Last updated October 18, 2026
Your photos, videos, journal entries, albums, stickers, contacts and settings are stored on your iPhone in encrypted form. They open only with your Sill passcode, Face ID if you turn it on, or your recovery code. We never receive any of it.
We collect nothing ourselves. We don't have your name, email address, contacts, photos, journal or location, and Sill has no analytics code. The free plan's ads are shown by Google, which does collect a little, as described under Ads below.
If you've chosen to share analytics with app developers in your iPhone's settings, Apple may send us crash reports. They come from Apple, are anonymous, and don't include anything you keep in Sill.
People you add to Contacts in Sill are stored in Sill, encrypted, not in your phone's Contacts app. If you import someone from your phone's Contacts, iOS shows its own list and Sill receives only the one person you pick. Sill doesn't need permission to read your Contacts. Calling or texting someone from Sill uses your phone's own apps, so the call or message shows there like any other.
Sill has a private browser. Pages, cookies and history are kept in memory only and are erased when Sill locks or you choose Close and clear. Nothing you visit is saved on your phone or sent to us. The websites you visit, your search engine (Google, unless you search elsewhere) and your internet provider can still see that you visited, as with any browser. Pictures you save from a page go into Sill, not your Photos app.
When you share, copy or add something to your Photos app, a copy goes where you choose. Sill removes location and camera details first. A copied picture stays on this phone only, not your other devices, and clears from the clipboard after a minute. Once a copy leaves Sill, Sill can't take it back.
When you share a photo or video to Sill from another app, it's encrypted on your phone straight away and moved into Sill the next time you open it. If you share a link to a picture, Sill downloads the picture from its website, the way your browser would, without keeping cookies or history. Nothing is sent to us.
So the share sheet can tell you straight away when the free plan is full, Sill keeps one number where the share sheet can read it: how many free spots are left. It isn't encrypted, it holds nothing else, and it never leaves your phone. With Sill Plus it just says there's no limit.
The free plan shows a small ad card in Gallery, Today and on the private browser's start page, the page you see before you open a website. Sill Plus has no ads. The ads come from Google AdMob. Ads never appear on a website you visit, and Google is not told what you search for or which sites you open.
Google's use of this information is described in Google's privacy policy. Ads need an internet connection. With no connection, no ad shows and nothing else changes.
If you buy Sill Plus, Apple handles the payment. We never see your name, your Apple Account or how you paid. Sill asks Apple, on your phone, whether you have Plus, and keeps that answer on your phone so it still knows when you're offline. Apple may tell us, in its sales reports, that a purchase was made, without saying who made it. Subscriptions are managed and canceled in your iPhone's Settings, under your name, then Subscriptions. Sill Plus removes the ads, so Google's code does nothing while you have it.
These are off until you turn them on in Settings.
This data is stored in your Apple account and handled by Apple under Apple's privacy policy. We can't read it or reach it. Anyone who can sign in to your iCloud account could see that Sill keeps data there, and roughly how much. To notice changes from your other devices, Sill receives silent notifications through iCloud. They carry no content and never show an alert.
Sill lists free support lines. Calls and texts go through your phone's own apps. Online chats open in a browser inside Sill, so they aren't saved to your Safari history. Those services have their own privacy policies.
You can turn iCloud backup and sync off at any time in Settings. Deleting Sill removes everything it stored on that phone. To delete Sill's data from iCloud, go to iPhone Settings, then your name, then iCloud, then Manage Storage, and choose Sill.
We don't hold any personal data about you, so there's nothing for us to look up, correct, delete, sell or share. Google holds the small amount described under Ads, and you can use Google's own tools for it. If you have a question, email us.
Use your recovery code to get back in and choose a new passcode. We never have your data or your code, so we can't recover either for you. Keep your recovery code somewhere safe, away from your phone.
Sill is not made for children under 13 and doesn't knowingly collect data from them. Ads on the free plan are limited to a G rating.
If this policy changes, we'll post the new version here with a new date.
Questions about privacy: sillappsupport@gmail.com