Your data, clearly explained
LFX TECH PTY LTD, trading as LFX Tech, Australia, provides Still Social, its browser companion and stillsocial.app. Privacy requests or complaints: hello@stillsocial.app.
We use account and feature information to provide Still Social. Our browsing and filter features do not automatically upload your social messages, searches, viewed pages, passwords or cookies to our servers. Social websites receive your activity directly under their own privacy policies.
We do not sell or rent Still Social account information for advertising, or use Still Social account or diagnostics information for advertising. Optional diagnostics starts off.
Accounts and progress
We keep your email, account identifier, sign-in and account timestamps, role, plan, purchase status and referral records. Sign-in providers, where offered, process the sign-in too. Your Still Social account is separate from your social accounts.
When signed in, supported settings and progress are backed up to your account. These include filter and time choices, custom block-screen text, achievements, check-in dates, activity timestamps and daily achievement points. Your PIN, social cookies, raw browsing sessions and private phone-app selections are excluded.
Optional reward syncing sends daily points to an additional redemption ledger to prevent duplicate credit. Turning it off stops new ledger uploads; it does not stop ordinary progress backup or erase earlier ledger records. Optional partner approvals store the linked accounts, requests and approval records.
Family controls
Still Social Family stores relationships, nicknames, invitations, guardian permissions, rules, devices and changes or approvals. Use nicknames rather than full child names. The owner chooses an invited guardian’s access. Linking does not verify age or guardianship.
Linked-child controls need private daily per-app time, visit and feed counts even when weekly summaries are off. Device identifiers, labels, connection status, permission and setup status, selected-app counts and applied-rule records help approve devices and share limits. These records exclude social messages, searches, viewed post identities and URLs. Phone-app names and private Apple selection tokens stay local.
Weekly summaries start off. If an authorised parent enables them, future daily per-app minutes, visits and blocked-feed totals are shared; children can see when sharing is on. Turning sharing off deletes stored shared summary totals. Records needed to enforce controls remain.
Optional parent alerts use an account-linked device delivery token and Apple or Google push services. Fixed alert text excludes child names and browsing content. Local reminders do not need these tokens. Optional Family NFC keys send and store a hash of the tag identifier for approval; this is a habit boundary, not proof of identity.
Browsing and device permissions
Provider sessions and local filters run on your device. Website requests go to the relevant provider. Still Social uses local website cookies to keep separate browsing profiles and support actions such as authenticated media downloads. It can read page information needed for its controls. Media titles, artwork and playback state support local media controls. Allowed page URLs and scroll positions can be remembered locally; they are excluded from account sync and device export. Camera, microphone and selected-file permissions support actions you choose. A media file you choose to save can remain in Photos or Files. These actions do not automatically upload your social content to our servers.
Phone-app blocking processes selected apps and operating-system permissions locally. Android Messages processes supported notifications locally without uploading their contents or keeping an inbox archive. Optional walking rewards process step counts locally; earned progress can still be backed up.
The browser companion keeps personal filtering and usage locally. Connecting an account checks your plan and imports supported settings. Personal desktop usage and edits do not automatically upload as phone settings. Linked children use the Family device and shared-limit services above. Phone cookies are not copied to the companion.
Social websites you choose
Still Social opens independent social websites. Information you choose to enter there, such as website account details, posts, comments, messages or selected photos, videos and recordings, goes to the relevant provider. Those websites also receive requests and activity such as searches, page visits and interactions, together with IP addresses, cookies and browser or device information. They may associate these records with your website account and keep them under their own retention rules.
The providers describe their uses of different records for their services, security, personalisation, analytics and advertising. Depending on the provider, feature, country and settings, identifiers or activity can be shared with advertising partners. AI features, such as Grok, can also process prompts, responses or voice inputs for model improvement and personalisation under the provider's terms and choices. The applicable uses depend on the record and feature; each provider explains these in its policy.
Still Social's feed and time controls do not replace the providers' privacy settings or prevent every form of website tracking. Use each provider's settings to manage its available privacy, advertising and AI choices. Your Still Social account and deletion choices remain separate from those website accounts.
