1. Who we are

Stillness - Meditation Timer ("we," "us," or "our") is the data controller for the Stillness meditation app (the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use the App. If you have questions about your data, contact us at tylerferrington@gmail.com.

2. What data we collect

We do not require you to create an account or provide your name, email, or address to use the App. We collect the following data:

2.1 Data collected automatically (Firebase Analytics)

When you use the App, we use Google Firebase Analytics to collect usage and technical data. This may include:

• Device and app information, such as device type, operating system and version, app version, and a unique identifier (e.g. an advertising identifier or a Firebase-instance identifier).
• Approximate location, such as country or region (not precise location).
• Usage events we send to Firebase when you use the App, including:
  • Session and timer use: when you start a session (begin_session), when a session ends on its own (session_ended), when you end a session early (end_session), and when you pause or resume a session (pause_session, play_session). For some of these we record duration, interval (bell) settings, or time remaining (e.g. in minutes and seconds).
  • Settings: when you change meditation duration or bell intervals (edit_duration, edit_intervals).
  • Screens: when you view the main timer screen ("Timer") or the more/settings screen ("More").
  • Support and legal: when you open FAQs, Feedback, Rate the App, Privacy Policy, or Terms of Service (faqs, feedback, rate_the_app, privacy_policy, terms_of_service).

Firebase may also collect data such as IP address and crash information in line with Google's Firebase documentation. This data is processed by Google on our behalf. We do not use this data to identify you by name. It is used in aggregated form to understand how the App is used and to improve it.

2.2 Data you give us (e.g. Feedback)

If you contact us (e.g. via a feedback or support option in the App), we may receive email address, name (if you provide it), and the content of your message. We use this only to respond to you and to improve the App. We do not use it for marketing.

3. Why we collect this data and our legal basis (UK GDPR)

We use the data above to:

• Improve the App (e.g. which features are used, how long sessions are, how often the timer is used).
• Fix problems (e.g. crashes, errors).
• Respond to you when you contact us.

Under UK GDPR we rely on:

• Legitimate interests for analytics and improving the App, where we have balanced our interests against your rights and consider the impact on your privacy to be limited.
• Legitimate interests (or, where applicable, performance of a contract) for replying to your messages.
• Legal obligation where we must keep or use data to comply with the law.

We do not sell your personal data. We do not use your data for advertising or to build a profile about you for third-party advertising.

4. Who we share your data with

We share data with:

Google (Firebase)

Firebase Analytics is provided by Google. Google processes the data described in section 2.1 on our behalf. Their processing is governed by their privacy policy and their terms for Firebase/Google Analytics. Data may be transferred to and processed in the United States or other countries where Google operates. We rely on UK-approved transfer mechanisms (such as the UK International Data Transfer Agreement and UK Addendum to the EU Standard Contractual Clauses, or other approved safeguards) where required by UK law.

We do not sell or rent your data to third parties. We may disclose data if we are required to do so by law or to protect our or others' rights and safety.

5. How long we keep your data

• Firebase Analytics: Google retains event data for a limited period (e.g. up to 14 months by default). We do not separately retain raw analytics data beyond what Firebase keeps; we use only aggregated and anonymised reports.
• Feedback/support: We keep messages and contact details only as long as needed to deal with your request and any follow-up, and for a short period for legal or operational reasons (e.g. up to a few years), unless you ask us to delete them sooner.

When we no longer need the data, we stop using it and ensure it is deleted or anonymised by us and, where possible, by our processors (e.g. Google).

6. Your rights (UK GDPR)

You have the right to:

• Access – ask for a copy of the personal data we hold about you.
• Rectification – ask us to correct inaccurate data.
• Erasure – ask us to delete your personal data in certain situations.
• Restrict processing – ask us to limit how we use your data in certain cases.
• Object – object to processing based on legitimate interests (including analytics).
• Data portability – receive certain data in a structured, machine-readable format where technically feasible.
• Withdraw consent – if we ever rely on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing.
• Complain to a regulator – you can lodge a complaint with the Information Commissioner's Office (ICO) in the UK: ico.org.uk/make-a-complaint.

To exercise any of these rights, contact us at tylerferrington@gmail.com. We will respond within one month (or explain why we need longer). You can also limit or reset advertising identifiers in your device settings (e.g. "Limit Ad Tracking" on iOS), which can reduce the data used for analytics.

7. International transfers

Your data may be processed in the United Kingdom, the European Economic Area, and the United States (and possibly other countries) where our service providers, including Google, operate. When we transfer data outside the UK, we ensure appropriate safeguards are in place (e.g. UK adequacy decisions, UK International Data Transfer Agreement, UK Addendum to EU Standard Contractual Clauses) as required by UK law.

8. Children

The App is not aimed at children under 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has given us data, please contact us and we will delete it.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version in the App and/or on our website and change the "Last updated" date. If changes are significant, we may notify you in the App or by email where appropriate. Your continued use of the App after the change means you accept the updated policy.

10. Contact us

For any questions about this Privacy Policy or your personal data:

Email: tylerferrington@gmail.com

We are the data controller for the App. Our processing of your data is governed by UK data protection law, including the UK GDPR and the Data Protection Act 2018.