Bauble Privacy Policy

Effective date: July 20, 2026

This Privacy Policy describes how Bauble ("Bauble," "the app," "we," "us") collects, uses, and protects information when you use the Bauble iOS application. Bauble is designed to be offline-first and to collect the minimum data necessary to operate. We do not sell your data, we do not show ads, and we do not use third-party analytics or advertising SDKs.

Please read this policy carefully. By using Bauble, you agree to the practices described here. If you do not agree, please do not use the app.

1. Summary (plain language)

• Most of your data never leaves your device. Your blocked-app and blocked-website selections, blocking schedules, focus sessions, imported flashcard decks, study progress, and settings are stored locally on your iPhone.
• Screen Time data stays on your device — always. We cannot see which apps you block or use, and this information is never transmitted to us or anyone else, and is never used for advertising.
• An account is optional for the core experience. If you sign in with Apple, we store your account identifier, optionally your name, and a backup of your fact collection and quiz history so it can be restored across devices.
• If you subscribe to Bauble Premium, Apple processes the payment. We receive subscription status information from Apple (such as product and expiration date) so we can unlock premium features. We never receive your payment card details.
• If you use the optional feedback board, it is hosted by a third party (Featurebase), and posts you make there are public. Signing in first attaches your profile name to your posts; you can also use it without signing in.
• We look at synced data only in aggregate (for example, which fact packs are hardest) to improve the app. There is no tracking SDK, no advertising ID, and no per-user profiling.
• You can delete your account and all associated server data at any time, directly in the app.

2. Information stored only on your device

The following information is created and stored locally on your device and is never transmitted to us or to any third party:

• Blocked app selections. Your choice of apps and categories to block is stored using Apple's Family Controls framework as an opaque token. Apple's framework intentionally does not reveal the names or identities of the selected apps to us — we could not read this information even if we wanted to.
• Blocked website selections. Websites you choose to block — whether picked through Apple's picker (stored as the same kind of opaque token) or typed in as a website address — are stored on your device and used only to configure iOS's own website blocking and web content filter.
• Blocking schedules and pause state. Your weekly blocking schedule and whether blocking is paused.
• Focus sessions and timers. Records of focus/timer sessions are device-specific and are not synced.
• Imported flashcard decks. If you import an Anki (.apkg) deck, its contents are processed and stored entirely on your device. Deck contents are never uploaded.
• Spaced-repetition study data. Card schedules and review logs for flashcard study.
• App settings. Unlock duration, appearance preferences, and similar configuration.

If you never sign in, everything in Section 3 below also stays on your device only.

3. Information collected when you create an account

Signing in is optional. If you choose to sign in with Apple, we collect and store the following on our servers:

3.1 Account information

• Account identifier. A unique identifier issued when you sign in with Apple, used to associate your data with your account.
• Email address. Provided through Sign in with Apple. If you use Apple's "Hide My Email" feature, we receive only the private relay address Apple generates, not your real email address.
• Name (optional). Apple provides your name only on your very first sign-in, and only if you choose to share it. You may edit or remove the name on your profile at any time in the app.

3.2 Collection sync data

So that your progress can be backed up and restored across devices, we store:

• Which facts you have collected, when you first collected each one, and its fact number.
• Your quiz attempt history: which fact was attempted, when, and whether the answer was correct.

This data contains no free-form personal content — it consists of references to the app's own content items, timestamps, and true/false results.

3.3 Subscription data (Bauble Premium)

If you purchase a subscription, Apple processes the payment. We never receive or store your payment card number, billing address, or bank details. To determine whether your account has premium access, we receive and store from Apple:

• Transaction identifiers and product identifiers (e.g., monthly vs. yearly plan);
• Purchase, renewal, expiration, and (if applicable) revocation dates;
• Subscription status (active, in grace period, expired, or revoked), auto-renew state, offer/trial information, and purchase environment;
• The signed transaction records Apple provides, retained for verification and auditing.

