Privacy Policy

Effective date: April 10, 2026. This policy describes how Still Point (“we,” “us”) handles information when you use the website and services available at https://still-point.me (the “Service”).

Information we collect

We collect information you provide and limited technical data needed to run the Service.

Account and profile. Email address, username, and a password hash (we do not store your password in plain text).
Session and practice data. Meditation session records such as day number, duration, completion status, timing details, and optional “mind state” notes you log during a session.
Thoughts and journal entries. Text you choose to save as thoughts or notes associated with your sessions.
Sign-in session. When you are logged in, we use an HTTP-only cookie to keep your session active and associate requests with your account.
Technical data. Standard server and hosting logs (for example IP address, browser type, and request timestamps) that our infrastructure providers process when you use the Service.

How we use your information

We use the information above to:

Create and maintain your account and authenticate you.
Provide the Still Point meditation experience, including history, progress, and related features you enable.
Operate, secure, troubleshoot, and improve the Service.
Comply with law and respond to valid legal requests when required.

Storage and security

Your account and application data are stored in a PostgreSQL database hosted with Neon. The web application is hosted on Vercel. We use industry-standard practices we reasonably can, including encrypted connections (HTTPS), hashed passwords, and access controls on our systems. No method of transmission or storage is completely secure; we work to protect your information but cannot guarantee absolute security.

Sharing and sale of data

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We share information only as needed to operate the Service with trusted service providers who process it on our behalf (for example cloud hosting and database infrastructure), under agreements that require them to protect your information and use it only for the services they provide to us. We may also disclose information if required by law, legal process, or to protect the rights, safety, or integrity of our users or the Service.

Retention and your choices

We retain your information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request access to, correction of, or deletion of your personal information, or ask questions about this policy, using the contact information below. We will respond in line with applicable law. If you opt into features that make certain information visible to others (for example a public profile), you can change those settings in the app where available; some data may remain visible until you update settings or we process a deletion request.

Children

The Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will take appropriate steps to delete it.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the effective date above. If changes are material, we will provide additional notice as appropriate.

Contact

For privacy-related requests or questions about this policy, contact Bretton Auerbach via brettonauerbach.com. Please include “Still Point privacy” in your message so we can help you promptly.