Privacy policy

Stillmoat is a private photo vault for iPhone, made by Leif Mork, an individual developer. Your photos and videos never reach us. The app has no account, no server, no ads and no analytics. This website sets no cookies.

The little we do handle is listed below: website statistics and the technical data Cloudflare needs to serve pages, emails you send us, and what Apple shares with developers.

Photos and videos you add are encrypted on your iPhone. From launch, backup is on unless you turn it off: the encrypted copy goes to your own iCloud Drive or a folder you choose in Files. Your backup can only be opened with your recovery key, and we never have that key.

We have no server and no access to your vault or your backup. We can’t see, recover or delete your photos for you.

One caution: if you save your recovery key in the same Apple Account as your backup, anyone who gets into that account could open the backup. Keep the key on paper or in a password manager that isn’t tied to that account.

The site is hosted by Cloudflare. To deliver pages and protect the site from abuse, Cloudflare processes technical data such as your IP address, browser and the page you asked for, and keeps it only as long as its own retention periods allow.

We use Cloudflare Web Analytics to count visits. It uses no cookies and doesn’t follow you across sites. We see totals only: pages viewed, the site that sent you, browser type and country. Cloudflare keeps these statistics in aggregated form under its own retention periods, and we keep no visitor logs of our own.

We do this because we have a legitimate interest in running a secure site and knowing which pages help people. Cloudflare acts as our processor under its data processing terms, which include the EU standard contractual clauses and the UK addendum.

We don’t track you across sites, so a Do Not Track signal changes nothing here.

If you email us, we receive your address, any name you include and your message. We use them only to answer you. We rely on our legitimate interest in answering you, or on our contract with you if your message is about a purchase. Our email provider stores these messages for us as our processor.

We delete the conversation within 12 months of the last message, unless we need it to resolve a dispute.

Please never send us your PIN, your recovery key or private photos. We will never ask for them, and we delete any we receive.

Purchases in Stillmoat go through the App Store. Apple handles payment and shares sales figures with us without telling us who bought.

If you choose in iOS settings to share analytics with app developers, Apple may send us crash reports. They are technical records without your name, and the app never writes your photos, file names, PIN or recovery key into them. We use the reports only to fix bugs, which is our legitimate interest.

If you join the beta through TestFlight, Apple shares the name and email you gave TestFlight, and any feedback and screenshots you send. We use them to run the beta, which is our legitimate interest, and delete them within 12 months after the beta ends.

Apple’s privacy policy covers what Apple does with your data.

You can ask for a copy of the personal data we hold about you, and ask us to correct it, delete it, limit its use or send it to you in a portable form. You can also object to its use. We answer within one month.

You can also complain at any time to the data protection authority where you live, such as the CNIL in France, your state authority in Germany or the ICO in the UK.

To use these rights, email us at the address below. Because we hold so little, most requests will cover one email thread at most.

Stillmoat is not meant for children under 16. If you think a child has emailed us, tell us and we will delete their messages.

If this policy changes in a way that matters, we will say so at the top of this page and update the date.

We run Stillmoat from Thailand, so emails you send us are read there. Cloudflare serves this site from its global network under the safeguards above.

The controller of your data is Leif Mork, who lives in Thailand. Contact: support@stillmoat.com.