Privacy Policy

ScrollToll collects information necessary for the app to function properly. Most data is stored locally on your device. Some anonymised analytics data is sent to our third-party analytics provider (PostHog) to help us improve the app, and a limited amount of install attribution data is processed via AppsFlyer.

1.1 Device Permissions

Our app requires the following permissions to operate:

1.2 Data Stored Locally

The following types of information are processed and stored locally on your device:

• App Usage Data: Statistics about which applications you use and for how long.
• Installed Applications List: Used to let you select which apps to block.
• Exercise Data: Records of completed exercises and earned screen time.
• User Preferences: Your settings including blocked apps, time limits, and exercise configurations.
• Camera Images: Processed in real-time for pose detection only. Never stored, recorded, or transmitted.

1.3 Analytics Data (Sent to PostHog)

To help us understand how the app is used, we use PostHog, a third-party analytics service. The following data is collected:

• App Interactions: Anonymous data about screens viewed, features used, and button taps.
• Device Identifiers: A randomly generated anonymous identifier, not linked to your personal identity.
• App Performance Data: Crash logs, diagnostics, and performance metrics.
• User-Generated Content Metadata: Anonymous metadata about exercises completed and usage patterns.

All analytics data is transmitted securely over HTTPS. This data is used solely for analytics purposes and is not used for advertising, marketing, or profiling.

1.4 Install Attribution (AppsFlyer)

ScrollToll uses AppsFlyer to measure how new users discovered the app (for example, which link or campaign led to an install). This helps us understand which channels work and how to keep improving the experience. The following data may be processed for attribution purposes:

• Install Referral Data: Information about how you arrived at the App Store or Play Store page (e.g. campaign or referrer parameters).
• Device Information: Device model, operating system version, language, timezone, and connection type.
• Advertising Identifier (where permitted): On iOS, your device's IDFA, only if you grant permission via the App Tracking Transparency prompt. On Android, the Google Advertising ID.
• App Identifier: The ScrollToll bundle or package name, so attribution can be matched to the correct app.

On iOS, attribution that relies on the IDFA is gated by Apple's App Tracking Transparency (ATT) prompt — if you decline, AppsFlyer falls back to privacy-preserving attribution methods provided by Apple. You can change your ATT choice at any time in your device settings.

Information collected is used for the following purposes:

• To provide the core app functionality of blocking selected applications
• To detect and count exercise repetitions using AI pose detection
• To display your daily screen time statistics and usage patterns
• To calculate and track earned app usage time based on completed exercises
• To save your preferences and settings for a personalized experience
• To analyse app usage trends and improve app performance (via PostHog)
• To identify and fix bugs, crashes, and performance issues (via PostHog)
• To understand which channels and campaigns drive new installs (via AppsFlyer)

3.1 Local Storage

The majority of data is stored locally on your device, including exercise records, app usage statistics, preferences, and settings. This data remains on your device and under your control at all times.

3.2 Analytics Data (PostHog)

Anonymous analytics data is sent to PostHog's servers. You can learn more about PostHog's privacy practices at posthog.com/privacy.

3.3 No Cloud Synchronization of Personal Data

ScrollToll does not sync your exercise records, camera data, or app usage statistics to any cloud services. If you uninstall the app or clear its data, all locally stored information will be permanently deleted. Account-level data related to subscriptions (handled via RevenueCat) and install attribution (handled by AppsFlyer) are the exceptions.

3.4 Camera Data

The camera feed used for exercise detection is processed in real-time using on-device AI technology. No camera images or video are recorded, stored, or transmitted. The camera is only active during exercise sessions.

4.1 PostHog (Analytics)

We share anonymous analytics data with PostHog for the sole purpose of understanding app usage and improving the app. PostHog does not receive any personally identifiable information and does not use the data for advertising or profiling.

4.2 AppsFlyer (Install Attribution)

We use AppsFlyer to measure how new users discover ScrollToll. The data described in Section 1.4 is transmitted to AppsFlyer over secure HTTPS connections at install time and at limited subsequent moments required for attribution. You can review AppsFlyer's privacy practices at appsflyer.com/legal/services-privacy-policy.

