Your grove stays yours.

Effective September 17, 2026 · Applies to the StillAcre app and stillacre.app

Who we are

StillAcre is made and operated by Aldur LLC (“we,” “us”). This policy explains what the app does and does not do with information, in plain language. If anything here is unclear, email us and a person will answer.

What we collect

StillAcre does not require an account for local play and has no in-app advertising. We do not collect your Screen Time choices, device app-usage history, phone address book, precise location, player name, grove name, private solo Focus history, private cottage, currency, inventory, or questionnaire answers. We do not sell personal information. The limited third-party processing used for analytics, subscriptions, and advertising measurement is described below.

Optional Friends account

Friends is optional and begins only when you press Continue with Apple. Apple and Firebase Authentication then process the Apple credential needed to authenticate you, a Firebase account identifier, provider metadata, and any private relay email address Apple includes for authentication. StillAcre does not request your Apple name or email scopes, store an email in its social database, show an email or real name to friends, or use authentication information for marketing.

Google Firebase and Google Cloud process the online Friends service for us. The service stores account status; stable farm and account identifiers; the unique public username you choose; an allowlisted game avatar; Grove Level; accepted-friend and block relationships; invitation hashes, status, and timestamps; and the latest limited farm snapshot you choose to publish through Friends. That snapshot is gameplay content: the exterior farm layout and visible, allowlisted crops, buildings, decorations, terrain, and similar renderable state. It excludes the complete save, economy, inventory, currency, private cottage/interior, companion names, private solo Focus totals or sessions, Screen Time choices or usage, onboarding answers, Apple credential, and email. Firestore and callable Functions are deployed in Northern Virginia, United States; other Firebase Authentication and security processing may use Google’s service infrastructure. Google’s privacy information is available at policies.google.com/privacy.

There is no public profile directory or partial-name search. A signed-in Friends user can look up an exact username through a rate-limited server function and see only its public avatar, Grove Level, and relationship state. Usernames are checked by automated English-language safety and impersonation filters before they are accepted. You can change yours once every 30 days; after a change, the prior name is non-searchable and held without an account identifier for 30 days before it may be claimed again. The owner and a current, unblocked, accepted friend can read the exact allowed profile or active snapshot. Invitation links are single-use capabilities that expire after seven days. The server stores only a hash of the secret invitation token; the app keeps the currently displayed token in this-device-only Keychain storage so you can share or cancel it. A person you share a link with can forward it before someone redeems it, so share invitations only with people you trust.

Friends includes remove, block, unblock, and report controls. A report stores the reporting and reported account identifiers, the reported snapshot hash, an allowlisted reason, optional details you deliberately submit, and server timestamps for moderation. Report records are restricted to authorized administrators and are not shown to other players.

Optional Focus Rooms

If you create or join a Focus Room, Firebase stores the room identifier, host and participant account identifiers, usernames and Grove Levels, invitations, chosen duration, scheduled start and end, and participation states such as ready, joined, left, or finished, with timestamps. Room participants can see the shared room state. This is separate from your private solo Focus history: we do not upload which apps you block, your Screen Time usage, or your complete local Focus history. Room data is used to coordinate the shared experience, not advertising.

Completed or closed group rooms are marked for expiry after 30 days; notification device registrations are marked for expiry after 90 days unless refreshed. Expiry cleanup is asynchronous. Deleting your Friends account removes its device registrations and cleans up its room participation.

Pseudonymous product analytics

StillAcre uses PostHog to understand where people leave onboarding and how different onboarding and paywall versions perform. The app sends only specific interaction events, such as an onboarding step being viewed or completed, onboarding being completed or skipped, a paywall being shown, and a subscription purchase being started or returning a success, cancellation, pending, unavailable, or failure result.

Those events may include a random installation-level analytics identifier and journey identifier; stable screen or step identifiers; onboarding and paywall variant; product, plan, and RevenueCat Offering identifiers; trial eligibility; purchase result; event time; app version and build; and technical context automatically added by the PostHog iOS library, such as device model and type, operating-system version, language, time zone, screen size, network type, and library version. The random identifier is not an Apple advertising identifier, and StillAcre does not join PostHog analytics to a name, email address, Friends account, Firebase UID, farm ID, or RevenueCat customer record.

PostHog person profiles, user identification, automatic screen and element capture, session replay, surveys, push analytics, feature-flag analytics, and automatic crash capture are disabled. Network requests necessarily reach PostHog from an internet address, but the StillAcre PostHog project is configured to discard client IP data rather than store it. PostHog processes these events for us in its United States cloud so we can measure completion and subscription conversion and improve the app. PostHog’s privacy information is available at posthog.com/privacy.

