Privacy Policy
still. · operated by DUSTY LLC · effective 30 September 2026
still. introduces you to one person a day around one picture. This policy explains what we collect, who can see it, how long we keep it, and how to take it back. It is written to be read, not to be survived.
The short version
We never ask Apple for your email address. If we have one, it is because you typed it in, and we use it only to send you email from still.: things to read and write about, and news about the app. We send it through Mailchimp. You can remove it at any time.
We do not know your location. We know which city you picked from a list.
We count how still. is used, but not who used it: how many phones open it, whether they come back, and how often things like the painting and the hold are used. Those counts are kept against a random number made on your phone, never against your account, and never leave our own systems. There is no tracking and no advertising in this app.
We never sell or share your information for advertising.
You can delete your account, and everything of yours, from inside the app.
What we collect
When you sign in
still. uses Sign in with Apple and nothing else. Apple gives us your name and an anonymous identifier for your account. We ask Apple for your name only — the app does not request your email address from Apple, so the only email address we could ever hold is one you typed in yourself.
Your name is shortened to a first name and a family initial ("Ada K."). That shortened form is the only version stored.
Your email address, if you give one
still. asks once, during setup, whether you would like email from us. It is optional — you can skip it in one tap, and the app works exactly the same either way. Nothing about matching, messaging or safety depends on it.
If you give one, we use it for one purpose: to send you email from still. — things to read and write about, and news about the app. We record the moment you gave it, as our record that you agreed. We do not use it to identify you anywhere else, we do not match it against anything, and we never sell it or give it to anybody to market to you.
Our email is sent by Mailchimp, which is owned by Intuit. Mailchimp holds your address and your first name, so that a message can begin with your name, and nothing else about you — not your gender, who you are looking for, your age, your city, your photographs, or anything you have written. Like most email, ours can tell Mailchimp whether it was opened and which of its links were clicked.
To stop: remove it in the app under you, or use the unsubscribe link in any message we send. Either one is enough; you do not have to do both. Either one takes your address out of Mailchimp as well as out of still.
Who you are, and who you'd like to meet
Setup asks two questions: whether you are a man or a woman, and which of those you would like to be matched with. You can answer "both" to the second.
These two are required, unlike your email address, and the difference is worth explaining. An email address is only ever used to send you email, so agreeing to it has to be optional and freely given. These two are what the service is — without them we cannot introduce you to anybody without a real chance of introducing you to the wrong person. So they are a condition of using still., and this is the only place in the app where that is true of something this personal.
Read together, these answers say something about your sexual orientation, and we treat them that way: they are held on the private half of your account, used only by the code that decides who you meet, and never shown to anybody — see below. We never ask about your orientation directly, because these two answers are all the service needs and asking for more would be collecting something we have no use for.
You can change either of them at any time under you. A change affects who you are introduced to next; it does not end a conversation you are already in.
Your age
Two separate things, and it matters which is which.
Whether you may use still. at all is decided by Apple, not by us. We use Apple's Declared Age Range service, which tells us only whether you fall in an adult age range. We never receive your date of birth, and nothing you type can change this answer. We record the date we checked and which assurance method Apple used, so we can show that the check happened.
Who you are introduced to is decided by two answers you give during setup: the year you were born, and the age range you would like to meet. We ask for the year only — not the day or the month — because a range is all the matching needs, and a year is meaningfully less about you than a date of birth. We do not store your age; we work it out from the year when a match is being considered, so it is never stale and never written down.
These two are required, for the same reason your gender and who you'd like to meet are: without them we cannot introduce you to anybody without a real chance of introducing you to the wrong person. You can change either at any time under you, and a change affects who you meet next rather than a conversation you are already in.
What you write and choose
Three sentences — The short lines you write about yourself.
Words about pictures — The one or two words you pick for each of three artworks during setup.
Dislikes — Chosen from a fixed list.
Your city — Chosen from a list of US metropolitan areas. This is not GPS. We collect no coordinates, and the app never asks for location access.
Photographs — Up to two. The first must be taken inside the app rather than chosen from your library.
Messages — Everything you write in a conversation.
From your device
Time zone, because a day on still. ends at your local midnight.
A notification token, if you allow notifications. It identifies the installation, not you, and it is never shown to another person.
Whether you declined camera access, so the app stops asking.
Anonymous usage counts. The first time still. opens, it makes a random number on your phone. Against that number, and never against your account, it counts which days the app was opened, which days a conversation was open, and how many times some things were used: tapping the painting, holding and how each hold ended, opening someone's dossier, opening the explanation of holding. It also notes when the app was first opened, which version of it is installed, and whether anyone has signed in on that phone. None of this is linked to your account, so it says nothing about you, and deleting your account cannot find it.
If you report someone
We receive the reason you chose, anything you typed, and the conversation it happened in. This is described in the app before you send it.
