Your check-ins and support records stay on your device by default.
iCloud, remote AI, and local reminders are off or optional and user controlled.
We do not sell personal data, show targeted ads, or track you across apps.
Privacy Policy
The English version is the primary policy. A Simplified Chinese reference translation follows.
Short version: Stillwise works without an account and stores app records on your device by default. Data leaves the device only when you choose a feature that requires it, such as iCloud sync, a remote AI request, an export, or an email to support.
1. Who is responsible
Stillwise is independently operated by Nannan Li in China (“Stillwise,” “we,” “us,” or “our”). For privacy questions, requests, product support, or feedback, contact:
Nannan LiEmail: linandixon@gmail.com
Operator region: China
2. Scope
This policy covers the Stillwise iPhone app, its Widget and Apple Watch companion, and this privacy-policy webpage. It does not replace the privacy terms of Apple, an AI provider or endpoint you configure, your email provider, or another service you choose to use.
3. Data kept by the App
Depending on how you use Stillwise, the App may store the following on your device:
- drinking check-ins, dates, status, mood scores, preset or custom trigger tags, and optional notes;
- urge-support sessions, timestamps, selected actions, optional before/after intensity, outcomes, and optional notes;
- goals, prevention plans, reflections, risk windows, strategy preferences, and recommendation interaction history;
- locally generated summaries and, if you use remote AI, AI reports, plans, model outputs, and your feedback about them;
- app preferences such as language, appearance, storage mode, and device-local reminder choices; and
- technical records required for phone, Widget, and Watch consistency, including stable record identifiers and deletion markers.
These records may reveal sensitive information about alcohol use, mood, or wellbeing. Stillwise does not require a Stillwise account, and the operator does not run an analytics or advertising backend that receives these app records.
4. When data may leave your device
iCloud sync. If you turn on iCloud sync, the App uses Apple CloudKit to sync supported records through the iCloud account on your Apple devices. The setting takes effect on the next app launch. Apple processes this data under its terms and privacy policy. Turning sync off stops future CloudKit use by the App after the next launch; it does not automatically remove copies already held in iCloud or on another device.
Remote AI. Remote AI is an optional Stillwise Plus feature and is off by default. While Plus is locked or AI is off, Stillwise blocks AI network requests. If you turn it on, you provide your own compatible API credential and choose the endpoint, provider, and model. New OpenAI configurations use the Responses API with request storage set to false; a custom OpenAI-compatible Chat Completions endpoint remains available. Before a remote request, the App shows a preview of the categories to be sent. Structured records may include dates or periods, drinking status, preset trigger categories, mood scores, urge statistics, goals, and progress summaries. Free text—including notes, custom tag names, reflections, plans, feedback text, or earlier AI text—is off by default and is included only when you select the relevant category for that request. The request goes directly from the App to the endpoint you configure; Stillwise does not operate an AI relay or sell API access. Because the credential may belong to an account with that provider, the provider may associate the request with that account even though Stillwise does not create or receive that identity link. Your chosen provider may charge you and may retain, use, or transfer the request and response under its own terms. Do not use an endpoint you do not trust.
Apple devices. The Widget shares the App Group store used by the iPhone app. Watch synchronization currently covers drinking check-ins only. Apple may process device, iCloud, WatchConnectivity, and App Store data under its own privacy terms.
Purchases. Stillwise Plus is a non-consumable in-app purchase processed by Apple. Stillwise checks verified current entitlements on the device and does not upload receipts or create an operator account. Purchase, refund, revocation, storefront, tax, and payment records are processed and retained by Apple under its terms. Plus entitlement is not added to SwiftData, iCloud, Stillwise backups, privacy exports, or Phone–Watch synchronization. If Apple reports that the entitlement was refunded or revoked, Stillwise turns off AI and device-local risk reminders but keeps your API credential and app records unless you delete them.
Local reminders. Reminder preferences are device-local, default off, and are not included in iCloud sync or restored from backup. Notification scheduling is handled on the device. Lock-screen copy is designed not to include drinking status, urge intensity, health wording, strategy text, or free text.
Exports and backups. If you export records or create a backup, the resulting file is sent only to the destination you choose through the system share interface. The privacy export omits free text, custom tag names, and AI content by default. A complete backup is a separate feature, includes sensitive content, and is encrypted with the password you provide. You are responsible for files after export and for keeping the backup password safe.
Support email. If you email us, we receive your email address and any content or attachments you choose to send. Please do not send drinking records, API keys, backup passwords, or other sensitive app data unless necessary for your request.
5. This webpage
This static page does not set advertising cookies, run analytics scripts, or read your Stillwise app records. Like most websites, the hosting and network infrastructure may process basic request data such as IP address, browser or user-agent information, requested URL, and timestamp to deliver the page, prevent abuse, and maintain security. Such infrastructure is separate from the Stillwise app database and is not used by us for advertising profiles.