Purchases are linked to your account using an anonymous token so that your subscription can be restored on any device where you sign in.

3.4 Feedback you choose to submit

The app includes an optional feedback board (feature requests and changelog) hosted by Featurebase, a third-party service, displayed inside the app as a web page.

• Posts on the feedback board are public. Anything you post (titles, descriptions, comments, votes) can be seen by other users of the board. Do not post information you want to keep private.
• If you are signed in to Bauble when you open the board, we sign you in to Featurebase automatically. This shares your account identifier, your email address (only if one is associated with your account — a Hide My Email relay address if you used that feature), and your profile display name with Featurebase, so your posts carry your identity.
• If you are not signed in, the board opens without any Bauble identity attached.
• As a web page, the board may set cookies and collect the usage data described in Featurebase's own privacy policy (https://help.featurebase.app/articles/4744036-privacy-policy). Posts you make on the board are not deleted automatically when you delete your Bauble account; contact us if you want them removed.

3.5 Support and diagnostics

• Support email. If you email us, we receive your email address and the contents of your message, and retain the correspondence as long as needed to handle your request.
• Apple diagnostics. The app contains no crash-reporting or analytics SDKs. If you have opted in (in iOS Settings) to share diagnostics with app developers, Apple may provide us crash reports and aggregated usage statistics through App Store Connect; these are not linked to your Bauble account.

4. Screen Time and Family Controls disclosure

Bauble uses Apple's Family Controls, Managed Settings, and Device Activity frameworks to block apps and websites you select, on schedules you set.

• All Screen Time–related data remains on your device.
• We do not collect, transmit, or store information about which apps you block, which apps or websites you use, or when you use them.
• The app can display a summary of your most-used apps. This is rendered by Apple's Device Activity Report framework inside a sandboxed extension that iOS prevents from transmitting data anywhere. The usage information it displays is visible to you on screen but never to us.
• Screen Time data is never used for advertising, marketing, or sale to third parties, and is never shared with third parties for any purpose.
• Bauble is a self-management tool: it blocks apps on the device it is installed on, at the direction of that device's user. It is not a surveillance or covert monitoring tool.

5. How we use your information

We use the information described above solely to:

• Create and maintain your account and authenticate you;
• Back up and restore your fact collection and quiz history across your devices;
• Verify and maintain your subscription entitlement and deliver premium features;
• Understand, in aggregate only, how the service is used — for example, how many accounts are active, which fact packs are attempted most, and which quiz questions are answered incorrectly most often — so we can improve content and features. These statistics are computed on our servers from the synced data described in Section 3 only; they involve no additional tracking, no third-party analytics SDKs, and no advertising identifiers, and the aggregate outputs are not accessible from the app;
• Operate the optional feedback board and sign you in to it (Section 3.4);
• Respond to support requests you send us;
• Maintain the security and integrity of our service, including fraud prevention for purchases;
• Comply with legal obligations.

We do not use your information for advertising, profiling, or automated decision-making that produces legal or similarly significant effects. We do not sell or rent personal information to anyone, and we do not "share" personal information for cross-context behavioral advertising as defined under California law.

Legal bases (for users in the EEA, UK, and similar jurisdictions): we process account and sync data to perform our contract with you (providing the service you signed up for); subscription records to perform our contract and to comply with legal and accounting obligations; aggregate usage statistics and security-related processing under our legitimate interest in improving and protecting the service; and feedback-board sign-in to perform our contract when you choose to use that feature. Where consent is the applicable basis, you may withdraw it at any time.

6. Third-party service providers

We use a small number of service providers ("processors") to operate Bauble. We do not allow them to use your data for their own purposes.

