Your Privacy Matters
Stifle is built with privacy as a core principle. We believe you should be in complete control of your data, and we've designed our app to collect as little as possible.
What We Collect
Lock/Unlock Timestamps
We only record when you lock and unlock your phone. That's it. We use this to calculate your streaks and points.
What We Don't Collect
- Which apps you use
- What you type or read
- Your location
- Your contacts
- Notification content
- Screen content
Your Data Rights
Export Your Data
You can export all your data at any time in JSON format. This includes your profile, events, scores, and settings.
Delete Your Account
You can permanently delete your account and all associated data from the app settings. This action is irreversible.
Automatic Data Cleanup
We automatically delete raw event data older than 30 days. Your weekly scores are preserved for tracking progress, but the detailed timestamps are removed.
Ghost Mode
Enable Ghost Mode to hide from leaderboards while still participating in group challenges. Your friends will see you as "Anonymous".
Open Source
Stifle is open source. This means:
- Transparency: You can inspect exactly what data we collect and how we handle it
- Trust: Security researchers can audit our code for vulnerabilities
- Community: Anyone can contribute improvements to the project
We believe open source is the gold standard for privacy-respecting software.
Security
Encrypted Storage
Your authentication tokens are encrypted on your device using AES-256 encryption.
Secure Authentication
Passwords are hashed using scrypt, and we use short-lived JWTs with refresh token rotation.
Minimal Third-Party Services
We use Firebase Cloud Messaging (Google) solely for delivering push notifications. This service receives a device token to route notifications but does not track your activity or behavior. We don't use analytics SDKs, ad networks, or behavioral tracking services.
Questions?
If you have any questions about our privacy practices, please reach out. We're committed to being transparent about how we handle your data.