Still privacy policy

Last updated: 9 October 2026

1. Who we are

Still is made by The Good Phone Company Ltd (company number 16456112, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ) ("we", "us").

• We're the controller of the personal data described here, under the UK GDPR and the Data Protection Act 2018.
• Privacy and legal requests (your data rights, deletion requests, privacy complaints, legal notices): legal@gethavenmobile.com
• Help with the app and refunds: support@gethavenmobile.com

2. The short version

• No screen content ever leaves your phone. Still reads Instagram and YouTube screens on your phone to spot Reels and Shorts. It doesn't save or send your messages, posts or what you watch.
• There's no Still account. We don't ask for your name, email or phone number in the app.
• What can leave your phone:
  • If you buy Pro: a purchase record linked to a random app user ID (through Google Play and our subscription provider, RevenueCat).
  • Only if you turn on Crash reports: technical details if Still crashes (Sentry, EU). Off unless you turn it on.
  • Only if you turn on Help improve blocking: daily counts of how well blocking worked, with no ID. Off unless you turn it on.
  • Only if you turn on Analytics: usage analytics (PostHog, EU). Off unless you turn it on.
• We don't sell your data, show ads, use the advertising ID or track your location.

3. How Still uses Android's Accessibility Service

To block Reels and Shorts inside other apps, Still uses Android's Accessibility Service. Before you turn it on, Still explains this on a separate screen and asks you to agree.

• Where it runs: only in Instagram and YouTube. Still's service receives nothing from any other app.
• What it reads: while Instagram or YouTube is open, it reads the screen's layout and on-screen text (such as tab and button names), on your phone. It uses this to tell whether you're on a Reels or Shorts screen, to let a single video someone sends you play, and to count allowance minutes.
• What it does: it presses Back, or shows a full-screen "Blocked by Still" screen. It doesn't tap, type, post, like, follow, send messages or change settings in those apps.
• What it keeps: only numbers on your phone, such as how many times it blocked a Reel today. It doesn't save or send your messages or what you watch, and it doesn't record your screen.
• You can turn it off at any time in Android Settings › Accessibility, even with Strict Mode on.

This on-device processing isn't sent to us. The only things derived from it that can leave your phone are the anonymous counts in section 4.4 (only if you turn them on) and, if you turn on Analytics, the daily block totals in section 4.5.

4. What data we handle, why, and our lawful basis

4.1 Purchases (if you buy Still Pro)

• What:
  • Google Play handles the payment. We never see your card details; Google processes payment information under its own terms and privacy policy.
  • Our subscription provider, RevenueCat, receives the purchase record: product, price and currency, purchase and renewal dates, subscription status, and a store transaction reference. It's linked to a random app user ID created on your phone, not your name or email.
• Why: to unlock Pro, restore it on a new phone, handle renewals and cancellations, and keep financial records.
• Lawful basis: performance of our contract with you. For financial records: legal obligation (UK company and tax record-keeping).
• Required? Yes, if you want Pro.

4.2 Crash reports (only if you turn on Crash reports)

• What: if Still crashes or freezes, a technical report goes to Sentry (EU data region). It contains what went wrong in the code, the Still version, your phone model and Android version, and a random Sentry installation ID.
  • It never contains screen content.
  • It's not linked to the analytics ID.
  • We've told Sentry not to store IP addresses.
• Why: to find and fix crashes and keep Still working.
• Lawful basis: your consent. Still only stores or sends crash data if you've turned on Crash reports.
• Your choice: off unless you turn it on. You can turn it on or off at any time in Settings › Privacy › Crash reports ("Send a technical report to Sentry (EU) if Still crashes. No screen content."). Turning it off stops reports straight away.

4.3 Rule downloads

• What: Still regularly downloads updated blocking rules from our server, hosted by Cloudflare. The request contains no personal data.
• Your IP address: like any internet host, Cloudflare's network sees your device's IP address in order to deliver the download and protect its network. Our code doesn't read it, and we don't collect, log or store it.
• Lawful basis: legitimate interest in keeping blocking working when Instagram or YouTube change.

4.4 Anonymous diagnostics (only if you turn on Help improve blocking)

• What: once a day, for each type of Reels or Shorts screen that came up, Still sends:
  • the screen type (for example "Instagram Reels viewer")
  • the Instagram or YouTube major version number (or "unknown")
  • Still's version
  • the rules version
  • how many times blocking matched, and how many times it missed
• No ID of any kind (no user, device or install ID), no screen text, no account details, and no per-rule detail.
• Your IP address: Cloudflare's network sees it in order to deliver the request, as any host does. Our code doesn't read it, and we don't collect, log or store it.
• Why: to notice quickly when Instagram or YouTube change their apps and blocking stops working, and fix it.
• Lawful basis: your consent (you turn the switch on). The counts can't be linked back to you once received.
• Kept for: up to 3 months, then deleted automatically. Our storage provider (Cloudflare Analytics Engine) keeps this data for three months and doesn't support deleting individual rows. Because there's no ID, we can't find or delete one person's counts.
• Your choice: Settings › Privacy › Help improve blocking, off unless you turn it on ("Send anonymous daily counts of how well blocking works. No IDs and no screen content."). Turn it off any time.

