STAY Privacy Policy

STAY by Celestify Limited · Effective 18 October 2026

What STAY does

STAY watches you through your iPhone's front camera while you work. If you leave the frame, it says a line you wrote, after your chosen delay, optionally repeating until you come back. That is the whole product, and this policy is short because the app keeps almost nothing.

The camera

• STAY uses the front camera only, only after you tap Start, and only while the app is on screen. The moment STAY goes to the background, the camera stops.
• Each frame is analysed on your device with Apple's Vision framework to answer one yes/no question: is a person in frame. Nothing else is inferred.
• No frame is stored, displayed, recorded, or transmitted. There is no video preview, no recording, no upload, and no way for us or anyone else to see what the camera saw.

Data kept on your device

STAY saves these settings locally so they survive relaunch. These settings and your free-session counter are not sent to us:

• Your warning lines, reminder delay, voice and repeat choices (stay.settings.v1).
• Whether you have seen the intro screen.
• A counter of free sessions used, kept in the device Keychain so it survives reinstall.

Session receipts

When you stop watching, STAY shows a card with how long it watched, how many times you left, your longest absence and the worst line it said. These are numbers and text only — never images from the camera. They exist only on screen unless you tap Share, in which case you choose where the card goes.

Purchases

STAY provides three free session starts, then offers a one-time lifetime Pro purchase handled by Apple through StoreKit. Existing subscriptions continue to be honored. STAY checks verified entitlements with Apple; it does not create a STAY account. Purchase verification stays between your device and Apple. We do not receive payment card information, Apple Account information, or individual purchase records from the app.

What STAY does not do

• No third-party analytics SDKs, advertising identifiers, campaign attribution, cross-app tracking, or in-app ads.
• No account, email, name, location, contacts, photos or microphone access.
• Speech is synthesised on the device with Apple's speech engine.

Usage statistics

Starting with version 1.0.8 build 29, STAY sends independent counts of app opens, screen views, control appearances and taps, session start/stop actions, product loading and purchase or restore outcomes. Counts include the calendar day, app version and build, test or production environment, and fixed screen/control names or failure categories. We use these totals to understand which features work and where purchase attempts fail.

These counts contain no account, device, installation, session, transaction or advertising identifiers; no custom phrases, camera frames, face information, presence results, or payment details. They are not connected into individual histories and are not combined with other companies' data or used for advertising. Purchase outcomes are counts, not individual Apple transaction records.

You can turn off Usage statistics in Settings at any time. Turning it off stops future collection and deletes queued counts on your device. An already in-flight request may complete. A queue of at most 200 counts is kept locally for retry. Each count has its own random retry token that cannot connect it to another count or device; the server stores only a hash of that token separately from the counters, until seven days old, with hourly server cleanup.

Storage, sharing and retention

Celestify Limited operates the collector on DigitalOcean infrastructure in New York, USA. Daily aggregate counters are removed when 90 days old by hourly cleanup. Network addresses are used transiently to receive requests and limit abuse; the usage endpoint does not save them in access logs or analytics. DigitalOcean provides hosting; no analytics or advertising provider receives these counts. We do not sell them or share them for marketing.

Aggregate counters cannot be traced to an individual user, so we cannot identify or remove an individual's contribution once counted. Contact us with privacy questions at contact@celestifyltd.com. Earlier linked analytics candidates were withdrawn; this version removes their local identifier state.

Apple may separately provide aggregate App Store sales, download and usage reports under Apple's own privacy settings and policies. Test purchase outcomes are kept separate from production counts and are not treated as sales.

Changes

We update this policy and its effective date when our privacy practices change.

Contact

Celestify Limited · contact@celestifyltd.com