6. Why data is processed
App records are processed on your device to provide features you request: recording check-ins, calculating local statistics, supporting urges, showing history, and keeping selected Apple surfaces consistent. Optional iCloud or remote AI processing occurs only when you enable or initiate it. Where the law requires a legal basis, we rely on your request or consent for optional services, our legitimate interest in answering support messages and protecting this webpage, and compliance with legal obligations where applicable. You may withdraw consent for future optional processing by disabling the relevant feature, without affecting processing that already occurred.
7. Sharing and recipients
We do not sell personal data, share it for cross-context behavioral advertising, use it for targeted advertising, or disclose it to data brokers. Data may be processed by:
- Apple, when you use the App Store, iCloud, Widget, Watch, device backup, or system sharing features;
- the AI provider or endpoint operator you configure, when you confirm a remote AI request;
- your chosen file destination, cloud drive, messaging service, or email provider when you export or contact support;
- the infrastructure provider hosting this static page; and
- authorities or advisers when disclosure is legally required or necessary to protect rights and security.
8. International transfers
The operator is in China. Apple, a provider you configure, your email provider, or the webpage host may process data in other countries. Their transfer mechanisms and storage locations are governed by their own terms and applicable law. Before enabling remote AI, review the chosen provider’s location, retention, training, and international-transfer terms.
9. Retention and deletion
- On-device records: remain until you delete individual records, use Stillwise’s delete-all control, or remove the App and its data. The delete-all control also turns off and removes Stillwise reminder preferences on that device.
- iCloud records: may remain in iCloud or on other synced devices until removed through those services or devices. Re-enable the relevant storage mode if needed to delete synced records consistently.
- Remote AI data: is retained according to the provider or endpoint you selected. Deleting data in Stillwise cannot delete a provider’s prior request logs or outputs.
- Purchase records: are retained by Apple under its App Store terms. Restoring purchases asks Apple to synchronize the current entitlement.
- Exports and backups: remain wherever you saved or shared them until you delete them there.
- Support messages: are normally retained for up to 24 months after the last contact, then deleted unless a longer period is reasonably needed for security, dispute resolution, or law.
- Web security logs: if retained by the host, follow the host’s security and retention configuration.
10. Your choices and rights
You can use free check-ins, history, goals, basic statistics, urge support, professional help, data controls, Widget, and Watch check-ins without iCloud, remote AI, or Stillwise Plus. In the App, you can restore a Plus purchase, turn AI off, request a storage-mode change, disable reminders, export selected records, create an encrypted backup, and delete app data.
Depending on where you live, you may have rights to access, know, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, or lodge a complaint with a data protection authority. California residents may also have rights to know, correct, or delete covered personal information and to receive equal service when exercising rights. Stillwise does not sell or share personal information for cross-context behavioral advertising, so there is no sale/share opt-out mechanism in the App.
Most app records are stored only on your device or with a service you selected, so we may not possess or be able to identify them. Use the App’s controls or contact the relevant provider first. For data we do possess, such as a support email, send a request from the relevant email address to linandixon@gmail.com. We may need to verify the request and will respond as required by applicable law. You may also use an authorized agent where local law permits.
11. Security
Stillwise uses platform security controls, stores the remote AI API key in the iOS Keychain, requires HTTPS for release AI endpoints, and password-encrypts complete backup files. No storage or transmission method is completely secure. Protect your device passcode, Apple account, AI credential, exported files, and backup password. If you believe your data is at risk, disable the affected optional service and contact its provider.
12. Children
Stillwise is not designed for children’s use, and we do not knowingly seek personal data from children. If you believe a child sent personal data to us through support or an optional service, contact us so we can take appropriate action.
13. Health and safety boundary
Stillwise provides habit-support tools and does not diagnose alcohol-use disorders, replace professional medical care, or provide emergency treatment. Do not include emergency or medical requests in a privacy email. Use local emergency services or qualified medical support when needed.
14. Changes to this policy
We may update this policy when the App, providers, or legal requirements change. We will publish the revised version at this URL and update the effective date. If a change materially affects an optional data flow, the App will present any additional notice or choice required before that future processing.
15. Contact
Privacy and feedback: linandixon@gmail.com. Product help is also available on the Stillwise support page.
