Who is responsible for your data

PushBlocker — Exercise to Scroll (“PushBlocker”, “the app”) is published by Arifur Rahman, an independent app developer (“we”, “us”). For anything in this policy, including privacy requests, write to:

arifurrahman.bc@gmail.com

This policy explains what PushBlocker does with information when you use it. It applies to the iOS app and to nothing else.

No account, no profile

PushBlocker does not ask you to create an account. We do not collect your name, email address, phone number, date of birth, contacts, precise location, or health records. Nothing you do in the app is tied to a personal identity on our side, because there is no “our side” — there is no PushBlocker server, and the app never sends your settings or activity to one.

Information that stays on your iPhone

To do its job, PushBlocker stores the following on your device only, in the app's private storage and in a shared container used by its own iOS extensions. It is never transmitted to us or to anyone else.

All of it is removed from your device when you delete the app. See section 11.

Screen Time data (Apple's Family Controls)

PushBlocker blocks apps through Apple's Screen Time framework — FamilyControls, DeviceActivity and ManagedSettings. This is a deliberately privacy-protective design on Apple's part, and it limits what we could see even if we wanted to:

• When you pick apps to block, iOS hands the app opaque tokens, not app names or bundle identifiers. The app can display them via Apple's own picker and shield them, but it cannot read a list of which apps you chose in any human-readable form.
• These tokens are meaningful only on your device and only to this app. They are stored locally and are never uploaded.
• Your daily screen-time report is drawn by an Apple-sandboxed report extension. iOS deliberately prevents that extension from sending the underlying usage data anywhere, including to us. We see none of your usage figures.
• Granting Screen Time permission does not give us access to your device. It gives iOS permission to apply the blocks you configured.

Camera

PushBlocker asks for camera access for two features. Neither one records video, takes a photo you didn't ask for, or sends any image off your device.

Exercise counting

When you complete push-ups, squats, planks or jumping jacks to earn an unlock, the camera preview runs and each frame is passed to Apple's on-device Vision body-pose model to count repetitions and check your form. Frames are held in memory for the instant it takes to analyse them and are then discarded. Nothing is written to storage, added to your photo library, or transmitted.

Photo check

Where the app asks you to take a photo to confirm you have stepped away from the screen, the photo is classified by a machine-learning model bundled inside the app, running on your device. The photo is shown to you in the app and then discarded. It is not saved to your Photos library — the app never requests photo library access at all — and it is not uploaded.

You can refuse or revoke camera access at any time in iOS Settings → Privacy & Security → Camera, or Settings → PushBlocker. The rest of the app continues to work; only the camera-based unlock methods stop being available.

Notifications

If you allow notifications, PushBlocker schedules them locally on your device — exercise reminders, session start and end alerts, streak reminders. There is no push server, we do not collect a push token, and no notification content is composed anywhere but on your iPhone. You can turn notifications off in the app's Preferences or in iOS Settings.

Purchases and subscriptions

Subscriptions and the one-time lifetime purchase are sold and processed by Apple through the App Store using StoreKit. We never see, receive or store your payment card, your Apple Account credentials, or your billing address.

What the app receives from Apple is a signed transaction confirming that a purchase is valid, together with its expiry date. The transaction identifier and the resulting subscription status are stored locally in the iOS Keychain so the app knows you are a paying user and can restore your purchase. Apple's own handling of your purchase is governed by Apple's Privacy Policy.

Analytics

PushBlocker includes Google Firebase Analytics. This is the only component that sends anything off your device.

• We log no custom events of our own, set no user identifier, and set no user properties. Only Firebase's automatically collected measurements are gathered — for example app opens, session length and engagement, app version, crashes and errors, device model, operating system version, language, and coarse country or region derived from the IP address.
• Firebase assigns a random app-instance identifier to your installation. It is not your name, your Apple Account, or your device's advertising identifier.
• PushBlocker does not use the advertising identifier (IDFA), does not present an App Tracking Transparency prompt, and does not track you across other companies' apps or websites. There are no advertising SDKs and no data brokers in this app.
• None of the data described in sections 3–6 — your blocked apps, schedules, streaks, camera frames, photos or screen-time figures — is included in analytics.

We use this only to understand, in aggregate, which parts of the app people reach and where it breaks. Google processes this data as our service provider; see Firebase's privacy documentation and Google's Privacy Policy. Because analytics is not attached to an account, the practical way to stop all collection is to delete the app.

What we never do

• We do not sell or rent personal information, and we have not done so in the preceding twelve months.
• We do not share your information for cross-context behavioural advertising.
• We do not display advertisements in the app.
• We do not upload, back up or synchronise your blocklists, schedules or exercise history to any server.
• We do not read your messages, browsing history, contacts, location or health data.

Legal bases for processing (EEA and UK users)

Where the UK GDPR or EU GDPR applies, we rely on:

• Performance of a contract — operating the features you asked for, and delivering what you paid for.
• Consent — camera access and notifications, each of which you grant through an iOS prompt and can withdraw at any time in iOS Settings.
• Legitimate interests — a minimal, aggregate understanding of how the app performs and where it fails, so it can be fixed and improved.

Retention and deletion

Everything listed in section 3 lives on your device for as long as the app is installed and is deleted with it. Deleting PushBlocker removes its local database and its shared container. Removing the app also ends any blocks it was applying.

Two things outlive the app on your device and are not ours to erase: your purchase record, which Apple retains and which is what allows “Restore Purchase” to work after a reinstall; and analytics data already collected by Firebase, which is retained by Google under its own schedule (a maximum of 14 months for event-level data at our current setting).

Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict processing, and not to be discriminated against for exercising them. Because PushBlocker has no account system, most of your data is already exclusively in your hands: it is on your phone, visible in the app, and deletable by deleting the app.

For anything held by our analytics provider, or for any question about this policy, write to arifurrahman.bc@gmail.com. Please tell us your device model and approximate installation date, since we have no identifier to look you up by. We will respond within 30 days. EEA and UK users also have the right to complain to their local data protection authority.

Children

PushBlocker is not directed at children under 13, and we do not knowingly collect personal information from them. If a child under 13 is using the app on a family device and you believe information has been collected, contact us and we will address it. Where a parent or guardian sets up PushBlocker for a minor, the guardian is responsible for the settings they configure.

International transfers

Analytics data is processed by Google on servers that may be located in the United States and other countries. Where required, those transfers rely on the European Commission's Standard Contractual Clauses as implemented in Google's data processing terms.

Security

App data is stored in the iOS application container, protected by the operating system's sandbox and by your device passcode and encryption. Subscription details are kept in the iOS Keychain. No method of storage is perfectly secure, but note that the design here removes most of the risk: there is no server holding your data to be breached.

Changes to this policy

If this policy changes, the revised version will be posted at this address with a new “Last updated” date. Material changes will also be noted in the app or in the App Store release notes. Continuing to use PushBlocker after a change means you accept the updated policy.

Contact

Arifur Rahman
arifurrahman.bc@gmail.com