Privacy Policy

The headline

Your app-by-app screen time never leaves your iPhone. Capped enforces caps through Apple's Screen Time framework, which keeps usage data on-device by design. We couldn't upload which apps you use or for how long even if we wanted to — and we don't want to.

What we collect

Account

When you sign in with Apple we receive a random account identifier and, if you share it, your name. Sign-in exists so invitations and approval requests can reach the right people. You can use every cap-enforcement feature without an account.

Invitations

When you send a rewarded invitation, the phone number or email you type is hashed on our servers with a secret key and only the hash is stored — we use it to enforce anti-abuse rules (one reward a day, one week per friend). We never upload your address book, and we can't recover the original address from the hash.

Approval requests

In Accountability mode we store the requests you send — which capped app (by the nickname on your device, never Apple's usage data), the 5-minute ask, and your decider's answer — so both phones show the same truth.

Ad events

In the free tier we log rewarded-ad lifecycle events (started, completed, reward granted) and the revenue amounts ad networks report to us, tied to your account. Ads are served by AppLovin MAX and its partner networks under their own policies; we configure them to serve non-personalized ads and we do not request App Tracking Transparency permission.

Push tokens & diagnostics

A device push token, so approval requests can buzz your decider's phone. Standard server logs (timestamps, status codes) for keeping the service healthy.

What we never collect

• Which apps you use, or for how long — that stays on-device with Apple.
• Your contacts or address book.
• Your location.
• Anything for sale — we do not sell or rent personal data, period.

Payments

Subscriptions are processed entirely by Apple. We never see your payment details — Apple tells us only whether a subscription is active.

Where data lives & how long

Server data is stored with Supabase (hosted on AWS, US East). We keep it while your account is active. Email support@trycapped.app from any address tied to your account and we'll delete your account data within 30 days. Recipient hashes used for anti-abuse may be retained in anonymized form.

Your rights

Depending on where you live (GDPR, CCPA, and friends), you may have rights to access, correct, delete, or export your data, and to object to processing. One email to support@trycapped.app exercises any of them.

Children

Capped is not directed at children under 13, and we don't knowingly collect their data.

Changes

If this policy changes materially, we'll say so in the app before the change takes effect. The current version always lives at trycapped.app/privacy.