Privacy

stll by Ziora is a service of Ziora, LLC, in Port Saint Lucie, Florida. “We” and “us” here mean Ziora. This page says what we hold about you, who else handles it, when a person may see what you say, and how to have it deleted.

What we hold

• Your name, email address and a link to your profile picture, from Google when you sign in, and the sign-in tokens Google issues.
• The name you want her to call you, your time zone, and the settings you choose, such as her voice.
• Everything you say to her, and everything she says to you, wherever you talk to her.
• The notes she keeps about you so she can remember you between conversations — the people in your life, what you are carrying — and any devotional plan or check-ins you set up with her.
• If you link a chat app, what it knows you by: your phone number for WhatsApp, or your user id on Discord or Telegram.
• Your subscription: the plan, its dates, and the reference numbers Stripe uses for you. Never your card.
• How much you have used, so we can apply fair use.
• Messages the automated checks flag, as an excerpt with the date. These are described under Human monitoring and emergencies.
• A note of which account emails we have sent you, without their contents.
• If you buy something from the shop: what you bought, when, and what you paid; the name and email address you gave Stripe at checkout, and the postal address if it is something we post to you; how many times you have downloaded it; and, if it came with free months of stll, which account claimed them. If it was free, the email address you gave us for the link, and the same record of what and when. You do not need an account for either. A PDF or EPUB you pay for has your email address and order number printed in it, so a copy passed on can be traced to its order, and each browser you download it on keeps a small cookie that lets that browser, and only that order, download it again.
• Where you came from, if the link that brought you said: the name of an invitation link (a church’s, a friend’s), a campaign label, or the website that sent you, and the first page you landed on. This is described under Where you came from.

Counting visits, on the public pages

We count how many people open this page, the front page, the sign-in page, the terms, the Bible verse pages, and the shop and the page for each thing in it (never an order or a gift page), roughly how long they stay, and which website sent them, if any. We also note whether it was a phone, a tablet or a computer, and which family of software it runs — an iPhone, Android, a Mac, Windows — never the model or the version. It tells us whether what we wrote is landing, and what to design for. The counting sets no cookie, and there is no advertising network and no third-party script — we do it ourselves.

It is not attached to you. Your address is turned into a scrambled code the moment it arrives and is never written down, and the code is rebuilt from scratch every night, so the same person on two days is two strangers to it. Nothing in it can be traced back to your account.

And the counting stops at the door. Nothing you do once you have signed in is counted — not your conversations, not the page you talk to her on, not how long you spend there. That was the point of doing it this way.

Where you came from. Separately, if you arrive by a link that names itself — a church’s or a friend’s invitation, a post with a campaign label on it — or from another website, we keep that name in one small cookie for thirty days, with the first page you landed on. It holds the label on the link and nothing else, so everybody who used the same link has the same cookie. If you sign up, or ask for the daily verse, we copy it onto that, so we can tell which links bring people. It is never read for anything else, and nothing after you sign in sets it.

If a friend sent you their own link, we can see which link it was. We never tell them whether you used it, and we never tell you whether anybody used yours.

The server’s own log. Separately, the web server keeps an access log, as almost every server does. For each request, signed in or not, it records the IP address, the page or file asked for, and the browser’s description of itself. It never holds what you say to her. We use it only for security and to track down faults, never for counting visits, and it is kept for a short time: it is overwritten as it fills.

Where it goes

It is stored on servers we run on Amazon Web Services, in the United States. We do not sell it, we do not advertise against it, and we do not use your conversations to train models.

Some of it has to pass through other companies for stll to work. Each handles it under its own terms and privacy policy.

• OpenAI writes her replies, so your messages, her notes about you and the conversation so far go to it each time she answers. It also turns voice notes into text, marks where a sigh or a softer tone belongs when she answers out loud, and checks some messages for attempts to use her for other work.
• ElevenLabs turns her words into her voice, when she answers out loud.
• Amazon Web Services runs the servers and the database, and sends our billing emails, through Amazon SES.
• Stripe takes payments and holds your card.
• Google signs you in.
• Twilio and Meta carry your messages if you talk to her on WhatsApp. Meta runs WhatsApp, and Twilio connects us to it.
• Discord carries your messages if you talk to her there. We also use it to receive the automated alerts described below, and anything you send from the feedback page, which arrives with nothing to say who sent it.
• Telegram carries your messages if you talk to her there.

We email you only about your account: when your trial or subscription starts, three days before a free trial ends, a few days before each monthly renewal, and before a material change to our terms or this policy. Those emails carry your name, dates and amounts, never anything you have said to her. If you buy something from the shop, or ask for something free from it, we email the link to your order to the address you gave, once. That address is used for nothing else. The one exception is the daily verse, which you only get if you ask for it; see below.