• Supabase (database, authentication, and serverless functions). Account, profile, collection sync, and subscription entitlement data described in Section 3 is stored in our Supabase-hosted database, protected by row-level security so that each account can only access its own data. Supabase's privacy practices are described at https://supabase.com/privacy.
• Apple Inc. Sign in with Apple (authentication) and the App Store (payments and subscription management). Apple acts as an independent controller of the data it processes for payments and its own services. Apple's privacy policy is available at https://www.apple.com/legal/privacy/.
• Featurebase (optional feedback board). If you use the feedback board, Featurebase hosts it and processes the data described in Section 3.4. Featurebase's privacy policy is available at https://help.featurebase.app/articles/4744036-privacy-policy.

We may disclose information if required to do so by law, regulation, legal process, or enforceable governmental request, or where reasonably necessary to protect the rights, safety, or property of our users, ourselves, or the public.

If Bauble is ever involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we will notify you (for example, via an app update notice or our website) before your information becomes subject to a different privacy policy.

7. Data retention

• Local data remains on your device until you delete it in the app or uninstall the app.
• Account, profile, and sync data is retained while your account exists and is deleted when you delete your account (Section 8).
• Subscription records are retained while your account exists; after account deletion, transaction ledger entries are disassociated from your identity and retained only as required for financial auditing, fraud prevention, and legal compliance.
• Support correspondence is retained as long as needed to handle your request and for a reasonable period afterward.
• Feedback board posts are hosted by Featurebase and are not deleted automatically when you delete your account (Section 3.4); contact us to have them removed.
• Backups of our database may persist for a limited period after deletion before being overwritten in the ordinary course of operations.

8. Account deletion and your rights

You can delete your account at any time directly in the app (Profile → Delete Account). Deleting your account permanently removes your profile, email association, name, collection sync data, and quiz history from our servers. This action cannot be undone. Data stored locally on your device is unaffected and remains under your control.

Depending on where you live, you may also have some or all of the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you;
• Correction — request that inaccurate information be corrected (your profile name can be edited in the app);
• Deletion — request deletion of your personal information (available in-app, as above);
• Portability — receive your data in a structured, commonly used, machine-readable format;
• Objection / restriction — object to or request restriction of certain processing;
• Withdraw consent — where processing is based on consent;
• Non-discrimination — we will never discriminate against you for exercising your privacy rights.

To exercise any of these rights, use the in-app controls or contact us at the address in Section 13. We will verify your request using your signed-in account and respond within the timeframe required by applicable law. If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority. Authorized agents may submit requests on your behalf where permitted by law, subject to verification.

We do not sell personal information and have not done so. Because we do not sell or share personal information for behavioral advertising, no "Do Not Sell or Share" opt-out is necessary; we also do not process sensitive personal information beyond what is strictly necessary to provide the service. Bauble does not currently respond to browser "Do Not Track" signals because the app does not track users across apps or websites — there is nothing to opt out of. Where required by law (including under Global Privacy Control for applicable web properties), we honor recognized opt-out preference signals.

9. International data transfers

Our servers are operated by Supabase and may be located outside your country of residence. Where personal data of users in the EEA, UK, or Switzerland is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (which Supabase incorporates into its data processing terms) and equivalent mechanisms recognized under applicable law.

10. Security

We take reasonable technical and organizational measures appropriate to the sensitivity of the data we handle, including:

• Encryption in transit (TLS/HTTPS) for all communication between the app and our servers;
• Encryption at rest for our hosted database;
• Row-level security policies ensuring each account can read and write only its own records;
• Server-side verification of all purchase records directly against Apple's signed transactions — clients cannot write subscription state;
• Least-privilege access: subscription records are written exclusively by our server-side functions, never by app clients.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

11. Children's privacy

Bauble is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children. Sign in with Apple and subscriptions require an Apple ID that satisfies Apple's own age requirements. If you believe a child has provided us personal information, contact us and we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective date" at the top will always reflect the current version. For material changes, we will provide reasonable notice (for example, in the app or on this page) before the changes take effect. Your continued use of Bauble after changes become effective constitutes acceptance of the updated policy. We encourage you to review this page periodically.

13. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information:

Email: bauble.the.app@gmail.com

We will respond as promptly as we can, and in any event within the time required by applicable law.