Cookieless website analytics

Stillacre.app uses the same PostHog project to understand which pages are useful and which pages lead people to the App Store. We record page views and exits; broad referring domain and campaign tags; clicks on internal, App Store, comparison-app, contact, and other outbound links; scroll-depth and visible-time milestones; FAQ positions opened; and actions inside the free Pomodoro timer such as selecting a mode, starting, pausing, resetting, completing, sharing, or changing sound.

Website analytics do not record text you type, names, email addresses, timer contents, or the contents of the page. Automatic element capture, user identification, person profiles, session replay, heatmaps, surveys, feature flags, and automatic error capture are disabled. PostHog is configured in cookieless mode, so its analytics library does not place analytics data in cookies or browser storage. Query strings are removed from recorded page and referrer URLs, apart from campaign tags we explicitly allow. The free timer separately uses your browser’s local storage so an active timer and your tiny harvest can survive a refresh; that information stays in your browser and is not sent to PostHog.

Technical service information

Firebase and other service providers process technical information needed to operate and secure their services, including device model, language, time zone, SDK and operating-system versions, request status, and diagnostic information about service errors. This information supports reliability and abuse prevention. StillAcre disables automatic crash capture in PostHog and automatic Meta SDK crash and error reporting.

Apple Ads attribution

To measure whether our Apple Ads campaigns lead to subscriptions, StillAcre asks Apple’s AdServices framework for a Standard attribution token and sends it to RevenueCat. RevenueCat exchanges the token with Apple within its short validity period and stores the campaign information Apple returns alongside the anonymous RevenueCat subscription record. That information may include whether Apple attributed the install, campaign, ad-group, keyword, and ad identifiers, country or region, conversion and claim type, and App Store ad placement. We use it to compare campaign conversion and long-term subscription revenue.

This Standard attribution does not access IDFA, does not request App Tracking Transparency permission, and is not used to follow you across other companies’ apps or websites. StillAcre does not use Apple’s Detailed attribution mode. Advertising integrations are subject to the choices described below.

Advertising measurement and your choice

Earlier versions may send limited Meta install and activation events with IDFA collection disabled. Update to version 1.0.7 or later for the consent controls described here.

Starting with version 1.0.7, StillAcre asks for permission through Apple’s App Tracking Transparency prompt before enabling identifying advertising measurement. Allowing is optional and does not change your access, pricing, rewards, or subscription. You can change the choice in iOS Settings › Privacy & Security › Tracking. The app reads the current choice again when you return to it.

If you allow, AppsFlyer and Meta may receive advertising and installation identifiers, an app-scoped subscription customer identifier, app and device technical information, network information such as IP address and the approximate region derived from it, install and session events, paywall interactions, and subscription events such as trial starts, purchases, conversions, renewals, refunds, product identifiers, currency, and revenue. This information can be linked with data from other companies to measure and optimize advertisements for StillAcre. RevenueCat supplies subscription lifecycle events so measurement can continue when the app is closed. We do not send these advertising services your Screen Time choices or usage, Focus history, Friends identity or content, questionnaire answers, name, email, or grove.

If you decline, or tracking is restricted, StillAcre does not enable IDFA collection or link your RevenueCat customer record to AppsFlyer for identifying ad measurement. AppsFlyer’s SDK uses its anonymization and partner-sharing restrictions, and Apple’s SKAdNetwork can still supply delayed, aggregated campaign and conversion reports. These reports do not identify individual customers. Subscription management and our separate product analytics continue to function.

When you change your choice, StillAcre updates its local settings and sends the updated choice and attribution attributes to RevenueCat when a connection is available. This does not erase information already delivered. Contact us for help with deletion requests. Learn more in the AppsFlyer privacy policy and Meta privacy policy.

Subscription information

RevenueCat helps load plans, validate and restore access, and understand subscription performance. It receives an app-user identifier, purchase history such as product, transaction, subscription and expiration status, and Apple Ads attribution when available. With your tracking permission, it also receives attribution identifiers used for the advertising measurement described above. Apple handles payment details; RevenueCat does not receive your payment card, billing address, grove, or Screen Time choices.

Where your game lives

Your complete village is stored locally on your device: crops, buildings, coins, inventory, progress, settings, Focus history, and private interiors. Automatic recovery copies live in the app’s private storage on that same device and are designed to preserve your grove across app updates. A Friends account is not cloud save: it publishes only the limited, neighbor-visible snapshot described above and cannot restore your village after device loss or deletion.

