DRAFT for legal review. This policy is not in effect and has not been reviewed by a lawyer. Items marked TODO need a decision.

Privacy policy

Last updated: TODO: date of publication

ScrollJar helps you cut down on the apps you scroll too much. This policy explains what we collect, why, and the choices you have. In short: we don't sell your data, we don't show ads, and we never see which apps you use on iPhone.

ScrollJar is operated by TODO: legal entity name and address ("we", "us").

What stays on your phone

• The apps you choose to lock. On iPhone, Apple's Screen Time gives ScrollJar only opaque tokens. We never learn which apps they are, and the tokens never leave your phone. On Android, the app package names you pick stay on your phone.
• Screen Time usage on iPhone. Apple doesn't let usage data leave the device, and we don't try.

What we collect, and why

• An account identifier. When you use ScrollJar with our service, we create an anonymous account (no name, email or password needed) so your rules, fines and unlocks work across reinstalls.
• Device information: a random device identifier, the platform (iOS or Android) and your time zone, so unlocks are bound to your device and "midnight" means your midnight.
• Your rules, without the apps: the rule name, type, limits or hours, days, fine amount and chosen charity. The server uses these to calculate fines and to delay loosening changes until midnight.
• Unlock attempts and fines: when you tried to unlock, whether you walked away or paid, the fine amount, the charity, and the payment status from our donation partner.
• Usage minutes on Android: if you set daily goals, the number of minutes each rule's apps were used per day, for your history and streaks.
• Accountability partners: invites you create (stored as a one-way hash of the code), the link between you and a partner, and the display name you choose to show them. Partners see that you're linked and your name. When partner alerts launch, a partner may be told that you paid to unlock or tried to get around ScrollJar; they never see your rules or which apps you lock. TODO: finalize when partner alerts ship.
• Goals: the daily minutes goals you set for your rules.
• Technical logs: our providers (Supabase, Cloudflare) keep standard request logs, such as IP addresses and timestamps, for security and debugging. TODO: retention periods.
• Subscription status: whether you have ScrollJar Pro, from Apple or Google via our subscription provider.
• Bot protection: if enabled, Cloudflare Turnstile checks that a person (not a script) is creating the account.

We don't use advertising identifiers, ad networks or third-party analytics SDKs. TODO: confirm before launch (e.g. if crash reporting or push notifications to partners are added, which would store a device push token).

Donations and payments

Fines are donations made through Every.org, a 501(c)(3) nonprofit. You pay on Every.org's checkout, and Every.org grants the donation to your chosen charity and sends your receipt. We never see or store your card or bank details. To start a checkout we send Every.org the fine amount, the charity, and internal reference numbers (for the fine, the unlock attempt and the rule), which contain nothing about you. Every.org then tells us that the fine was paid (amount, currency, charity and a payment reference) so we can unlock the app. Every.org's notice can include the name and email you gave it; we don't store them. What Every.org collects, and whether your name is shared with the charity, is covered by Every.org's privacy policy and the choices you make on its checkout.

Subscriptions and tips are billed by Apple or Google. We receive only the purchase status, through our subscription provider (RevenueCat), not your payment details.

Service providers

We use these providers to run ScrollJar, each only for the purpose listed: Supabase (database and accounts), Every.org (donations), RevenueCat (subscription status), Apple and Google (app distribution and billing), and Cloudflare (bot protection, if enabled). TODO: hosting regions and data processing agreements.

What we never do

• Sell or rent your data, or share it for advertising.
• Take a cut of your fines. 100% goes to charity, minus processor fees.
• Show your rules, apps or usage to your accountability partners.

How long we keep it

We keep your data while your account exists. Delete your account in the app (Settings → Delete account) and we delete your account and everything we store with it right away: rules, history, fines, partner links and subscription status. Your phone deletes its copy of your data at the same time, except that apps locked by an active rule stay locked until your next local midnight, like any other loosening of a rule. Until then the phone keeps only what it needs to enforce those locks (each rule's name, schedule or limit, fine amount and the apps it locks, and when any unlock you already paid for ends), and deletes that at midnight or the next time you open ScrollJar after it. Our subscription provider (RevenueCat) and Apple or Google keep their own purchase records. TODO: decide whether to also delete the RevenueCat customer record on account deletion. Donations already made stay with the charity, and Every.org keeps its own donation records as the law requires. TODO: backup retention period.

Your rights

You can see your data in the app, delete it at any time, and contact us to request a copy or ask questions. Depending on where you live (for example California or the EU/UK) you may have further rights, such as access, correction, deletion and portability, which we honor for everyone. TODO: confirm jurisdictions, EU/UK representative if needed.

Age

Fines are for adults: you must confirm you're 18 or older before paying one. ScrollJar isn't directed to children under 13. TODO: minimum age to use the app at all (13+ or 18+).

Changes and contact

If we change this policy, we'll update the date above and tell you in the app for material changes. Questions: TODO: privacy contact address (e.g. privacy@scrolljar.app).