What we do not collect
No phone number. No location or coordinates. No contacts. No day or month of birth. No ethnicity — still. never asks. No advertising identifier. No analytics company's tools: nothing in the app reports to anyone but us, and the counts above are never used for advertising.
Who can see what
The person you are matched with
While a conversation is live, they can see your name, your three sentences, your city and your photographs — and nothing else.
They are not told your gender, your age, the year you were born, or who you are looking for. Those answers decide whether the two of you are introduced at all, and then they are finished — the app has no screen that displays any of them, to your match or to anyone else.
Nobody else
Your dislikes, the words you chose during setup, your time zone, your notification token and your age record are visible to you and to us, and to no other user. This is enforced by the database's own rules rather than by the design of the screens. The anonymous usage counts are seen only by us, and only as totals.
Holding
A conversation continues only if both people hold to keep it. If you hold and the other person does not, they are never told. Not at the time, not afterwards, not in any notification. The record of your own hold is stored where only you can read it.
Reporting
Somebody you report is never told that you reported them, at the time or later. Reports are readable only by us.
How long we keep things
Conversations — Kept. A conversation belongs to both people in it, so we do not delete one person's side — deleting your account leaves the other person able to read what you both wrote. We do not delete conversations on a schedule.
The record of a match — Kept: who it was between, how long it lasted, and whether it was kept. This is retained because US law can require us to notify people after an account is banned for fraud.
Reports — Kept, along with the conversation reported, so that deleting an account cannot erase a report about it.
Your profile and setup answers — Until you delete your account, and then immediately.
Who you are and who you'd like to meet — Until you delete your account, and then immediately. Changing either one replaces it; we keep no history of what it was before.
The year you were born, and the ages you'd like to meet — Until you delete your account, and then immediately. Your age itself is never stored — it is worked out from the year when it is needed and then discarded.
Your email address — Until you remove it, unsubscribe, or delete your account, whichever comes first, and then immediately — from Mailchimp as well as from still. Removing it also removes our record that you agreed to it.
Anonymous usage counts — Kept. They are not linked to your account, so there is nothing of yours in them to delete.
Deleting your account
This is the only way anything is deleted. still. does not delete conversations on a timer, and there is no expiry after which what you wrote disappears on its own.
In the app: you → delete everything. It asks once, and then it is not reversible.
What goes: your name, your three sentences, your city, your setup answers including your gender, who you were looking for, your birth year and the ages you wanted to meet, both photographs, your email address if you gave one (from Mailchimp as well as from still.), your notification token, your age record, and your sign-in account.
What stays, and why: the conversations you were part of remain readable by the other person, with your name attached to an account that no longer exists. Those conversations were theirs as well as yours, and deleting your side would take away theirs. Any report about you also survives, so that deleting an account cannot be a way out of having been reported.
If you come back afterwards, you are a new person to still., with no history.
Who else is involved
Google (Firebase) — Hosts the database, the photographs, and the code that makes matches and sends notifications. Also verifies that requests come from a genuine copy of the app.
Apple — Sign in with Apple; delivery of notifications; the app-genuineness check; the adult age-range signal.
Intuit Mailchimp — Sends our email, and only to people who gave us an address. Holds that address and a first name, and nothing else about you.
Google and Apple are not permitted to use your information for their own purposes. Mailchimp mostly works the same way, but its own terms also allow it to use what it holds to keep its service secure and to improve it. None of the three sells your information. There are no advertising or data-broker companies involved, and no analytics companies.
still. sometimes shows a piece of writing to read between conversations. Opening it leaves the app and goes to your browser; nothing about you is attached to the link.
Where your information is held
In the United States. still. is available only in the United States.
Your rights
You can see everything about you inside the app: your sentences and photographs under you, and every conversation you have had under you → archive. You can delete all of it from the same screen.
If you live in California, Colorado, Connecticut, Virginia or another state with a privacy law, you have rights to know what we hold, to have it deleted, to correct it, and not to be discriminated against for exercising them. The delete button does this immediately; for anything else, write to chris@dustyapp.com.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. The one thing there is to opt out of is our email, and you can do that in the app under you, or from the unsubscribe link in any message we send.
Children
still. is for people aged 18 and over. We check age at sign-up using Apple's age-range signal and refuse anyone we cannot confirm is an adult. If you believe a minor is using still., report them in the app — that report suspends the account before anybody reads it.
Security
Access to your information is enforced by rules on the database itself, not only by what the app chooses to show. Your private information is readable by your own account and by no other user, and that remains true regardless of any change to the app.
No service can promise it will never be breached. If one affects you, we will tell you.
Changes
If this policy changes in a way that affects you, we will say so in the app before the change takes effect.
Contact
DUSTY LLC
266 Old Poverty Road
Southbury, CT 06488
chris@dustyapp.com