The Sthira Space
Privacy Policy
This policy explains what data we collect when you use The Sthira Space products, why we collect it, and what control you have over it.
1. What We Collect and Why
| Data | Why we collect it |
|---|---|
| Name | Account personalisation — displayed within the app to make the experience feel personal |
| Email address | Account creation, service communications, and password reset |
| Payment information | Processed entirely by our payment partners. We never see or store your card details or banking information. |
| Usage data (session times, focus ratings, work categories, difficulty multipliers) | Powers the core product features and contributes to anonymised aggregate analysis — explained in Section 3 |
| IP address and request logs | Server security and abuse prevention only |
We collect only what we need. Nothing else.
2. What We Do Not Do
We do not sell your data.
We do not share your personal data with any third party outside of the service providers listed in Section 4 — and those providers access only what is necessary for the specific function they perform.
We do not use third-party analytics that track individual users across sessions or across the web.
We do not send marketing emails without your explicit opt-in.
We do not use your personal data to train external AI models.
3. How We Use Aggregated Data
In addition to powering your individual experience, we analyse anonymised, aggregated data across all users to understand patterns — for example, how work categories and difficulty multipliers relate to session quality over time. This informs product decisions and, in later stages of development, will power suggestions within our products such as recommended difficulty multiplier ranges.
This analysis operates on data with no link to any individual. Your name, email address, and any personally identifiable information play no part in it.
4. Service Providers We Use
We share data with a small number of third-party providers where necessary to operate our products:
| Provider | Purpose |
|---|---|
| Supabase | Database and authentication |
| PhonePe | Payment processing for India |
| Polar.sh | Payment processing for international customers |
| TypeSafe (only when founder-approved support triage is enabled) | Bounded support classification; financial tables, credentials, tokens, and public feedback are not sent |
| Resend | Minimal private-support reply notifications containing a link to the in-app conversation, when enabled |
Each provider accesses only the data necessary for the function they perform. We do not authorise them to use your data for any other purpose.
Our list of active providers is kept current on this page.
Feedback and private support
Anyone can browse approved feedback. A verified SthiraSpace account can submit feedback, comment, vote, follow, report, and request a nickname, including free and expired users. New posts, comments, and nickname changes are reviewed by the founder before publication.
Approved contributions and their public nickname may remain visible after account deletion. A nickname is public attribution and does not guarantee anonymity. Rejected private revisions and nickname requests are scheduled for cleanup after 30 days.
Private support cases are visible only to the case owner and founder. Reply emails contain a private link and no transcript. Closed in-app cases are scheduled for cleanup after 90 days, but copies already accepted by an email provider, recipient inbox, or backup may have separate retention.
Optional founder-controlled support triage may use TypeSafe for bounded classification. It does not receive financial tables, passwords, access tokens, refresh tokens, or public feedback. When disabled, uncertain, high-risk, or unavailable, support is handed to the founder.
5. Data Storage and Security
Your data is stored on servers with industry-standard security practices including encryption in transit and at rest.
We take reasonable technical and organisational precautions to protect your data. No system is completely immune to breach. If a breach occurs that affects your personal data, we will notify you by email within 72 hours of becoming aware of it.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your account and associated personal data
To exercise any of these rights, write to us at hello@sthiraspace.com. We respond to all rights requests within 7 business days.
When you delete your account, your personal data is removed from our systems within 30 days. Anonymised aggregate data — which cannot be linked back to you — may be retained for product improvement purposes.
7. Cookies
The Sthira Space uses no cookies on sthiraspace.com.
Our products use session cookies for authentication only — to keep you logged in during your session. No tracking cookies. No third-party cookies.
8. Children
Our products are not directed at anyone under the age of 13. If we become aware that we have collected personal data from a child under 13, we will delete it promptly. If you believe this has happened, contact us at hello@sthiraspace.com.
9. Retention
We retain your personal data for as long as your account is active. If you delete your account, personal data is removed within 30 days. Anonymised aggregate data may be retained indefinitely for product improvement purposes.
10. Changes to This Policy
If we make material changes to this policy — changes that affect what data we collect, how we use it, or your rights — we will notify you by email at least 14 days before they take effect. Minor corrections may be made without prior notice.
The "Last updated" date at the top of this page reflects when changes were most recently made.
11. Contact
For any privacy questions or rights requests, write to us at:
hello@sthiraspace.com
The Sthira Space
Bengaluru, Karnataka, India
We respond within 7 business days.