4.3 RevenueCat (Subscription Management)

We use RevenueCat to manage subscriptions and in-app purchases. When you start a trial or subscribe to Pro, RevenueCat receives your subscription identifier, purchase receipt, and anonymised usage signals to verify your subscription status across devices. You can review RevenueCat's privacy practices at revenuecat.com/privacy.

4.4 What We Do Not Do

We do not:

• Sell, rent, or trade your personal information to any party
• Share your exercise records, camera data, or locally stored app usage statistics with any third party
• Use your personal data for third-party advertising
• Profile you based on the contents of your camera feed or your individual exercise records

You have control over your data:

• Access: View all your locally stored data directly within the app.
• Modification: Change your blocked apps, settings, and preferences at any time.
• Deletion: Clear all locally stored app data through your device settings or by uninstalling the app.
• Permissions: Revoke any granted permissions through your device's settings at any time.
• Analytics Data Deletion: Contact us at the email below to request deletion of your analytics data.
• Tracking Choice: On iOS, you can change your App Tracking Transparency choice at any time via device Settings → Privacy & Security → Tracking. On Android, you can reset or delete your advertising identifier from device Settings.

You can revoke any permission at any time through your device's settings. Please note that revoking certain permissions may limit app functionality:

• Without Camera access, exercise detection will not function
• Without Accessibility Service, app blocking will not work
• Without Usage Statistics, screen time tracking will be unavailable
• Without Notification Access, background media detection will not function

ScrollToll is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. Our target audience is teens and adults who want to build healthier digital habits.

If you believe a child under 13 has provided us with personal information, please contact us at the email below and we will promptly delete the information. Parents and guardians should supervise their children's use of connected devices and review this Privacy Policy together before allowing younger users to install ScrollToll.

If you are located in the European Union, United Kingdom, European Economic Area, or Switzerland, the General Data Protection Regulation (GDPR) and UK GDPR give you additional rights over your personal data. ScrollToll respects these rights and complies with applicable regulations.

8.1 Legal Basis for Processing

• Performance of a contract: Processing necessary to provide core app functionality (app blocking, exercise tracking, subscription management).
• Legitimate interest: Anonymous analytics via PostHog to improve the app and fix bugs; install attribution via AppsFlyer to understand which channels work.
• Consent: On iOS, access to your device's IDFA for attribution is granted via Apple's App Tracking Transparency prompt and can be withdrawn at any time.

8.2 Your GDPR Rights

• Right of access: Request a copy of personal data we hold about you.
• Right of rectification: Request that inaccurate or incomplete data be corrected.
• Right of erasure: Request deletion of your personal data, subject to legal obligations.
• Right to restrict processing: Limit how we process your data in certain circumstances.
• Right to data portability: Receive your data in a machine-readable format.
• Right to object: Object to processing based on legitimate interest.
• Right to withdraw consent: Withdraw any consent given at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: File a complaint with your local data protection authority.

To exercise any of these rights, please contact us at the email below. We will respond within 30 days.

8.3 International Data Transfers

Some of our service providers (including PostHog, AppsFlyer, and RevenueCat) are located outside the European Economic Area. Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) or adequacy decisions. Each provider publishes its own transfer mechanisms in their privacy policies.

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). Specifically, you have the right to know what personal information we collect, the right to request deletion, the right to correct inaccurate information, and the right to opt out of the “sale” or “sharing” of personal information.

ScrollToll does not sell personal information and does not share your personal information for cross-context behavioural advertising. To exercise any of your CCPA / CPRA rights, please contact us at the email below.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top and, where required by law, notify you through the app. Continued use of the app after any changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or want to exercise your data rights, please contact us:

By using ScrollToll, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. You consent to the collection and use of information as described herein, including the sharing of anonymous analytics data with PostHog, install attribution data with AppsFlyer, and subscription data with RevenueCat.