Privacy Policy for Tolls

Last updated: 3 August 2026

This Privacy Policy explains how Tolls ("we," "our," or "us") collects, uses, and protects your information when you use the Tolls mobile application (the "App").

Tolls is designed to help you reduce distracting phone use by requiring a physical action: scanning a real-world object, before unlocking blocked apps. We built this policy to be a clear, honest account of what we actually collect and why, not boilerplate.

1. Information We Collect

1.1 Account Information

When you sign in with Sign in with Apple, we receive a unique identifier for your account. If you choose to share your name or email through Apple's sign-in flow, we may store that information. We do not receive your Apple ID password.

You may also choose to set a display name within the App, which is stored and may be shown to you (and, in leaderboard features, to other users if you opt in).

1.2 Screen Time and App-Blocking Data

Tolls uses Apple's Family Controls / Screen Time framework to let you select which apps to block and to enforce those blocks. This requires you to grant Screen Time authorization.

We store which app categories or tokens you've selected to block, so the App can enforce your choices.
We do not receive the names of specific apps you use outside of your own blocking selections, your browsing history, message content, or any other content from apps on your device. Apple's Family Controls framework is designed so that the specific identities of blocked apps remain private to your device in most cases; we work within that framework's privacy protections.

1.3 Camera and Scan Images

To unlock a blocked app, you scan a physical object using your device's camera. The photo you take during a scan is sent to a third-party AI service (Google's Gemini API) solely to verify that you photographed a real object, in order to confirm your unlock attempt. We do not intentionally use scan photos for any other purpose, and we do not use them to build a photo library of you or your surroundings. Scan images are processed for verification and are not permanently retained by us beyond what is operationally necessary to complete that verification.

1.4 Usage and Activity Data

To power the App's core mechanics (coin economy, streaks, unlock history, leaderboards, and stats), we collect and store:

Coin balances and history (earned, spent, lifetime totals)
Hours your apps have been locked, daily and historical
Streak counts and streak-related milestones
Unlock event history (when you unlocked, for how long, not what you did afterward)
Referral code, referral count, and referral-related trial status
Subscription/trial status (active, trial, expired) as reported by our payment processor

1.5 Subscription and Payment Information

Subscriptions are processed through Apple's App Store and managed via RevenueCat, a subscription management platform. We do not receive or store your credit card or full payment details; Apple and RevenueCat handle that. We do receive subscription status (e.g., active, trial, cancelled, expiration date) so the App can correctly grant or restrict access to paid features.

1.6 Notifications

If you grant permission, we send local and push notifications related to your usage (for example, reminders about your streak, referral progress, or trial status). You can disable these at any time in your device's notification settings.

1.7 Diagnostic and Technical Data

Like most apps, we may collect basic technical information (such as crash reports and general performance data) to help us fix bugs and improve stability. This is not used to build an advertising profile of you.

2. How We Use Your Information

We use the information described above to:

Provide and operate the App's core features (blocking, scanning, unlocking, coin economy)
Maintain your account and sync your progress across sessions
Verify subscription and trial status to grant or restrict Pro features
Operate the referral program (generating and tracking referral codes)
Send you notifications you've opted into
Diagnose and fix technical issues
Maintain leaderboards, if and when you choose to participate

We do not sell your personal information. We do not use your data to serve you third-party advertising, and we do not share your usage data with advertisers.

3. Third-Party Services

We rely on the following third-party services to operate Tolls, each of which processes limited data on our behalf under their own privacy and security practices:

Apple — Sign in with Apple, App Store purchases, push notifications, and the Family Controls / Screen Time framework
Supabase — our backend database provider, used to store your account and usage data securely
RevenueCat — subscription and purchase management
Google (Gemini API) — AI-based image verification for the scanning mechanic

We encourage you to review these providers' own privacy policies for further detail on how they handle data on our behalf.

4. Data Retention

We retain your account and usage data for as long as your account is active, so that your progress, streaks, and history remain intact. If you delete your account through the App, we will delete your associated profile data from our systems, other than what we are legally required to retain (for example, for fraud prevention or legal compliance).

5. Your Choices and Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information. You can:

Delete your account directly within the App (Settings → Delete Account), which removes your profile and associated data from our systems.
Sign out of your account at any time.
Disable notifications through your device settings.
Revoke Screen Time / Family Controls authorization through your device settings (note: this will prevent the App's core blocking features from functioning).

If you have questions about your data or wish to make a request beyond what's available in the App, contact us at aashiksingh@gmail.com.

6. Children's Privacy

Tolls is not directed at children under 13 (or the relevant age of digital consent in your jurisdiction), and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, please contact us so we can address it.

7. Data Security

We take reasonable technical and organizational measures to protect your information, including relying on our providers' (Supabase, Apple, RevenueCat) security practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Users

Your information may be processed and stored in countries other than your own, including the United States, depending on where our service providers operate their infrastructure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you within the App.

10. Contact Us / Support

If you have questions about this Privacy Policy, need help using the App, or want to report an issue, please contact us at:

aashiksingh@gmail.com

This Privacy Policy is provided as a plain-English summary of our data practices and is not a substitute for legal advice. We recommend having this document reviewed by a qualified professional before publishing it, particularly for compliance with laws such as GDPR, CCPA, or COPPA that may apply to your specific circumstances.