Terms of Use
stillyours (the “Service”) lets a sender share a photo or video through a private link, under rules the sender sets: how many people can open it, for how long, and for how long it stays on screen. By creating an account or sending content you accept these terms. Opening a link you received requires no account and no registration.
1. Accounts
Sending requires an account with a verified email address. Receiving and viewing do not. You are responsible for what is sent from your account. We do not ask for your legal name; a display name, if any, is optional. You can delete your account at any time from Settings inside the app.
2. Prohibited content and zero tolerance
2.1 — Your commitment. By sending content through the Service you warrant that you hold all necessary rights to it, that every person appearing in it has consented to it being shared, and that it breaks neither the law nor these terms.
2.2 — Prohibited content and behaviour. It is strictly forbidden to send, store or share through the Service:
- any sexual content involving a minor, or any depiction of a minor for sexual purposes;
- any intimate or sexual content shared without the consent of the person depicted;
- any pornographic content;
- any content inciting hatred, violence, discrimination or terrorism, or glorifying crimes;
- any content amounting to harassment, threats, an invasion of privacy or impersonation;
- any content infringing intellectual-property rights;
- any content obtained or distributed in violation of the law.
It is also forbidden to use the Service to circumvent a security measure, to automate bulk sending, or to create an account after having been banned.
2.3 — Zero tolerance. We apply a zero-tolerance policy to the content and behaviour listed in 2.2. Any breach, even a single one and even without intent, can lead — without notice or compensation — to the immediate disabling of the share links concerned, the removal of the content, the restriction, suspension or permanent termination of the account, and the refusal of any new registration from the devices associated with it. You acknowledge that these measures can be taken as a precaution as soon as content in the most serious categories is reported, before any human review.
2.4 — Reporting and moderation. Any user, and anyone who is not a user, can report content they believe unlawful or contrary to these terms, from the viewing screen in the app or from the public form at /report. We acknowledge every report and issue a reasoned decision within 24 hours. The reporter and the sender are informed of the decision.
2.5 — What a report transmits. Shared content is encrypted on the
sender's device and we hold no key that opens it (section 3). When you report from
the app, your app sends us the half of the key carried by your link and, if we no
longer hold the encrypted file, the encrypted copy your device holds — which is
accepted only if it is byte-for-byte what the sender uploaded. That is the only way
content shared through the Service ever becomes readable to us, and it happens only
on your explicit action: nothing on our side can trigger it. The public form does the
same when the complete link, including the part after #, is pasted.
Blocking a sender transmits nothing.
2.6 — Cooperation with authorities. We retain the data allowing the identification of content authors, as required by article 6 of French law n° 2004-575 of 21 June 2004, together with the fingerprint and size of every encrypted file relayed, and disclose them to judicial authorities upon lawful request. Content made readable by a report and found to break these terms is preserved as evidence and handed to the authorities on the same basis. Child sexual abuse material is systematically reported to the competent authorities. We cannot disclose content nobody has reported: we do not hold the means to read it.
3. How sharing works: end-to-end encryption with a split key
Content is encrypted on the sender's device before it is sent (AES-256-GCM). The
key exists nowhere whole: one half travels inside the link, after the
# sign — a part of a web address that browsers and apps never send to any
server; the other half is deposited on our server with the encrypted file. Opening
requires both. Our server hands out its half one opening at a time, which is how the
sender's rules are enforced without our being able to read the content: when a link
expires, reaches its opening limit or is revoked, our half stops answering and every
copy already delivered becomes unreadable, including on devices that have already
opened it.
The encrypted file is deleted from our servers once every allowed opening has been served, and at the latest 24 hours after the link closes. Our half of the key is kept for 30 days after the link closes, refused to everyone during that time, and used for one purpose only: verifying a report filed on that content by a recipient (section 2.5). It is then destroyed. We record the fingerprint and size of each encrypted file at upload, so that a report can only ever be checked against what the sender actually sent.
The sender can pause or revoke a link at any time. Screenshots and screen recordings are blocked and detected where the operating system makes that technically possible; no software measure can prevent every form of capture (for example, a photo taken with another device). The link half of the key exists only on the sender's device and on the devices of recipients who opened the link; we cannot restore a link whose sender has lost it.
4. Plans and payment
4.1 — Free use. The Service is free to use. Without a subscription, a sender can share photos up to 20 MB and videos up to 50 MB. The number of links, of recipients and of days, the viewing time, and the ability to pause or revoke are never limited and never paid for, whatever the plan. Receiving is free in every case.
4.2 — Creator plan. The Creator plan raises the ceiling to 512 MB per photo or video. It is an auto-renewable subscription, monthly or yearly, sold exclusively through Apple's App Store. The price and the length of the period are shown in the app before you confirm the purchase, in the currency of your App Store account; the amount charged is the one the App Store displays at that moment.
4.3 — Renewal and cancellation. The subscription renews automatically for the same period unless you cancel it at least 24 hours before the end of the current period. You cancel it from your Apple ID (Settings → Apple ID → Subscriptions), not from the app and not by writing to us; the cancellation takes effect at the end of the period already paid, and the plan stays active until then. Payment is charged to the Apple ID used for the purchase. We never receive your payment details.
4.4 — Refunds and withdrawal. Purchases made through the App Store are governed by Apple's terms of sale. Requests for a refund, including under a statutory right of withdrawal, are addressed to Apple and decided by Apple; we have no means of issuing them ourselves.
4.5 — Scope of the plan. The plan is attached to the stillyours account — the verified email address — from which the purchase was made, and follows that account on every device where it is signed in. A subscription in use on one account cannot be restored on another. When the plan ends, content already sent is unaffected: existing links keep the rules the sender chose until they expire or are revoked; only the ceiling for new sends changes. Deleting your account does not cancel the subscription: cancel it from your Apple ID first, otherwise Apple keeps billing a plan no account can use.
4.6 — Termination. An account terminated under section 2 loses its plan at the same time. Whether the remaining period is refunded is decided by Apple under its own terms.
5. Age
The Service is reserved for people aged 17 or over. In France, processing the personal data of a child under 15 requires the consent of a holder of parental authority. Accounts found to belong to users under the required age are deleted.
6. Termination and changes
We may suspend or terminate accounts that break these terms, as described in section 2. We may update these terms; substantial changes require your renewed acceptance before you can send again. The version you accepted is recorded with your account.
7. Contact
UnderLayer, Société par actions simplifiée (SAS), 993 344 027 R.C.S. Paris — support@stillyours.io. See also the contact and legal page.