Draft — not in effect. Items in brackets are still to be decided.

Privacy Policy

Last updated: [date of publication]

Attuno is an iPhone app that helps you understand and limit the time you spend in the apps you choose. This policy explains what Attuno collects, why, who it is shared with, and what you can do about it. Attuno is operated by [operator legal name and address] (“we”).

Your Screen Time stays on your iPhone

Attuno reads Screen Time through Apple’s Screen Time frameworks, only for the apps and categories you select. The names of apps and websites never leave your iPhone: Apple gives Attuno an opaque token for each one, and Attuno shows names on the device only. What reaches our servers is described below.

What we collect

Your account

• Email address and password. The password is stored only as a salted hash.
• Whether your email address is confirmed, and one-time codes we email you. Codes are stored hashed and expire after 15 minutes (password reset) or 24 hours (email confirmation).
• Language, time zone and an optional nickname.
• The parental PIN, if you set one. It is stored so that it can be emailed to the account’s address when forgotten.

Usage totals

• For each day: the total minutes spent in the apps and categories you selected, and the minutes per app or category. Each app or category is identified by a one-way hash of Apple’s token, which we cannot turn back into an app name.
• What Attuno works out from those totals: your daily attention score and state, your archetype, insights, streaks, achievements and league standing.

Your device

• An identifier Attuno creates on your iPhone, used to keep one device signed in to an account at a time.
• A push notification token and language, used to send the notifications you allow.

Purchases

• Your subscription’s plan, status, expiry date and App Store transaction identifier, received from our subscription provider when you buy, renew, cancel or restore. We never receive your payment details — Apple handles payment.

Security and reliability

• The IP address you registered from and the one you last signed in from, used to protect accounts against abuse. Request counts are also kept briefly in memory to limit repeated attempts.
• Records of server errors, which may include your account identifier. Kept for 30 days.

What other people see

Attuno places you in a weekly league with other users. Members of your league see your nickname (or an automatic name such as “User_AB12”), your weekly score and your rank. They do not see your email address or any usage details.

Who we share data with

We do not sell your data and do not use it for advertising or to track you across other companies’ apps or websites. We share it only with providers that run parts of Attuno for us:

• Apple — App Store purchases and push notifications.
• RevenueCat — subscription management. It receives your account identifier and purchase records.
• Resend — sending email (confirmation codes, password reset, PIN reminders).
• [Hosting provider(s) for the API and database — confirm at publication: currently Fly.io and Neon; a move to OVH is planned.]
• [PostHog — product analytics of events such as “subscription activated”, linked to your account identifier. The code supports it, but it is off unless configured. Decide whether it is used before publishing, and remove this item if not.]

How long we keep it

Account, usage and subscription data are kept while your account exists. Email codes expire as described above; subscription event records, sent-notification records and error records are deleted after 30 days.

Deleting your account

[Not available yet. Apple requires that an account created in an app can be deleted from within the app; this must exist before release. Describe it here once built, including what is deleted and how long it takes.]

Children

[To decide with legal review: Attuno includes a parental PIN, so it may be used on a child’s iPhone. State the minimum age, who the account holder is, and the applicable rules (for example COPPA in the United States).]

Your choices

• You choose which apps and categories Attuno reads, and can change or remove them at any time in the app.
• You can turn off notifications and Screen Time access in iOS Settings.
• You can ask us for a copy of your data or to correct it by contacting us.

Changes

If we change this policy, we will update the date above. [How material changes are announced — there is no in-app mechanism for it yet; decide before publishing.]

Contact

[Contact email address — a mailbox on a domain we own, monitored.]