Privacy Policy

1. Who we are

Shells is an iOS app that helps you understand and manage your screen time. This Privacy Policy describes how the Shells app ("Shells", "we", "us", "our") handles information when you use it. If you have any questions, contact us at keebbuddy@gmail.com.

2. Information we handle

We organize information by what the app does with it.

2.1 Screen Time data (stays on your device)

Shells uses Apple's Screen Time frameworks (FamilyControls, DeviceActivity, ManagedSettings and DeviceActivityReport) to show your usage and to apply the limits and blocks you set up. Apple gives the app this information as private tokens and on-device reports. This data:

• Cannot be sent off your device, by Apple's design.
• Is never collected, stored or read by our servers.
• Is used only on your iPhone to show insights, track your daily goal and enforce the controls you choose.

One small exception: when you do a daily check-in, the app saves your screen time total at that moment so it can show it back to you. If you turn on iCloud backup (see 2.6), that number is copied to your own iCloud account along with the rest of the check-in.

The Shells widgets also keep an estimate of your screen time for each day on your iPhone (for your whole phone, and for each app you add to the One App and Four Apps widgets), so they can show past days. These estimates never leave your iPhone, are not part of iCloud backup, and Delete All Data erases them.

2.2 Location and motion data (optional, on your device)

If you allow location or Motion & Fitness access, Shells uses Apple's Core Location and Core Motion to find the places you spend time, build a timeline of your day, show where you use your phone most, run Location Blocks (blocking or allowing apps at places you choose), and count steps for Steps Unlock. Your places and location history are stored on your device and are never sent to our servers.

To label a place with a neighbourhood or suburb name, the app asks Apple's geocoding service for the name of that spot, as any app using Apple Maps data does. If you turn on iCloud backup (see 2.6), your saved places and recent location history are also copied to your own iCloud account.

You can turn off location access at any time in Settings → Privacy & Security → Location Services → Shells, and Motion access under Settings → Privacy & Security → Motion & Fitness → Shells.

2.3 Camera and NFC (optional, on your device)

Exercise Unlock uses the front camera to count your reps with Apple's on-device body-pose detection. No photo or video is recorded, saved or sent anywhere. NFC Locks reads only the serial number of NFC tags you register yourself. Nothing is written to your tags, and tag details stay on your device (and in your iCloud backup, if you turn it on).

2.4 Your account (optional)

You can use Shells without an account. If you choose to create one, the only sign-in method is Sign in with Apple, and we use Supabase to run it. We receive:

• An account identifier.
• The email address Apple shares with us. This can be a private relay address if you chose "Hide My Email".
• Your name, only if you chose to share it with Apple's sign-in sheet.

Your account is used to sign you in, unlock the Insights tab, give you your invite code, and keep your subscription linked to you. We do not send you marketing email.

2.5 Refer Friends

When you are signed in, you get an invite code to share. To run the program, Supabase stores your code, which accounts joined with which code, and the rewards each account has received. When a friend redeems a code, our server grants free Pro time to both accounts through RevenueCat (see 2.7). When you redeem a code, the app sends a one-time Apple DeviceCheck token. Our server uses it to mark this device with Apple, so it can refuse a device that has already redeemed a code. Apple's DeviceCheck only stores a yes/no flag per device and does not tell us who you are or which device you use.

2.6 iCloud backup (optional, off until you turn it on)

If you turn on Back Up to iCloud in Settings, Shells copies your settings, streak, check-in notes (the intention you type, the mood you pick and your screen time at that moment), blocking rules, saved places and recent location history (up to about 90 days) to your own iCloud account using Apple's iCloud key-value storage, so they come back if you reinstall the app. This data sits in your iCloud account, not on our servers, and we cannot read it. Turning the switch off stops new backups. Deleting your data in the app (see section 6) also removes the backed-up check-in notes, places and location history.

2.7 Purchases

Pro is sold through the App Store, and Apple processes every payment. Apple shares limited purchase details (such as a transaction identifier and whether Pro is active) with our subscription provider, RevenueCat, so the app knows you have Pro. If you are signed in, your account identifier is shared with RevenueCat so Pro follows your account, and so referral rewards can be added to it. We never receive your card number, billing address or other payment details.

