Privacy Policy

Stillpoint mobile application and related services
Last updated: 11 August 2026

1. Scope

1.1  This policy describes how Nextechnologies Labs Private Limited ("we", "us" or "our") collects, uses, discloses and retains personal information in connection with the Stillpoint mobile application and any related services (together, the "Service").

1.2  This policy applies to all users of the Service. It does not apply to any third party website or service that you may reach through a link in the Service, each of which is governed by its own privacy policy.

1.3  By creating an account or otherwise using the Service, you confirm that you have read this policy.

2. Information we collect

2.1 Information you provide to us

(a)  Account information. Your email address, the display name you select, and a password. Your password is stored only in hashed form by our authentication provider. We do not store or have access to your password in plain text.

(b)  Task content. The text you enter or dictate when creating a task, together with any title, due date, priority and category associated with it. The content of a task is determined entirely by you and may contain personal information.

(c)  Voice recordings. Where you create a task by speaking, we transmit the audio recording for transcription. We store the resulting text as the task. We do not retain the audio recording after transcription is complete.

(d)  Invitation details. Where you invite another person to connect with you, we record the email address you supply, the status of the invitation and its expiry.

2.2 Information collected automatically

(a)  Notification identifiers. A push notification token issued by the operating system for each device on which you sign in, together with the device platform and, where available, a device label. These are used only to deliver notifications you have enabled.

(b)  Session records. The time at which a session was created and last used, so that we can keep you signed in and terminate sessions that have lapsed.

(c)  Technical logs. Our hosting provider records standard request information, including internet protocol address, timestamp and the endpoint requested, for the purposes of operating and securing the Service.

2.3 Information from services you connect

(a)  Where you choose to connect a third party task service, we receive information about the items you have elected to link, which may include the item title, description, due date and the name of the list it belongs to. No such connection is established unless you configure it.

2.4 Information we do not collect

(a)  We do not operate advertising trackers within the Service, and we do not sell, rent or license personal information to any party.

(b)  We do not collect location data, contact lists or photographs.

(c)  We do not access the microphone except during a voice capture that you initiate.

3. How we use information

We use personal information for the following purposes only:

(a)  to create and administer your account and authenticate you;

(b)  to store, organise and display the tasks you create;

(c)  to transcribe voice recordings into text, and to determine a title, due date, priority and category for a task;

(d)  to deliver reminders and other notifications you have enabled;

(e)  to send service messages, including account confirmation, password reset and invitation emails;

(f)  to enable you to share tasks with users you have connected with;

(g)  to maintain the security and integrity of the Service, and to investigate suspected misuse; and

(h)  to comply with our legal obligations.

4. Disclosure to service providers

4.1  We engage the providers listed below to perform functions on our behalf. Each is permitted to process personal information only for the purpose stated and in accordance with our instructions.

RecipientInformation disclosedPurpose
SupabaseAccount information, task content, connections, session recordsDatabase hosting and authentication
VercelRequests to the Service and technical logsApplication hosting
DeepSeekThe text of a task you createDetermining a title, due date, priority and category for the task
GroqVoice recordings you createTranscribing speech into text
Google FirebaseNotification token and notification contentDelivery of notifications
ResendYour email address and the content of the messageDelivery of service emails
ClickUpData from items you elect to linkOptional integration, where configured by you

4.2  Automated processing of task content. You should be aware that the text of every task you create is transmitted to DeepSeek in order to determine its title, due date, priority and category, and that any voice recording you create is transmitted to Groq in order to be transcribed. Both providers are established outside India and process data on infrastructure located outside India. If you do not wish particular information to be processed by these providers, you should not enter it into the Service.

4.3  We may also disclose personal information where we are required to do so by law, court order or a competent authority, or where disclosure is necessary to establish, exercise or defend a legal claim.

4.4  If our business is transferred, in whole or in part, personal information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5. International transfers

5.1  Our database and application servers are located in the United States. The providers named in clause 4.1 process personal information in the United States and in other jurisdictions.

5.2  By using the Service you acknowledge that your personal information will be transferred to and stored in those jurisdictions, which may not provide the same level of data protection as the jurisdiction in which you reside.

6. Retention

6.1  We retain account information for as long as your account remains open.

6.2  Tasks are retained until you delete them. A task you delete ceases to be accessible through the Service. A record may be retained in our database until your account is deleted.

6.3  Voice recordings are not retained once transcription is complete.

6.4  Invitations expire seven days after they are sent. Session records are removed when the session ends or lapses.

6.5  On deletion of your account we delete the account and the tasks associated with it. Copies may persist in routine backups maintained by our providers for a limited period before being overwritten.

7. Your rights

7.1  You may at any time, from within the Service, edit or delete any task you own, remove a connection with another user, or disable notifications through your device settings.

7.2  You may request access to the personal information we hold about you, correction of that information, or deletion of your account, by writing to us at the address in clause 12. We will respond within the period required by applicable law.

7.3  Where you consider that we have not handled your personal information properly, you may complain to us at the address in clause 12, and you may have a right to complain to the data protection authority in your jurisdiction.

8. Information visible to other users

8.1  Where you assign a task to a user with whom you are connected, that user is able to view the task, including its title, description, due date and priority, and is able to mark it complete. That user is notified when the task is assigned and when it is completed.

8.2  Where you invite another person to connect with you, that person is shown the email address associated with your account and your display name.

8.3  Removing a connection prevents any further sharing of tasks between the two accounts.

9. Security

9.1  Personal information is encrypted in transit. Access to our database is restricted to the application, and access controls limit each user to their own tasks and to tasks shared with them. Passwords are hashed by our authentication provider.

9.2  No method of transmission or storage is entirely secure, and we do not warrant absolute security. Where a breach of security affects your personal information, we will notify you and the relevant authority to the extent required by applicable law.

10. Children

10.1  The Service is not directed to children under the age of 13 and we do not knowingly collect personal information from them. If you believe that a child has provided us with personal information, please contact us and we will delete it.

11. Changes to this policy

11.1  We may amend this policy from time to time. The date at the head of this document records when it was last amended. Where an amendment materially affects how we handle your personal information, we will give notice within the Service or by email before it takes effect.

12. Contact

12.1  Enquiries, requests and complaints concerning this policy or your personal information should be sent using the details on our contact page.

12.2  Nextechnologies Labs Private Limited