Screen Time, explained honestly

StillAcre uses Apple’s Screen Time frameworks (Family Controls, Managed Settings, and Device Activity) to shield the apps you choose during a Focus session and to reflect heavy usage days as in-game weather. Here is exactly how that works:

• The app asks for Screen Time access through Apple’s own permission screen. Nothing is shielded until you say yes, and you can revoke the permission at any time in iOS Settings.
• You pick the apps and websites to protect using Apple’s own picker, not ours.
• The app receives only anonymous, opaque tokens that stand in for your choices. Apple designed these tokens so that apps cannot read which apps they represent.
• Apple can render your Screen Time totals, pickups, and most-used apps back to you inside a private, system-isolated report. Apple prevents that report from making network requests or moving its activity data into StillAcre’s main app.
• Daily weather uses only an on-device threshold event from Apple. StillAcre does not receive the underlying usage history, app names, or websites from that event.
• All monitoring, thresholds, reporting, and shielding are performed by Apple, on your device. Usage information never reaches us, RevenueCat, or any StillAcre server.
• These tokens are never shared, exported, or sent off your device by StillAcre, and they are never passed into the game’s own code.

Purchases

The StillAcre subscription is sold and billed by Apple through the App Store. Your name, payment details, and billing address go to Apple, never to us or RevenueCat. The app uses Apple’s StoreKit framework and RevenueCat’s subscription service to load plans, validate access, and restore purchases across your devices. Refunds are handled by Apple. RevenueCat’s own privacy policy is available at revenuecat.com/privacy.

Notifications and Live Activities

If you allow notifications, StillAcre schedules gentle local reminders, such as a note when a Focus session finishes. During a Focus session the app can show a Live Activity countdown on your Lock Screen. Solo reminders and Live Activities are created on your device. If you use Focus Rooms and allow notifications, Apple Push Notification service and Firebase Cloud Messaging deliver room invitations and start alerts over the network. Firebase processes installation and notification device identifiers; our server stores a notification registration, platform, account identifier, and timestamps to deliver those alerts. Alerts can include a participant username, room identifier, duration, or start time. These identifiers are used for app functionality, not advertising. Notifications are optional and rooms still work without them.

Data retention and deletion

You can use Settings › Delete village data to permanently remove your grove, progress, and recovery copies from that device. Deleting the app also deletes local data, including local analytics identifiers and the unsent analytics queue, from that device. These local actions do not cancel an App Store subscription, delete delivered PostHog events, or by themselves delete an online Friends account.

If you enabled Friends, use Friends › Account & safety › Delete Friends account. StillAcre asks you to authenticate with Apple again, revokes the Apple authorization, then deletes the Firebase Auth user and online account, current username reservation, profile, farm metadata, snapshots, friendships, blocks, and invitations. A prior renamed-away username is not linked to the account and remains unavailable only until its original 30-day safety deadline, when it is eligible for automatic deletion. Identity fields in existing safety reports are pseudonymized so the report can retain its moderation history. Deleting Friends does not delete the local village, local Focus history, or subscription. Active account data and the latest snapshot remain until replaced or the farm/account is deleted; invitation records expire after their seven-day deadline; resolved moderation reports are ordinarily retained for up to 12 months unless a legal or safety need requires a different period; normal application logs are ordinarily retained for up to 30 days.

We retain pseudonymous analytics only for as long as reasonably needed to measure onboarding, subscription, Apple Ads, AppsFlyer, and Meta campaign performance, compare experiments, and improve StillAcre, after which we delete or aggregate it where the relevant service permits. To request deletion of delivered PostHog events, copy the Analytics ID shown under Settings › Privacy & support and email it to us. StillAcre does not connect that analytics ID to your Friends identity, so an email address or Friends account alone cannot identify which PostHog record is yours. Apple retains App Store transaction records under its policies; RevenueCat retains the pseudonymous subscription and attribution record needed to validate access and measure campaign performance; and Meta retains App Events under its policies and controls. Email us if you want help requesting deletion of a PostHog, RevenueCat, AppsFlyer, or Meta record.

Your privacy rights

Privacy laws such as the GDPR in Europe and the CCPA/CPRA in California may give you rights over personal data a company processes: access, correction, deletion, portability, restriction, objection, and opting out of sale or sharing. We do not sell personal data. Meta ad measurement may be treated as sharing or tracking under some privacy laws and is disclosed as tracking under Apple’s rules. If you want to ask about or exercise a privacy right concerning a Friends account, Firebase data, PostHog analytics, RevenueCat, or Meta App Events, email us and we will respond.

Children

StillAcre is a personal focus tool, not a parental-control product, and it displays no ads. We do not knowingly request names, precise location, or other unnecessary identifying information from children. Optional Friends authentication, limited gameplay snapshots, pseudonymous product analytics, and subscription processing work as described above. Parents or guardians may contact us about deletion or other privacy rights.

Changes to this policy

If StillAcre’s privacy practices change, we will update this policy and the app’s App Store privacy label as required and note the new effective date at the top of this page. If a change requires consent under applicable law, we will ask before that collection begins.

Contact

Aldur LLC, maker of StillAcre. Questions about privacy? Email hello@stillacre.app.