Privacy Policy

Last updated: July 9, 2026

Stillune is a tinnitus habituation education and relaxation companion. Because tinnitus is personal, the app is built so that the sensitive parts of your data never leave your device. This document explains exactly what the app handles, where it lives, and what — if anything — is shared. The short version: no email, no name, and your journal stays on the phone.

A note on health: Stillune is not a medical treatment, diagnosis, or hearing care, and nothing it stores or produces is medical advice. Tinnitus can have underlying medical causes — please see a doctor or audiologist, especially for sudden or one-sided ringing.

1. No account, no email

Stillune never asks for your email address, name, or password. The app signs you in anonymously via Supabase (anonymous authentication), which creates a random identity with no personal information attached. Alongside it, a server-side record stores only your subscription entitlement (whether Premium is active).

2. What stays on your device

• Spike journal entries and notes. Intensity, trigger chips, and anything you write stay on your iPhone or iPad.
• Your pitch profile. The tinnitus frequency you match per ear is stored locally.
• Scores and progress. Program progress and scores are stored locally.
• HealthKit sleep data. Read on-device only for the optional sleep correlation — see section 5.
• All soundscape audio. Every soundscape is generated on-device; no audio is downloaded from or uploaded to any server.

3. Optional anonymous usage analytics

To understand which parts of the app are useful, Stillune can record anonymous product interaction events (for example, which screens and features are used) tagged with a random install ID — never your name, email, or journal content. These events are stored in a Supabase table protected by row-level security (RLS).

This is optional: the in-app "Share anonymous usage" toggle is on by default and you can turn it off at any time in the app's settings.

4. Weekly insights and the Claude API

The weekly trigger-insight narrative can optionally be written by a language model. When enabled, the app sends only de-identified weekly journal aggregates — no notes, no raw timestamps — to a Supabase Edge Function, which calls the Anthropic Claude API to write the weekly summary text. If you keep this off (or you're offline), the app falls back to generating the summary on-device.

5. HealthKit sleep data

• With your permission, Stillune reads your sleep hours from HealthKit to correlate sleep with your spike journal — entirely on-device.
• HealthKit data is never uploaded to any server, ours or anyone else's.
• HealthKit data is never used for advertising or marketing, and never sold.
• The sleep correlation is optional; you can decline or revoke Health access at any time in iOS Settings.

6. Device permissions

• HealthKit (read) — sleep hours, correlated on-device only, never uploaded.
• Notifications — optional local reminders, scheduled on your device.
• Background audio — keeps soundscapes and the sleep timer playing while the screen is off.

7. Third-party services

• Supabase — anonymous authentication, an RLS-guarded Postgres database (analytics events and the subscription entitlement record), and Edge Functions, including the account-deletion function.
• Anthropic Claude API — writes the weekly insight narrative from de-identified aggregates; called server-side only, never directly from your device.
• Apple StoreKit 2 — processes Premium subscriptions through your Apple ID.

8. Deleting your data

You can export or delete everything in two taps inside the app. Deleting your account runs a backend delete-account function that removes your anonymous identity and all data associated with it — analytics events and the subscription entitlement record included. On-device data is deleted with the app.

9. Your rights and controls

• Turn off "Share anonymous usage" in the app's settings
• Keep weekly insights fully on-device (the de-identified upload is optional)
• Decline or revoke HealthKit access in iOS Settings
• Export your data from inside the app
• Delete your account and all backend data from inside the app
• Cancel your subscription via the App Store

10. Updates to this policy

We update this policy when there's a material change. The update date appears at the top of this page; you'll also see an in-app notification at the next launch.

11. Contact

For privacy questions, requests, or to exercise any of your rights: support@oztechapps.net

Stillune is developed by OzTech App Studio in Istanbul, Türkiye.