Private by design.

This policy covers the Screeny website and the Screeny iOS app. They work differently, so each one has its own part below.

The website

The website has no accounts, no cookies and no tracking. It stores your email address only if you join the waitlist.

Who is responsible

The controller for this website and for the app, as defined by the GDPR, is:

Aditya Bhatia
Beim Brinkmannschen Park 18
21079 Hamburg
Germany
Email: contact@screenyblock.com
Phone: +49 176 62270858

Hosting

This website is a static site served by Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit a page, the server necessarily processes your IP address and technical request data (browser, operating system, time of the request and the page requested) to deliver the page to you and to protect the site from attacks. The legal basis is Art. 6 (1) (f) GDPR: our legitimate interest in a secure, working website. Transfers of this data to the USA are covered by the EU-US Data Privacy Framework and by standard contractual clauses.

No cookies, no analytics, no tracking

This website sets no cookies and runs no analytics, tracking or advertising scripts. Fonts are served from our own server, not from Google or any other font service.

The site keeps a few small notes in your browser's local storage, only for things you choose to do: that you closed the launch offer popup, your light or dark preference if you set one, and, if you join the waitlist, the address you signed up with and the time of your last attempt, so the form does not send the same signup twice. These notes stay in your browser and are never sent anywhere. The legal basis is § 25 (2) No. 2 TDDDG, because they are strictly necessary for a function you asked for.

The waitlist

If you join the waitlist, your email address is stored in a database run by Supabase, Inc., 970 Toa Payoh North #07-04, Singapore 318992, which acts as our data processor under a data processing agreement. The database runs on servers in the USA; that transfer is covered by standard contractual clauses (Art. 46 GDPR). We store your email address, the time you signed up, and when we sent you each of the emails below.

We use your address only for Screeny: a short welcome email right after you sign up, an invite to test Screeny through Apple's TestFlight when a spot opens, and the launch email. It is never sold, shared or used for advertising.

These emails are sent through Resend (Resend, Inc., San Francisco, USA), our processor under a data processing agreement. Resend receives your email address and the email itself to deliver it; that transfer to the USA is covered by standard contractual clauses (Art. 46 GDPR). We do not track opens or clicks. To stay under our sending limit we count how many emails went out each day, without storing who they went to.

The legal basis is Art. 6 (1) (a) GDPR: your consent, given by submitting the form. You can withdraw it at any time with the unsubscribe link at the bottom of every email, which deletes your address straight away, or by emailing us. Otherwise we keep it until you ask us to remove it, or until it is no longer needed for the launch and the free access.

Abuse protection

To stop the signup form from being flooded, each signup attempt briefly stores your IP address with a timestamp, so we can cap the number of attempts per address per hour. Only the last hour of entries is ever read, and older ones are deleted automatically as the form keeps being used. We also keep an hourly count of attempts, with no personal data in it, for up to 90 days. The legal basis is Art. 6 (1) (f) GDPR: our legitimate interest in protecting the service.

Emailing us

If you email us, we use your address and your message only to answer you. The legal basis is Art. 6 (1) (b) GDPR when your question is about buying or using Screeny, and Art. 6 (1) (f) GDPR otherwise (our legitimate interest in answering you). We delete the conversation once it is done, unless the law requires us to keep it.

Encryption

The whole website is served over TLS (https), so anything you send, like your email address in the waitlist form, is encrypted on the way.

The app

The Screeny app has no accounts and no ads. Your rules, your apps and your screen time stay on your device. If you say yes, the app also sends usage statistics tied to a random ID, never to your name, so we can see how Screeny is used and make it better. Purchases are handled by Apple and RevenueCat.

Screen Time and app blocking

Screeny blocks apps using Apple's Screen Time frameworks (Family Controls, Managed Settings, and Device Activity). These frameworks are designed so that Screeny never learns which apps you select or how you use them: your choices are handed to Screeny as opaque tokens that only iOS can read. Usage summaries you see in Screeny are drawn on-device by an Apple-controlled extension, and that data never reaches Screeny's own code or leaves your device.

