Skip to content
Stillpaying
EN

Stillpaying

Privacy policy

What the Stillpaying app and this website process, why, for how long and what you can do about it.

Version 2026-10, effective October 1, 2026

Who we are

Stillpaying is an app for iPhone and Android made by ODBS LLC (“we”, “us”). This policy covers the Stillpaying app, its server and this website. ODBS LLC is responsible for the processing described here. You can reach us at info@odbs.tech.

Your subscriptions stay on your device

Stillpaying is local-first. The subscriptions you enter (name, price, currency, billing cycle, dates, category, note, price history, cancellations, pauses and free trials) are stored on your device, and every total, calendar and report is calculated there. Stillpaying does not connect to your bank, your cards or your email, and you can use it without an account or an internet connection.

Your subscriptions leave your device only if you use backup and sync, which is part of Stillpaying Pro (see “Backup and sync”). Renewal reminders are planned on your device as local notifications; no server is involved.

Your account

When the app is connected to our server, it creates a guest account automatically, so purchases and backups have a place to belong. For it we store a random account ID, a random installation ID, the platform, the app version, your time zone and the times of sign-in and activity.

So that a guest account can come back after reinstalling, the app keeps a recovery key in your device’s secure storage; on iPhone this is the keychain, which iCloud Keychain may sync to your other Apple devices. Our server stores only a one-way fingerprint of that key.

Signing in is optional. You can sign in with Apple (on iPhone) or with Google. We then receive a stable user identifier from Apple or Google and the email address of that account; with Apple you can hide your email, in which case Apple gives us a private relay address, and at your first sign-in Apple may also share your name. We store these with your account. We do not send you marketing emails. If the Apple or Google account you sign in with already belongs to a Stillpaying account, your guest account is merged into it.

Device checks and security

To protect accounts and our services, the app uses Apple App Attest on iPhone and Google Play Integrity on Android, which confirm that requests come from the genuine app on a genuine device. We store the key identifier and verification data for your installation. Our server uses your IP address while handling a request, for example to limit abuse. It is not stored with your account; only consent records keep the network part of the address (such as 203.0.113.x) as proof of your choice.

Age declaration and legal documents

Before you start, the app asks once for your birth month and year (never the day) and sends it together with your device’s region setting, to check that Stillpaying is available to you. We store the month, the year and the country. The declaration cannot be changed in the app afterwards; to correct it, contact info@odbs.tech.

When you accept the terms of use and this privacy policy, we keep a record of which document and version you accepted, when, in which language, from which installation and app version, and the network part of your IP address.

Backup and sync

If you have Stillpaying Pro, the app backs up your subscriptions to your account and keeps them in sync across your devices. For each subscription we then store its name, currency, billing cycle, renewal and start dates, category, note, cancellation and access-end dates, free-trial end, pauses, reminder timing, price history and the times it was created and changed. When you delete a subscription, its contents are deleted from the server as well and only its random ID remains, so your other devices learn about the deletion.

If Stillpaying Pro ends, nothing is deleted: your backup stays available for restoring, but new changes are no longer backed up. The backup is kept until you delete your account.

Exchange rates

With Stillpaying Pro and an account, the app shows an estimated total in your default currency. For this it asks our server for exchange rates for the currencies you use. Our server gets daily rates from Open Exchange Rates; no personal data is sent to Open Exchange Rates.

Purchases

Stillpaying Pro is purchased through the App Store or Google Play. We use RevenueCat to verify purchases and keep your Pro status in step with the store; RevenueCat receives a pseudonymous ID of your account and the purchase information the store provides. We store your plan and its status. We never receive your card or payment details.

Feedback

If you use Send feedback in the app, we store your message, the topic you chose, the email address you give for a reply (optional), your account ID, the platform, the app version and the language. We do not store your IP address or installation ID with it. Please do not include card numbers or passwords.

Crash reports

The app and our server send crash and performance reports to Sentry, in its EU region, so we can fix errors. Reports contain technical information and your pseudonymous account ID, but no IP address, email address, screenshots or screen recordings, and never your subscriptions.

Usage analytics

Stillpaying shares usage analytics with Mixpanel, in its EU region, only if you allow it. Sharing is off until you choose. After the introduction, the app asks once whether you allow usage analytics; you can change your choice at any time with the usage analytics switch under Your data in Stillpaying’s settings. When you turn it off, the app stops sending usage analytics.

What is sent: that you finished the introduction; that a subscription was added (with its billing cycle unit, currency and category, and how many subscriptions you track), edited, deleted, cancelled, paused or resumed, or got its own reminder timing; that a price change was added; when the Stillpaying Pro screen is shown and how a purchase or restore ended; sign-in, sign-out, account deletion and data export requests; when reminders are turned on or off and their timing; and when the yearly report is viewed or exported. Mixpanel also receives the app version and build, the platform, the operating system version and the app’s language.

Events carry a random device identifier created by Mixpanel, never Apple’s identifier for vendors, an advertising identifier or the Android ID. While sharing is on, events are linked to your Stillpaying account ID.

Never sent: the names, prices, notes or dates of your subscriptions, or anything else you type. Usage analytics are not used for advertising. Stillpaying contains no advertising SDK, shows no ads, does not track you across other companies’ apps or websites and does not sell or share personal data for advertising.

Service providers and where data is processed

We use these providers, each only for the purpose stated:

Where data is transferred outside the European Economic Area, the United Kingdom or Türkiye, we rely on the safeguards the law provides, such as the European Commission’s Standard Contractual Clauses.

How long we keep data

We keep data only as long as it is needed:

Your choices and rights

In the app you can export a copy of your account data, delete your account and turn usage analytics on or off. Notifications can be turned off at any time in your device’s settings, and you can delete the subscriptions on your device under Your data in Stillpaying’s settings.

Depending on where you live (for example under the GDPR, the UK GDPR, Türkiye’s KVKK or US state laws), you may also have the right to access, correct, delete or port your data, to restrict or object to processing and to withdraw consent at any time. Write to info@odbs.tech; we reply within 30 days. You may also complain to your data protection authority.

Legal bases

Where the GDPR or similar laws apply, we process data to provide the app and the services you asked for (contract), with your consent (usage analytics), for our legitimate interests in keeping the service secure, preventing abuse and fixing errors (device checks, rate limits, crash reports), and to meet legal obligations.

Children

Stillpaying is for people aged 13 or older. The app asks for the birth month and year on a neutral screen and is not available to people below that age. If you believe a child under 13 has given us personal data, contact us and we will delete it.

This website

This website has no accounts and no forms. It sets one cookie, NEXT_LOCALE, to remember your language, and loads no analytics or advertising scripts. Cloudflare delivers the site and processes technical request data, such as your IP address, to deliver and protect it. Contact links open your email app; nothing is sent until you send it.

Changes

We update this policy when the app or our providers change; the version and date above show the latest one. If a change affects what you agreed to, the app asks you to accept the new version.

Contact

info@odbs.tech