4.5 Usage analytics (only if you turn on Analytics)

• What: our analytics provider, PostHog (EU Cloud, Frankfurt), receives:
  • which Still screens and settings you use, and onboarding progress
  • daily totals of blocked Reels and Shorts
  • whether Instagram and YouTube blocking are switched on (on/off only)
  • taps on Pro features and the paywall
  • your phone model, Android version, Still version and language setting
  • a random analytics ID created on your phone
• We don't collect screen content, your location or anything you type. We've told PostHog to discard IP addresses and turned off location lookup. Profiles stay anonymous: we never attach your name or email.
• Why: to understand which features help people and improve Still.
• Lawful basis: your consent.
• Kept for: up to 1 year, then deleted automatically.
• Your choice: Settings › Privacy › Analytics, off unless you turn it on ("Send anonymous app usage to PostHog (EU). No screen content."). Turn it off any time; collection stops straight away.

4.6 Support and deletion requests

• What: if you email us (support@gethavenmobile.com for help, legal@gethavenmobile.com for privacy and legal requests), we get your email address and whatever you write. If you send a deletion request, it includes the random IDs shown in Settings › Privacy.
• Why: to answer you and act on your request.
• Lawful basis: legitimate interests (answering you), and legal obligation (handling data protection requests).
• Kept for: 24 months after our last contact with you, then deleted.

4.7 Beta tester sign-up (only if you applied to test Still)

• What: the Google account email you use for the Play Store, phone make, model and Android version, which of Instagram and YouTube you use, an over-18 confirmation, whether you can test for 14 days, and where you heard about us. It's collected through a Google Form in our Google account.
• Why: to choose testers and add them to the Google Play test.
• Lawful basis: your consent, given by ticking the box on the form. You can withdraw it at any time by emailing us, and we'll delete your application.
• Kept for:
  • If you weren't selected: deleted 30 days after invitations go out.
  • If you were selected: deleted 90 days after Still's public launch.
  • It's never combined with app analytics or purchase IDs.
• Launch news: only if you ticked a separate box.

4.8 Our website

Our website (these legal pages and the beta sign-up pages) is hosted by Cloudflare. It uses no cookies and no analytics scripts. Cloudflare's network sees visitors' IP addresses in order to deliver the pages; we don't collect, log or store them.

If a page fails to load, your browser may send Cloudflare a technical network-error report (for example the page address, the type of error and the time). Cloudflare adds this reporting to every website it hosts, and a normal, successful visit sends nothing. We don't receive or use these reports. See Cloudflare's network error logging.

On our beta sign-up pages (/beta/...) we keep a simple daily count of page views for each page address, so we can see which links bring testers. We store only the page address, the date and the count: no IP address, no browser details, no cookies, no link tracking codes. Counts are deleted after 90 days.

5. What we don't do

• No selling or renting of personal data, and no advertising or ad networks.
• No advertising ID, no location tracking, no contacts, no microphone or camera.
• No profiling or automated decisions that have legal or similarly significant effects on you.
• No screen recording, and no sending of anything Still reads from your screen.

6. Who processes data for us

Apart from Google Play, these providers handle personal data for us as our processors, on our instructions and under their data processing terms.

7. International transfers

Some providers are US companies or run global networks, so personal data may be processed outside the UK. Where that happens, we rely on one of the safeguards UK law provides:

• the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge"), where the provider is certified to it; or
• otherwise, the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, included in the provider's data processing terms.

8. How long we keep data

9. Your choices and your rights

In the app: Settings › Privacy has three switches, all off unless you turn them on: Crash reports (section 4.2), Help improve blocking (section 4.4) and Analytics (section 4.5). You can turn off Still's Accessibility Service at any time in Android settings, and uninstalling Still stops everything.

Your rights: under the UK GDPR, you can ask us to:

• give you a copy of your data
• correct it
• delete it
• restrict or object to its use
• move it to another provider

Where we rely on consent, you can withdraw it at any time. We'll reply within one month (extendable where the law allows).

Deleting your data:

• Settings › Privacy shows your random app IDs, with a Request deletion button. It opens an email to legal@gethavenmobile.com with the IDs filled in.
• Within 30 days we delete the matching records from RevenueCat, Sentry and PostHog, except purchase records we must keep by law.
• Turning off a switch stops that data straight away.
• Anonymous diagnostics have no ID, so they can't be traced to you. They're deleted automatically within 3 months.

Complaints:

• Please contact us first at legal@gethavenmobile.com. We'll acknowledge your complaint within 30 days and keep you updated.
• You can also complain to the UK's data protection regulator, the Information Commission (still known as the ICO): make a complaint to the ICO.

10. Who Still is for

Still is for adults aged 18 and over. Still isn't for anyone under 18. We don't knowingly collect data from anyone under 18. If we learn that we have, contact us at legal@gethavenmobile.com and we'll delete it.

11. Security

• Data sent by Still is encrypted in transit (HTTPS).
• Our providers are chosen for their security practices.
• Access to our provider accounts is limited to the people who need it.
• No system is perfectly secure. We'll tell you, and the regulator, about a breach where the law requires.

12. Changes to this policy

We'll update this page when our practices change, for example a new provider. We'll change the "Last updated" date and, for important changes, tell you in the app before they take effect. Where a change needs your consent, we'll ask for it.

13. Contact

The Good Phone Company Ltd · Company number 16456112 · Registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

• Privacy and legal requests: legal@gethavenmobile.com
• Help with the app and refunds: support@gethavenmobile.com

14. Where Still is available

Still is available in the United Kingdom only.