Privacy Policy

The short version

Here's everything that matters, in plain language:

• Your habits stay with you. Everything you log lives on your device and, if you use iCloud, in your own private iCloud account. We have no access to it and never receive a copy.
• No account, no login. Stasis never asks you to create an account or hand us an email to use the app.
• No tracking, no ads, no selling. The app contains no analytics SDKs, no advertising, and no third-party trackers. We never sell your data — to anyone, ever.
• Apple Health is read-only and private. If you link a habit to Apple Health, Stasis only reads the values you choose, and that health data is never sent to us.
• The website stays minimal. We use privacy-friendly, cookieless analytics, and the contact form is the only place you would ever send us personal information.

Who we are

Stasis ("the app") and this website (stasis.fyi) are operated by CopyBucket, Inc. ("we", "us", "our"). We are the data controller for any personal information described in this policy.

This policy covers the Stasis apps for iPhone, iPad, and Apple Watch, together with the stasis.fyi website.

Your habit data stays on your devices

When you create habits, log progress, write notes, or record slips, that information is stored locally on your device using Apple's on-device database.

If you are signed in to iCloud, your data also syncs through your own private iCloud account so it stays consistent across your iPhone, iPad, and Apple Watch. This uses Apple's iCloud (CloudKit) and stays within your personal iCloud space — it is not stored on any server we control, and we cannot see, access, or retrieve it. Apple's handling of iCloud data is governed by Apple's Privacy Policy.

There is no account system in Stasis. You never give us your name, email, or any login to use the app. Your data moves between your own devices, with you in control.

Apple Health (HealthKit)

Some habits can be linked to Apple Health so they update on their own. If — and only if — you choose to link a habit, Stasis requests read-only permission for just the metrics involved, which may include steps, active energy, exercise minutes, sleep, and water intake.

Our use of Apple Health follows Apple's HealthKit requirements and the App Store guidelines for health data. We use Health data for one purpose only — to display and track the habits you've linked, on your own devices. Specifically, Health data read from Apple Health:

• is never transmitted to us or to any third party;
• is never used for advertising, marketing, or any form of data mining;
• stays on your device and within your private iCloud sync, alongside your other habit data;
• can be revoked at any time in the Apple Health app or iOS Settings, after which Stasis simply stops reading new values.

Reminders and notifications

If you add a reminder to a habit, Stasis schedules local notifications on your device. The wording is generated on your device using Apple's on-device intelligence — no reminder text, habit name, or schedule is ever sent to a server to produce it. It all stays on your iPhone.

You can turn notifications off at any time in iOS Settings.

Purchases

Stasis offers an optional Premium upgrade. Purchases are handled entirely by Apple through the App Store using StoreKit. We never see or receive your payment details, card numbers, or Apple Account credentials.

Apple provides us only with anonymous information about whether a purchase or subscription is active, so the app can unlock Premium features. This is governed by Apple's Privacy Policy. We use no third-party payment processor.

Website analytics

On this website we use Umami, a privacy-focused analytics tool, to understand general traffic — for example, which pages are visited and roughly where visitors come from. Umami does not use cookies, does not track you across other websites, and does not collect personal information.

It reports only aggregate, anonymized statistics, such as page views, referring sites, country, device type, and browser. We cannot use it to identify you.

The contact form

If you use the contact form on this website, you choose to send us your name, email address, and your message. We use that information solely to read and reply to you. Your message reaches us by email and is not stored in any database — we keep it only within our email for as long as needed to handle your enquiry, and delete it on request.

To reduce spam, the contact form uses Google reCAPTCHA. reCAPTCHA may collect device and usage information and set cookies, and is provided by Google under Google's Privacy Policy and Terms of Service. We use it only to tell humans and automated bots apart, and for no other purpose.

What we never do

To be completely clear, Stasis and stasis.fyi do not:

• sell, rent, or trade your personal information;
• show you ads or share your data with advertisers;
• embed third-party tracking or analytics SDKs in the app;
• build advertising or marketing profiles about you;
• access, read, or store your habit or health data on our own servers.

How long we keep your data

Your habit data stays on your devices and in your iCloud for as long as you keep the app installed and choose to keep it. You can delete any habit, or all of your data, at any time from within the app; deleting the app and removing its data from iCloud removes it entirely.

Messages you send through the contact form are kept in our email only as long as needed to respond to and follow up on your enquiry, and are deleted on request.

Your privacy rights

Depending on where you live — including the European Economic Area and the United Kingdom — you have rights over your personal information, including the right to access, correct, delete, restrict, or object to its processing, and the right to data portability.

In practice, almost all of your data in Stasis is already under your direct control: it lives on your own devices and iCloud, and you can view, edit, export, or delete it yourself at any time within the app (including a full CSV or JSON export). For the limited personal data you may send us through the contact form, you can exercise any of these rights by emailing us.

Where we process personal data, our legal bases are your consent (for example, when you contact us) and our legitimate interest in operating and improving Stasis. You also have the right to lodge a complaint with your local data protection authority.

California privacy rights

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and not to be discriminated against for exercising your rights.

We do not sell or share your personal information, and we have not done so in the preceding twelve months. The app collects no personal information for us; the only personal information you may provide is what you choose to send through the contact form. To make a request, email us using the details below.

Children's privacy

Stasis is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from children. If you believe a child has sent us personal information through the contact form, please contact us and we will delete it.

International data transfers

We operate from the United States. If you contact us from outside the United States, the personal information in your message will be transferred to and processed in the United States. Your habit and health data, by contrast, stays within your own device and your Apple iCloud account and is never transferred to us.

Security

Your habit data is protected by your device's security and by Apple's iCloud protections. We rely on reputable providers — Apple for the app and sync, and standard secure transport for this website and the contact form. No method of storage or transmission is ever completely secure, but because we hold so little of your data, the surface area is intentionally small.

Changes to this policy

If we make material changes to this policy, we will update the date at the top and, where appropriate, note the change on this page. Your continued use of Stasis after an update means you accept the revised policy.

Contact us

If you have any questions about this policy, or you'd like to exercise any of your rights, reach us at:

• The contact form on this website
• Email us directly (enable JavaScript to view the address)