隐私政策
本简体中文版本为便于理解而提供；如两种语言存在解释差异，以英文版为准。
简要说明：Stillwise 无需注册账号，默认把 App 记录保存在你的设备上。只有当你主动使用需要传输的功能（如 iCloud 同步、远程 AI 请求、导出，或给支持邮箱发信）时，相关数据才会离开设备。
1. 运营者与联系方式
Stillwise 由位于中国的个人 Nannan Li 独立运营（下称“Stillwise”或“我们”）。如有隐私请求、产品支持或反馈，请联系：
Nannan Li邮箱：linandixon@gmail.com
运营者地区：中国
2. 适用范围
本政策适用于 Stillwise iPhone App、桌面小组件、Apple Watch 配套 App，以及本隐私政策网页。Apple、你自行配置的 AI 提供商或端点、邮箱服务商，以及你选择使用的其他服务，适用其各自的隐私条款。
3. App 保存的数据
根据你的使用方式，App 可能在设备上保存：
- 饮酒签到、日期、状态、心情分值、预设或自定义触发标签，以及可选备注；
- 冲动支持记录、时间、所选行动、可选的前后强度、结果和备注；
- 目标、预防计划、反思、风险窗口、策略偏好及建议交互历史；
- 本地生成的摘要，以及在使用远程 AI 时生成的 AI 报告、计划、模型输出和反馈；
- 语言、外观、存储模式、设备本地提醒等设置；
- 维持 iPhone、Widget 与 Watch 一致性所需的记录标识和删除标记等技术数据。
这些记录可能反映饮酒、心情或身心状态等敏感信息。Stillwise 不要求创建 Stillwise 账号，运营者也不运行接收这些 App 记录的分析或广告后台。
4. 数据何时可能离开设备
iCloud 同步。开启后，App 使用 Apple CloudKit，通过你 Apple 设备上的 iCloud 账号同步受支持的记录；设置在 App 下次启动时生效。Apple 依其条款和隐私政策处理数据。关闭同步会在下次启动后停止 App 后续使用 CloudKit，但不会自动删除 iCloud 或其他设备上已经存在的副本。
远程 AI。远程 AI 是 Stillwise Plus 的可选功能，并且默认关闭。Plus 未解锁或 AI 关闭时，Stillwise 会阻止 AI 网络请求。开启后，由你提供自己的兼容 API 凭证，并选择端点、提供商和模型。新的 OpenAI 配置使用 Responses API，且请求存储设置为 false；同时保留自定义 OpenAI 兼容 Chat Completions 端点。每次远程请求前，App 会预览拟发送的数据类别。结构化记录可能包含日期或周期、饮酒状态、预设触发类别、心情分值、冲动统计、目标和进度摘要。备注、自定义标签名称、反思、计划、反馈文字或以往 AI 文本等自由文本默认不发送，只有你为当次请求勾选相应类别时才会包含。请求从 App 直接发送到你配置的端点；Stillwise 不运营 AI 中转服务，也不出售 API 访问。由于 API 凭证可能属于你在该提供商处的账号，即使 Stillwise 不创建或接收这层身份关联，提供商仍可能把请求与该账号关联。提供商可能另行收费，并可能依其条款保留、使用或跨境传输请求与响应，请不要使用你不信任的端点。
Apple 设备。Widget 使用与 iPhone App 相同的 App Group 本地存储；Watch 当前仅同步饮酒签到。Apple 可能依其隐私条款处理设备、iCloud、WatchConnectivity 和 App Store 数据。
购买。Stillwise Plus 是由 Apple 处理的非消耗型 App 内购买。Stillwise 在设备上检查经验证的当前权益，不上传收据，也不创建运营方账号。购买、退款、撤销、地区、税务和付款记录由 Apple 依其条款处理和保留。Plus 权益不会写入 SwiftData、iCloud、Stillwise 备份、隐私导出或 Phone–Watch 同步。若 Apple 报告权益已退款或撤销，Stillwise 会关闭 AI 和设备本地风险提醒，但会保留 API 凭证和 App 记录，直到你主动删除。
本地提醒。提醒设置保存在本机、默认关闭，不进入 iCloud，也不会从备份恢复。通知在设备上调度；锁屏文案按设计不包含饮酒状态、冲动强度、健康措辞、策略文字或自由文本。
导出和备份。导出或创建备份后，文件只会通过系统分享界面发送到你选择的位置。隐私导出默认排除自由文本、自定义标签名称和 AI 内容。完整备份是另一项独立功能，会包含敏感内容，并使用你提供的口令加密。文件导出后的保存和分享，以及备份口令的保管，由你负责。
支持邮件。如果你给我们发邮件，我们会收到你的邮箱地址，以及你主动写入或附加的内容。除非处理问题确有必要，请不要发送饮酒记录、API Key、备份口令或其他敏感 App 数据。
5. 本网页
