Privacy · A covenant, not a setting

What Sill knows,
and what it never will.

Last updated · 25 April 2026

Most apps treat privacy as opt-out. Sill treats it as the shape of the product. This page is short on purpose: there is not much to say.

What Sill collects.

To work at all, Sill needs a small amount of information. Each of the items below has a single, plain reason for existing.

An anonymous Sign in with Apple identifier. Apple gives us a one-way token. We don't see your real Apple ID, your real email, or your real name unless you choose to share them.
Your assigned Pod and your pod membership. We need to know which five people are in your pod so the room can stay the same week to week.
Working-block start and end times. We use these to show your Pod's presence on your Lock Screen and your podmates' Lock Screens. We do not retain a long-term log of when you worked.
Voice notes you record. Stored encrypted at rest. Auto-deleted after 30 days. Never transcribed, never analyzed, never used to train any model.

Where it lives.

Account and pod data live on a small server in a single region close to you (the United States for North American users, Ireland for European users). Voice notes live in object storage in the same region as your account. Nothing is mirrored to a third country without a clear reason.

Who else sees it.

No one outside Sill, ever. We do not sell, share, or rent any of it — not now, not in the future, not even in the event of an acquisition. If Sill is ever sold, the deal is contingent on the buyer adopting this same covenant in writing.

Your podmates see what they would see in a quiet office: whether you are working, and any voice notes you choose to send to the pod. Nothing else. They don't see your name, email, location, or device.

What Sill will never do

Use a third-party analytics SDK. Not one.
Use a crash reporter that resells data. (TestFlight + Xcode only.)
Show advertising, in any form, ever.
Sell your data, in whole or in part.
Train an AI model on your voice notes.
Track you across other apps or websites.
Build engagement loops, badges, or push streaks.
Share data with employers, insurers, or any third party.

Your rights.

Wherever you live, you can ask us for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. Email [email protected] and we will reply within seven days, usually within one.

If you delete your account from inside the app, your account record, pod history, and any voice notes you have sent are removed within 30 days. The only thing we keep after that is a hashed marker so the same Sign in with Apple identity cannot be silently re-created.

Do Not Sell My Personal Information. California residents have a right to opt out of the sale of personal information. Sill does not sell personal information, so this opt-out is automatic and applies to everyone.

Children.

Sill is intended for adults. We don't knowingly collect information from anyone under 16. If you believe a minor has signed up, write to us and we will remove the account.

Changes to this page.

If we ever change what Sill collects or who can see it, this page changes first, and we email everyone with an account before the change takes effect. There is no version of Sill where the privacy posture quietly degrades.

Contact.

Real humans read these. Write to [email protected] for anything privacy-related, or [email protected] for everything else.