Stillus is operated by Stillus AI LLC ("Stillus," "we," "our," "us"), based in Michigan, United States. This privacy policy explains how we collect, use, store, and protect your personal information when you use the Stillus platform.
| Data Type | What It Is | Why We Need It |
|---|---|---|
| Account info | Email address, age | Account creation, age verification, communication |
| Companion data | Companion name, personality settings | Providing the service |
| Conversations | Messages you send and receive | Generating AI responses, maintaining chat history |
| Memories | Facts extracted from conversations (name, interests, etc.) | Making your companion remember you across sessions |
| Usage data | Message counts, session times, feature usage | Enforcing plan limits, safety monitoring, improving the service |
| Uploaded files | Images, documents you share with your companion | Allowing your companion to see and discuss your content |
| Payment info | Processed by our payment provider — we don't store card numbers | Subscription billing |
| Safety logs | Timestamps and alert types (not message content) when crisis patterns are detected | Safety monitoring |
To provide the service: Your messages are sent to our AI providers (see Section 4 for the full list) to generate companion responses. Your memories and companion settings are used to personalize these responses. This is the core function of Stillus — without processing your messages, the companion cannot respond.
To keep you safe: We monitor message patterns (not content) for signs of crisis, self-harm, or dangerous situations. When crisis patterns are detected, the companion provides crisis resources. These safety systems operate automatically — we do not read your conversations.
To maintain your account: We use your email for account recovery, important service announcements, and (only if you opt in) product updates. We use your age solely for verification — we don't use it for marketing or share it with third parties.
To improve Stillus: We may analyze aggregate, anonymized usage patterns (not individual conversations) to improve the service. We will never read your conversations for marketing purposes or sell your data to advertisers.
AI model providers: Your messages are processed by the following providers to power different features:
These providers process data according to their own privacy policies and API terms. None of these providers use API data to train their models. The specific providers used may change over time — this list will be updated accordingly.
Payment processor: Subscription payments are handled by our payment provider. They receive only the information necessary to process your payment — we never see or store your full card number.
We do NOT share your data with:
Legal requirements: We may disclose information if required by law, court order, or to protect the safety of our users or the public.
Stillus is for users 18 and older. We do not knowingly collect personal information from anyone under 18. Age is verified during account registration. If we learn that a user is under 18, we will immediately delete their account and all associated data.
If you believe someone under 18 has created an account, please contact us at privacy@stillus.ai and we will take immediate action.
We take reasonable measures to protect your personal information, including encrypted data transmission (HTTPS/TLS), secure storage with access controls, and regular security reviews. However, no system is perfectly secure, and we cannot guarantee absolute security of your data.
Conversations are stored to provide the service (chat history, memories). We do not store conversations longer than necessary — chat history is limited to recent messages, and you can delete everything at any time.
You have the right to:
To exercise any of these rights, contact us at privacy@stillus.ai. We will respond within 30 days.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how we use it, the right to request deletion, and the right to opt out of the "sale" of personal information. We do not sell your personal information.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your data is your consent (provided at registration) and legitimate interest (providing the service). You have the right to lodge a complaint with your local data protection authority.
We retain your data for as long as your account is active. Upon account deletion, we remove your data from active systems within 30 days. Backup copies may persist for up to 90 days. Safety alert logs may be retained for up to 1 year for legal compliance purposes.
If you stop using Stillus without deleting your account, we may delete inactive account data after 12 months of inactivity, with 30 days' email notice before deletion.
Stillus uses minimal local storage to maintain your session (companion name, memories, chat history, preferences). We do not use third-party tracking cookies, advertising pixels, or analytics services that track you across the web. We may use basic, privacy-respecting analytics to understand aggregate usage patterns.
We may update this privacy policy from time to time. If we make significant changes to how we handle your data, we will notify you via email at least 30 days before the changes take effect.