2.8 Product analytics and feature flags

Shells uses Statsig to understand which features are used, to find problems, and to switch features on or off remotely. Statsig receives:

• Events about how the app is used, with counts and settings. For example: a screen was opened, a limit with 3 apps was created, a pause was finished, a paywall was shown, or which Calm browsing site was opened. When you finish a daily check-in, the mood you pick is included, but never the intention you type.
• A device identifier made by iOS for this app, your account identifier when you are signed in, the app version, basic device details such as the iOS version, and whether you asked to hear about the family plan.

These events never include your Screen Time data, the names of the apps you use or block, the content of anything you browse, your places or your location. For Mindful Pauses set up through Shortcuts (beta), events include the app's name only if it is a well-known app on a fixed list (such as Instagram or TikTok); any other app is sent as “other”.

2.9 Feedback

If you send feedback from Settings, we receive the message you type, the category you pick, the app version, your iOS version and your iPhone model. If you are signed in, your account identifier and email are attached so we can reply. Feedback is stored in Supabase until the issue is resolved.

2.10 Calm browsing

Calm browsing opens the mobile websites of services such as Instagram, YouTube, X, TikTok, Facebook and Reddit inside Shells, with the parts you choose (such as feeds and ads) hidden. You sign in on each site's own page. Shells does not read or store your passwords, and the sites' cookies stay on your device. What you do on those sites is shared with those companies under their own privacy policies, just as it would be in a web browser.

3. How we use information

We use the information described above to:

• Run the app's features (insights, controls, the place timeline, widgets).
• Sign you in and run Refer Friends.
• Check and manage your purchases.
• Improve the app, fix bugs, and decide what to build next.
• Reply to your support requests and feedback.
• Comply with applicable law.

We do not sell your personal information, share it with advertisers, or use it to track you across other companies' apps and websites.

4. Services we use

These services act as our processors and may store data in the United States or other countries. We rely on each provider's standard data-protection terms.

5. How long we keep information

• On-device data (Screen Time insights, places, location history, motion, settings) stays on your device until you delete it in the app or delete the app.
• iCloud backup stays in your iCloud account until you delete your data in the app or remove Shells' data from iCloud in iOS Settings.
• Account and referral data is kept while your account exists. When you delete your account, your account and the data stored with it (such as your referral records) are deleted.
• Feedback is kept until the issue is resolved. Email us if you want a message deleted sooner.
• Purchase records are kept by Apple and RevenueCat for as long as accounting and tax law require.
• Analytics events are kept for up to 24 months.

6. Deleting your data

• Delete your account: in the app, go to Settings → Privacy & Permissions → Delete Account (shown when you are signed in).
• Delete places or location history: Settings → Places & Location History lets you forget a single place or erase all of your location history.
• Delete data on your device: Settings → Privacy & Permissions → Delete All Data erases your location history (places, visits and movement), your check-in notes (the intention, the mood and the screen time saved with each check-in), past focus sessions and the screen time history the Shells widgets keep from your iPhone, and removes your check-in notes, places and location history from your iCloud backup. Your other devices that use the same iCloud backup also erase the check-in notes saved before that moment, the next time they sync. Your streak stays, and the days you checked in still count toward it. The screen time charts in the app come from iOS Screen Time, which Shells doesn't store, so they stay (iOS keeps them under Settings → Screen Time). Your controls and settings stay too, along with any place a Location Block or your Holiday Mode Home uses. You can remove controls one by one in the Controls tab. The mood included in a check-in's analytics event (see 2.8) goes to our analytics provider, so Delete All Data can't remove it; those events are kept for up to 24 months (see section 5).
• Deleting the app also removes everything Shells stored on your device.
• If you can't use the app, email keebbuddy@gmail.com and we will delete your account for you.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and associated personal information.
• Object to or restrict certain processing.
• Receive your data in a portable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data-protection authority.

To use any of these rights, contact us at keebbuddy@gmail.com.

8. Children

Shells is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will delete it.

9. Security

We use standard security practices to protect information, including TLS encryption in transit and access controls on our backend systems. No system can be 100% secure, but we work to keep the risk of unauthorized access low.

10. International users

Shells is available worldwide. By using the app, you understand that your information may be processed in countries other than your own, including the United States, where data-protection laws may differ from your local laws.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will let you know in the app before they take effect. The "Last updated" date at the top of this page shows the most recent revision.

12. Contact

For privacy questions, requests, or complaints, email keebbuddy@gmail.com.