Privacy Policy – StillHere (Android)

Privacy Policy – StillHere (Android)

Last updated: July 31, 2026

This Privacy Policy explains how StillHere (“Service”) handles information when You use our application. Please read this Privacy Policy carefully. By using the Service, You agree to the practices described in this policy.

1. Developer

Developer: Frantisek Varadzin
Country: Germany
Email: email@varadzin.com

2. Where Your Data Is Stored

StillHere stores and synchronizes data between the devices You have paired. On Android, that data is stored in StillHere’s Firebase project (Cloud Firestore and Cloud Storage) hosted in Google’s Frankfurt, Germany region (europe-west3).

The Developer operates a small amount of server-side code (Google Cloud Functions, also in Frankfurt) whose only job is to wake up the other paired device when a check-in or a photo arrives. It does not store data of its own.

The Developer can technically access these databases in order to operate, maintain, and troubleshoot the Service, but does not access Your data except where strictly necessary for these purposes or to handle a support request from You.

3. Data We Handle

StillHere stores the following data:

  • Check-in records (timestamps and status)
  • Photos and messages shared between connected devices
  • Emergency contact information (name, phone number, FaceTime address, and photo), which You may type in or import from Your device’s contacts
  • Senior profile settings (name, photo, phone number, FaceTime contact, check-in time, time zone, pause periods)
  • Connection and invitation codes used to pair devices
  • An anonymous account identifier, created automatically so that the security rules can tell Your devices apart. It is not linked to Your name, email, or Google Account, and You are never asked to create an account or sign in.

In normal use of the app, this data is only accessible to the devices You have paired using Your connection code. It is used solely to provide the Service and for no other purpose.

If You import an emergency contact from Your device’s address book, only the entry You select is used. StillHere does not read, upload, or keep the rest of Your contacts.

Third-Party Services

  • Google Firebase (Cloud Firestore, Cloud Storage, Anonymous Authentication, Cloud Messaging, Cloud Functions): stores and synchronizes Your data and delivers the silent notifications that keep the two devices in step. Google’s privacy policy applies. Firebase Analytics is deliberately not used and is not included in the app.
  • Firebase Cloud Messaging (FCM): delivers check-in reminders and alerts to Your device. The notification token that identifies Your device is handled by Google so that messages can be addressed to it.
  • WishKit: powers the in-app feature-request list. It only receives what You choose to write there, and only if You open it and post something.
  • Google Play: distributes the app. This version of StillHere is free and contains no purchases, so no payment data is created or processed.

4. What We Do NOT Collect

We do not collect or store:

  • Your name, email address, or any account credentials for the Service itself
  • Device location data
  • Browsing history
  • Analytics or usage-tracking data
  • Advertising identifiers
  • Cookies or similar tracking technologies
  • Your contact list (only the individual contacts You choose as emergency contacts)

We do not use any advertising, ad-tracking, or analytics tools, and we do not track You across other companies’ apps or websites. We do not sell Your data, and we do not use it to build a profile of You.

5. Legal Basis for Processing (GDPR)

As the Developer is based in Germany, the General Data Protection Regulation (GDPR) applies. The legal basis for handling Your data is:

  • Contract performance (Art. 6(1)(b) GDPR): Processing is necessary to provide the Service You have requested, including synchronizing check-in data and settings between connected devices.
  • Consent (Art. 6(1)(a) GDPR): Where applicable, such as when You enable push notifications, share photos within the app, or import a contact.
  • Legitimate interests (Art. 6(1)(f) GDPR): Where You add another person as an emergency contact, we process their name and phone number so that they can be reached in an emergency. Please only add people who would expect to be contacted on the Senior’s behalf.

The Developer is the data controller. The following act as data processors under their own terms: Google Ireland Limited and Google LLC (Firebase, including Cloud Messaging) and WishKit.

Data stored in Firebase is held in Google’s Frankfurt, Germany region. Where a processor is based outside the European Economic Area, transfers are covered by that provider’s Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

6. Data Sharing

We do not sell Your data and we do not share it for advertising or marketing. Your data is shared only with the devices You have paired and with the service providers listed in Section 3, who process it on our behalf in order to run the Service.

When You connect a Senior and Family device using a connection code, the connected devices share check-in data, photos, and settings through the app’s database. Anyone who has Your connection or invitation code can pair with You, so please share it only with people You trust.

7. Data Retention

Your data is retained in the Service’s database for as long as You use the Service.

Deleting the app from Your device removes local data, but data already synchronized (such as check-in records, photos, and settings) remains stored until deleted. You can request complete deletion of Your data at any time by contacting the Developer at the email address in Section 11; the request will be processed within 30 days.

8. Your Rights Under GDPR

Under the General Data Protection Regulation, You have the following rights:

  • Right of access: You can view Your data directly within the app, or request a copy of it by contacting the Developer.
  • Right to rectification: You can edit or correct Your data directly within the app at any time.
  • Right to erasure: You can request deletion of Your data at any time by contacting the Developer.
  • Right to data portability: You can request a copy of Your data in a commonly used format by contacting the Developer.
  • Right to withdraw consent: You can withdraw consent for push notifications at any time through Your device settings.
  • Right to object: You can object to processing based on legitimate interests by contacting the Developer.
  • Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. The competent authority in Germany is the data protection authority of the respective federal state (Landesdatenschutzbeauftragte).

The Developer will respond to any request concerning Your rights within 30 days.

9. Children’s Privacy

Our Service is not intended for anyone under the age of 18. We do not knowingly collect personal data from children. If You are a parent or guardian and become aware that Your child has used the Service, please contact us so we can take appropriate action.

10. Changes to This Privacy Policy

We may update this Privacy Policy if required (e.g., if we start using additional services). We will notify You of any significant changes within the app or via Google Play. We will provide at least 30 days’ notice before any material changes take effect.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise Your rights under GDPR, please contact:

📧 Email: email@varadzin.com