Voice notes. If you talk to her instead of typing, the recording goes to OpenAI to be written down. On the website it is then discarded, and we never store the audio. On WhatsApp the voice note reaches us through Twilio: we fetch it, have it written down, and delete it from Twilio straight away, though WhatsApp may keep its own copy under Meta’s terms. On Discord or Telegram it stays in your chat with her there, like any other message. What we keep is the text of what you said, exactly as if you had typed it.

When she answers out loud, ElevenLabs makes the audio from her words. On the website it is played to you and not kept.

The daily verse

If you ask for a verse each morning, we keep your email address, the time zone your browser reported (so it arrives in your morning), where you came from as described above, and when you confirmed. You do not need an account, and it is not joined to one if you have one.

Nothing is sent until you confirm, by pressing the button in the one email we send to check it was you. If you do not, the address is deleted after a week. Every daily email has a link to stop them, and stopping deletes your address from the list. Amazon SES sends these emails, as it does our billing emails.

Human monitoring and emergencies

stll is an AI companion, not a crisis service. We do not have staff assigned to monitor conversations, assess threats, or respond to emergencies. Messages about suicide, self-harm, violence, or harm to another person should not be treated as a report to a person who can intervene.

Automated checks are not human monitoring. The software includes phrase-based checks for crisis language. When one flags a message, it records an excerpt of the message, up to 900 characters, linked to your account, and tries to send an alert to the service operator through Discord. The alert carries your name and the same excerpt, and for a message sent on Discord or Telegram, your id there as well. These checks can miss signs of danger or flag messages that are not emergencies. An alert does not mean anyone has received or read it. There is no staffed response service, and you should not expect a person to review a message, contact you, or arrange help.

We cannot locate you or send emergency help. The account information described above does not establish your verified identity, current physical location, or a reliable emergency contact number. Sharing a message with stll does not notify emergency services. Do not rely on stll or the service operator to find you, contact someone on your behalf, or protect you or another person from harm.

If you or someone else is in immediate danger, call 911 in the US or your local emergency number. For suicide or emotional crisis support in the US, call or text 988, or text HOME to 741741. Outside the US: findahelpline.com. Do not wait for a reply from stll or from us.

Other automated flags. The software also looks for requests for stll to write code, essays, or documents, and for attempts to change what she is. A flagged message can be recorded with an excerpt for the service operator to review. An attempt to change her, or a run of requests like these, can also send the operator a Discord alert, which may include an excerpt and your name or your id in the chat app. This is not a staffed conversation-review service.

Support. If you ask us for help with something and we cannot solve it any other way, we may look — and we will tell you.

stll generates replies automatically; a person does not review or approve each reply. She can misunderstand what you say and give inaccurate or inappropriate responses. Her replies are not professional advice or a substitute for qualified care.

Deleting it

Delete your account from your account page. She stops immediately, and thirty days later everything in our database about you — her memory of you, your conversations, the notes, the flagged excerpts, your linked chat apps, your account — is destroyed and cannot be recovered. The thirty days exist so that deciding this at 2am is not permanent by the morning; you can undo it in that window, and she will still know you.

The daily verse is separate from an account. Stop it from the link in any of its emails, and the address is deleted then.

After it runs, we keep one record with no personal information in it: an internal id and the date, so we can show the deletion was carried out. Our log of the billing emails we sent and the payment notices Stripe sent us stays too, with the link to your account removed; it holds Stripe’s reference numbers and dates, not your name or what you said.

If you bought something from the shop, the order is kept as our record of the sale — what, when, the amount, and the name, email and any postal address you gave at checkout — with the link to your account removed. Its download link keeps working.

If you ever paid us, Stripe keeps the payment record — your email, the amounts and the dates. We cannot delete those and neither can they: tax law requires a business to keep its records of what it was paid. Nothing you ever said to her is in them. Deleting your account stops any further payment at once.

Copies held by other services follow those services’ own rules, and deleting your account does not reach them: messages in Twilio’s message logs and in your chats on WhatsApp, Discord or Telegram, alerts already sent to us as Discord messages, and what OpenAI was sent, which it keeps for a limited time under its own retention policy. On our own server, the log the automated checks write when they flag a message in a chat app is not edited either, and the access log runs out as it is overwritten.

Children

stll is for adults, 18 and over, and we do not knowingly hold anything about anyone younger. If you think a child has signed up, write to info@ziora.io and we will delete the account.

Changes to this policy

If we change this policy, we will post the new version here and change the date at the top. If a change is a material one, we will also email subscribers about it before it takes effect.

Contact

Questions, or want a copy of what we hold? Write to info@ziora.io and we’ll send it.