1. Scope

This policy explains how Capy Limit handles data when you use the app. Your goals, limits, selected apps, and feature history are stored on your device. Capy Limit does not require an account and does not collect your name, email, location, contacts, photos, screen content, or the text you enter.

2. On-device Screen Time data

If you grant Apple Screen Time permission, Capy Limit uses Family Controls, Device Activity, and Managed Settings to read activity needed for your goals, show reports, and enforce the limits you choose. App selection and the required activity data are processed on your device and by Apple’s frameworks. Capy Limit does not send device or other-app usage duration, selected-app lists, Screen Time tokens, or screen content to its analytics server.

3. Optional analytics

Analytics is off by default. Only if you enable “Help Dada improve the app” does the app send interaction events from within Capy Limit so we can understand which screens are opened and which features are used. You can turn it off at any time in Privacy; unsent events on the device are deleted and no new events are sent.

Events may include an interaction type, a screen or other allowlisted value, random installation and session identifiers, a random event identifier, and the interaction timestamp in UTC. Examples include opening a report, starting a challenge, or a permission result. We do not collect device or other-app usage duration, selected-app lists, entered content, report images, or screen content. Events are not sent through Firebase Analytics, advertising networks, or third-party analytics services.

Events may be queued on-device while offline and retried when connected. The device queue holds up to 2,000 events for up to 30 days. Events received by the server are retained for up to 90 days.

4. Version checks

When checking for an update, Capy Limit sends the platform (iOS) and app build number to the server to receive version policy and the App Store link. This supports app updates, is not behavioral analytics, and does not include the installation identifier.

5. Retention and deletion

“Delete all data” in Privacy clears Capy Limit data from the device and asks the server to delete the installation profile and related analytics events. If the device is offline, the app temporarily keeps only the minimum information needed to retry the deletion request when it reconnects.

To verify a deletion request, the server separately retains a random request identifier, a keyed hash of the installation identifier, and the deletion time. This audit record is retained separately from analytics events and currently has no automatic expiration configured. Copies in server backups may remain until those backups expire or are removed under a separate backup schedule. Turning analytics off only stops new events and clears the unsent queue; use “Delete all data” to request deletion of events already sent.

Screen Time permissions granted by iOS are controlled by the operating system and may remain enabled after Capy Limit data is deleted. You can change or revoke them in iOS Settings.

6. Service providers

The Capy Limit server processes update checks and, if you opted in, analytics. The server hosting infrastructure may process technical data needed to provide the service. Capy Limit does not use this data for advertising or sell personal data.

7. Children

Capy Limit does not require personal identifying information or create user accounts. Parents or guardians should review Screen Time permissions and device limits with children.

8. Changes and contact

We will update this policy and its effective date when our data practices change. For privacy questions or support, email [email protected].