Provider policies: Instagram, Facebook and Threads, YouTube and Google, X, Snapchat, TikTok, Reddit, LinkedIn and Pinterest. The providers may present a country-specific version.
Purchases, diagnostics and support
Apple or Google handles store payments; we do not receive card details. Configured purchase services connect RevenueCat to your account identifier before a purchase, including for non-paying accounts. RevenueCat processes purchase and service metadata; we keep plan and purchase records to provide access and restore purchases.
If enabled while signed in, automatic diagnostics sends account-linked app actions, supported-app identifiers for open, close or block events, version, build, platform and sanitised error types or code locations. It excludes social content, URLs, searches, cookies, tokens and general logs. Turning it off clears queued events, not previously uploaded records.
Problem reports are a separate choice. They send your entered text, account identifier and build/platform information. Email support receives your address, message and attachments. Please leave out passwords, codes and private social content. Diagnostics off does not stop account traffic or providers’ operational logs.
Providers and protection
We use Supabase for sign-in and account, Family, diagnostics and report records; Resend or Microsoft 365 for sign-in email; RevenueCat for purchases; Vercel for this website; and Cloudflare for the web control interface. Parent alerts use Apple APNs or Google FCM. Providers process connection, security and transaction information, including IP addresses, approximate city or country inferred from them, and browser/device metadata, to deliver, troubleshoot and protect services. Our primary Supabase account database is in Seoul, South Korea. Our Resend sign-in emails are sent from Tokyo, Japan; Resend stores email metadata, logs and API account records in the United States. RevenueCat documents United States processing for its service providers. Processing can occur outside your country, including outside Australia, the EEA or UK. You can ask about recipient countries, applicable transfer safeguards and how to obtain a copy.
Authorised people can access information needed for support and operations. Account-service connections are encrypted and account access is restricted. No system is perfectly secure; we assess incidents and make notifications required by law. We may disclose information where law requires or permits it. Social websites and stores also have independent relationships with you.
Keeping and deleting information
Account and progress records generally remain while the account exists. Family counters use rolling cleanup, and displayed Family history covers 90 days. Diagnostics and reports have a 30-day dashboard window. Cleanup activity affects physical deletion; these windows are not guaranteed erasure deadlines. Provider logs, financial/security records and backups have separate retention.
Open Privacy and data in Account settings and choose Delete account, or use our deletion steps. Successful deletion removes the sign-in account and related application records. Some attributed actions and nicknames can remain in a continuing family’s history. Retained legal, security, provider or backup records may need separate handling. Deletion does not cancel subscriptions or erase local files or social accounts.
Your choices and rights
Email us for access, correction, deletion or a privacy complaint. We may verify ownership proportionately; tell us if you cannot access your account email. We review the issue, explain the outcome and any retained records, and respond within applicable legal deadlines. You can complain to your local privacy regulator, including Australia’s OAIC, the UK ICO or an EEA supervisory authority. Where applicable, rights also include portability, restriction and objecting to processing based on legitimate interests. The app export is an account summary, not every provider’s records.
Where EEA/UK data-protection law applies, we are the controller for our services. We rely on contract for processing needed for your account and purchases; legitimate interests in security, preventing misuse and answering support, balanced against your rights, especially children’s rights; consent for optional diagnostics and other optional processing where required; and legal obligations for mandatory records. You may withdraw consent at any time through the relevant setting or by contacting us, without affecting earlier lawful processing. Without required account or purchase information, we cannot provide that feature.
Still Social is intended for global use by people aged 13 and over, including teens, where legally available. Higher local and social-platform age or consent rules apply; Family does not override them. We do not verify age or guardianship, and a Family invitation is not verified parental consent. Contact us about a suspected under-13 account so we can investigate and remove it as appropriate.
The website has no account form or checkout and its code sets no analytics or advertising cookies. Hosting still processes connection records. If the operator changes, necessary records may transfer lawfully with safeguards and required notice or consent. Material policy changes receive appropriate notice and any required consent.