Camera

The camera is used only while you scan a QR code or barcode to lock or unlock apps. Frames are processed on-device and are never recorded, stored, or uploaded.

NFC

Reading an NFC tag happens entirely on-device. The tag's identifier is stored locally so Screeny can recognize your key again.

What is stored on your device

Your rules, folders, schedules, limits, and keys are stored locally on your device, inside Screeny's private storage and its app group container (which only Screeny and its own extensions can read). Deleting Screeny deletes this data. A random ID is also kept in your device's Keychain and iCloud Keychain, so it survives a reinstall and can restore a purchase without an account.

Usage statistics, only with your permission

The app asks once whether it may send usage statistics and sends nothing until you say yes. You can change your answer at any time in Settings under Share usage data.

With your yes, the app sends, under the random ID:

• which screens you open;
• which features you use, for example a rule being created, locked or unlocked, and how (a hold, a QR code or an NFC tag);
• how far you got in onboarding and how long each screen took;
• how many rules of each kind you have;
• your onboarding answers as broad categories (screen-time range, what you do, what you want to change, age range, gender, how you found Screeny);
• technical details: app version, language, device model, iOS version, and a rough location (country and city) worked out from your IP address. The IP address itself is not stored.

Never sent: your name, which apps you block or allow, and how much time you spend in any app.

Who processes the statistics

PostHog (PostHog Inc., USA) stores the usage statistics for us in its EU cloud in Frankfurt, Germany. Supabase (Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992) stores the onboarding answers and a copy of the usage events on servers in the USA. Both act as our processors under a data processing agreement and work only on our instructions. Transfers to the USA are covered by standard contractual clauses (Art. 46 GDPR). Nothing is sold, used for advertising, or used to follow you across other apps.

Purchases

Payments are made with your Apple ID through the App Store; Screeny never sees your payment details. Apple's own privacy policy applies to the payment. RevenueCat (RevenueCat Inc., USA) checks purchases for us as our processor and lets you restore them on a new phone. It receives the random ID, what you bought and when, and technical details such as the app version and the country of your App Store account.

To decide whether you get free lifetime access as an early supporter, the app reads, on your device, the date your Apple ID first downloaded Screeny. Only the answer (yes or no) is sent to RevenueCat.

Legal basis

Usage statistics: your consent (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG), which you can withdraw at any time in Settings, with effect for the future. Purchases: carrying out the purchase you asked for (Art. 6 (1) (b) GDPR); the random ID kept in the Keychain is needed for that (§ 25 (2) No. 2 TDDDG).

Keeping and deleting

We keep usage statistics only as long as they help us improve Screeny. Because they are tied to a random ID and not to you, we can only find yours if you tell us the ID: copy it in the app under Settings, Your ID, and email it to us. We then delete everything stored under it. Purchase records are kept as long as the law requires.

Children

Screeny is made for people managing their own screen time. If you tell the app you are under 16, it stops sending usage statistics; a parent can turn them back on in Settings. The waitlist on the website is the only place we ever collect an email address, and it is meant for people who choose to sign up themselves.

Changes

If anything in this policy changes, it will be updated here. If a future version of the app changes any of this, the change will also be called out in the App Store release notes.

Your rights

You have the right to:

• access the personal data we hold about you (Art. 15 GDPR)
• have wrong data corrected (rectification, Art. 16 GDPR)
• have your data deleted (erasure, Art. 17 GDPR)
• have its processing restricted (Art. 18 GDPR)
• get your data in a common, machine-readable format (data portability, Art. 20 GDPR)
• object to processing based on our legitimate interests under Art. 6 (1) (f) GDPR (Art. 21 GDPR)
• withdraw your consent at any time, with effect for the future (Art. 7 (3) GDPR)

To use any of these rights, email us at contact@screenyblock.com.

Right to complain

You also have the right to complain to a data protection supervisory authority. The one responsible for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22
20459 Hamburg
Germany

Contact

Questions about privacy? Email contact@screenyblock.com.