本静态网页不设置广告 Cookie、不运行分析脚本，也无法读取 Stillwise App 记录。与多数网站一样，托管和网络基础设施可能为提供页面、防止滥用和维护安全而处理 IP 地址、浏览器或 User-Agent、请求 URL、时间等基础访问数据。这些数据与 Stillwise App 数据库分离，我们不会将其用于广告画像。
6. 处理目的与依据
设备上的记录用于提供你请求的功能，包括签到、计算本地统计、冲动支持、历史查看，以及维持所选 Apple 界面的一致性。只有在你开启或主动发起时，才会使用可选 iCloud 或远程 AI。适用法律要求法律依据时，我们基于你对可选服务的请求或同意、回复支持邮件和保护网页安全的合法利益，以及必要的法定义务处理数据。你可通过关闭对应功能撤回对未来可选处理的同意；撤回不影响此前已发生的处理。
7. 数据共享与接收方
我们不出售个人数据，不为跨场景行为广告而共享数据，不投放定向广告，也不向数据经纪商披露数据。以下接收方可能在相应场景处理数据：
- 你使用 App Store、iCloud、Widget、Watch、设备备份或系统分享时的 Apple；
- 你确认远程 AI 请求时，自行配置的 AI 提供商或端点运营者；
- 你导出或联系支持时所选的文件位置、云盘、信息服务或邮箱服务商；
- 托管本静态页面的基础设施提供商；
- 依法必须披露，或为保护权利和安全确有必要时的主管机关或专业顾问。
8. 跨境传输
运营者位于中国。Apple、你配置的服务商、邮箱服务商或网页托管方可能在其他国家或地区处理数据；其传输机制和存储位置适用其自身条款及相关法律。启用远程 AI 前，请检查所选提供商的所在地、保留期、模型训练和跨境传输条款。
9. 保留与删除
- 设备记录：保留到你删除单条记录、使用 Stillwise“删除全部”，或移除 App 及其数据。“删除全部”也会关闭并移除该设备上的 Stillwise 提醒设置。
- iCloud 记录：可能保留在 iCloud 或其他已同步设备上，直到你通过相应服务或设备删除。若需一致删除已同步记录，可能需要重新启用相应存储模式后操作。
- 远程 AI 数据：依你所选提供商或端点的政策保留。在 Stillwise 内删除数据，不能删除提供商此前保存的请求日志或输出。
- 购买记录：由 Apple 依 App Store 条款保留；“恢复购买”会请求 Apple 同步当前权益。
- 导出和备份：保留在你保存或分享的位置，直到你在那里删除。
- 支持邮件：通常在最后一次联系后保留不超过 24 个月；如安全调查、争议处理或法律要求合理需要更长时间，则可能延长。
- 网页安全日志：如托管方保留，依其安全和保留配置处理。
10. 你的选择与权利
无需开启 iCloud、远程 AI 或购买 Stillwise Plus，也可使用免费签到、历史、目标、基础统计、冲动支持、专业帮助、数据控制、Widget 和 Watch 签到。你可以在 App 内恢复 Plus 购买、关闭 AI、请求切换存储模式、关闭提醒、导出指定记录、创建加密备份或删除 App 数据。
根据你的所在地，你可能依法享有访问、知情、更正、删除、限制或反对处理、获取可携副本、撤回同意，以及向数据保护监管机构投诉等权利。加州居民在法律适用时还可能享有知情、更正、删除，以及行使权利时获得平等服务的权利。Stillwise 不出售个人信息，也不为跨场景行为广告共享个人信息，因此 App 内没有“选择退出出售/共享”的开关。
多数 App 记录只存在于你的设备或你选择的服务中，我们可能不持有、也无法识别这些记录。请先使用 App 控制或联系相应服务商。对于我们确实持有的数据（例如支持邮件），请使用相关邮箱向 linandixon@gmail.com 发出请求。我们可能需要验证请求，并会依适用法律答复；当地法律允许时，你也可以委托授权代理人。
11. 安全
Stillwise 使用平台安全能力，将远程 AI API Key 存入 iOS Keychain，正式版 AI 端点要求 HTTPS，并对完整备份文件进行口令加密。任何存储或传输方式都无法保证绝对安全。请保护设备密码、Apple 账号、AI 凭证、导出文件和备份口令。如认为数据面临风险，请关闭受影响的可选服务并联系对应提供商。
12. 儿童
Stillwise 并非为儿童使用而设计，我们不会主动寻求儿童个人数据。如果你认为儿童通过支持或可选服务向我们发送了个人数据，请联系我们采取适当措施。
13. 健康与安全边界
Stillwise 提供习惯支持工具，不诊断酒精使用障碍、不替代专业医疗，也不提供紧急治疗。请勿通过隐私邮箱寻求紧急或医疗帮助；需要时请联系当地急救服务或合格医疗人员。
14. 政策更新
当 App、服务商或法律要求变化时，我们可能更新本政策，并在本 URL 发布新版本及更新生效日期。如果变更实质影响可选数据流，App 会在未来处理发生前提供法律要求的额外提示或选择。
15. 联系方式
隐私与反馈：linandixon@gmail.com。产品帮助也可查看 Stillwise 支持页面。