StillLink — 隱私權政策
最後更新：2026 年 10 月 28 日
*The short version — 先說重點
Without signing in, your charts stay on your device. If you sign in, your data syncs to your own account, and only you can read it. No ads and no cross-app tracking; anonymous usage data can be turned off in Settings.
01 — Works without an account
If you do not sign in, StillLink does not collect your personal data: the charts you create (name, birth date and time, birthplace), notes, photos, avatars and settings stay on your device only. The only things sent out are anonymous usage data and crash reports (see Anonymous usage data and Crash reports below); both can be turned off.
02 — What we store when you sign in
When you sign in with Apple or Google, the following is stored in your account so it can sync across your devices: your account identifier and email address, charts, notes, photos, avatars, and preferences (display name, chart settings, sort order, appearance). With Sign in with Apple, you can choose to hide your email.
03 — Data from Google Sign-In
When you sign in with Google, Google shares your account identifier, email address, name and profile picture URL. StillLink uses only the identifier and email address to recognise your account and sync your data. It does not access your Google Drive, contacts or any other Google service, and never shares this data with anyone. The way StillLink uses information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
04 — Where it’s stored and how it’s protected
Cloud data is stored with Supabase, a cloud database service hosted on AWS in the Asia-Pacific region. All traffic is encrypted over HTTPS, the database only lets each account read and write its own data, and photos are kept in private storage that only you can access.
05 — Who can see it
Only you. For maintenance, the developer can technically access the database console, but will not look at your content, and will never analyse it, use it for advertising, sell it or share it with anyone, unless required by law.
06 — What we don’t do
No ads, no tracking across apps or websites, and your data is never used to train any model.
07 — Anonymous usage data
To learn which features work well and where people get stuck, StillLink sends anonymous usage data to PostHog, an analytics service with servers in the United States: which screens are opened, which features are used, which palace is tapped, how far you get in onboarding, plus device type, OS and app version, plan, and light or dark mode. Each device uses a random ID, so we do not know who you are, and your location is not collected; your name, birth details, birthplace, notes, photos, chart content, email address and account are never sent. If you would rather not send this data, turn off Send Anonymous Usage Data in Settings, and nothing more will be sent.
08 — Crash reports
If the app closes unexpectedly, the next time you open it, it sends the error type, where in the code it happened, and the app and OS versions to PostHog so we can find and fix the problem. This never includes your name, birth details, charts, notes, photos, email address or account. It uses the same switch as anonymous usage data: turn off Send Anonymous Usage Data and crash reports are not sent either.
09 — Payments
Pro purchases are paid through the Apple App Store (iPhone, iPad, Mac) or Google Play (Android). Payment details are handled by Apple or Google, so we never see your card number or payment information; we only receive the plan type, expiry date and transaction ID to confirm your plan.
10 — Where charts are calculated
Entirely on your device, using the open-source iztro engine. Only the data you save is synced — chart calculation never goes through a server.
11 — When the app goes online
When you sign in (Apple or Google, and Supabase; on Android, Google sign-in is completed in your browser), when you sync (Supabase), and when you buy or restore a purchase (App Store or Google Play). The Mac version downloaded from the website also checks GitHub for app updates, which shares standard connection information such as your IP address and app version. Sending anonymous usage data or crash reports connects to PostHog, which also receives this kind of standard connection information.
12 — Third-party services
Apple and Google for sign-in, the Apple App Store and Google Play for payments, Supabase for synced data, GitHub for app updates to the Mac version downloaded from the website, and PostHog for anonymous usage data and crash reports. Each handles connection information under its own privacy policy.
13 — Retention and deletion
Cloud data is kept until you delete your account. Choosing Delete Account in the app permanently removes your charts, photos and account from the cloud and clears the device. Signing out only clears the device; your cloud data stays. If you cannot open the app or can no longer sign in, follow the steps at jeanui.com/stilllink/delete, and once we confirm it is you, we will delete your account and cloud data within 30 days.
14 — Charts for other people
Birth details of family, friends or clients are their personal data too — please get their consent before entering them. Once you sign in, these charts are synced to your account as well.
15 — Changes to this policy
We update the date above whenever this policy changes, and will tell you in the app before any significant change, such as collecting more data.
16 — Contact
Questions? Email [email protected].