Private sensor data stays on your iPhone.

Effective July 31, 2026

What StillScore processes on your device

StillScore uses the camera, TrueDepth sensors, and Face ID to evaluate observable session conditions and confirm that the device owner starts a session. Camera frames, face images, face templates, depth maps, and Face ID data are not stored by StillScore or sent to our servers.

What StillScore collects

We store a one-way protected identifier derived from your Sign in with Apple account, an anonymous public handle, your configured time zone, authentication and device-attestation records, public receipt data, and limited operational and security records needed to run and protect the service. We do not request your name or email address from Apple.

What becomes public

Every completed qualifying session is published under your anonymous handle. A public receipt includes the calendar date, duration, score, aggregate measurements, verification flags, scoring-policy version, and cryptographic proof. It does not include the time of day, location, Apple identity, camera images, depth maps, or Face ID data. Public data can be viewed or copied by anyone, and copies already downloaded by others cannot be recalled.

How we use and share data

We use collected data only to authenticate accounts, operate StillScore, publish and verify receipts, prevent fraud and abuse, troubleshoot the service, and comply with law. We do not sell personal data, use it for cross-app tracking, or share it with advertising networks. Infrastructure providers may process data for us under protections appropriate to their role.

Retention and deletion

Account linkage is retained while your account is active. You can delete your account from the Account tab in the app. Deletion revokes sessions and device keys, removes the private Apple-account association, removes the profile and its receipts from ordinary public views, and deletes local history on that iPhone. We retain only de-identified receipt tombstones and limited security records when needed to preserve receipt integrity, prevent abuse, or meet legal obligations. Anonymous handles and receipt sequence positions are not reassigned.

Your choices

You may decline camera or Face ID access, but verified sessions will not function. You may revoke Sign in with Apple access in your Apple Account settings. To request access, correction, or deletion help, contact us at privacy@stillscore.com.

Changes and contact

We may update this policy as StillScore changes and will revise the effective date above. Questions can be sent to privacy@stillscore.com.