release always needs people to confirm it, and reported content is reviewed by a person.