App Privacy Policy

Last updated: August 6, 2026

This Privacy Policy explains how Ryzlo handles information when you use the Ryzlo iOS app, including its widgets, Live Activities, Screen Time blocking features, an optional account with cloud sync, subscriptions, and optional Apple services.

This policy covers the app only. The Ryzlo website at ryzlo.net is a separate matter. It has its own waitlist, contact form, and cookieless visitor statistics, none of which touch your app data. Those are described in the Website Privacy Notice.

Summary

• Ryzlo operates its own backend, hosted on Supabase, for optional account sync and for product analytics. No data is sold, and no third-party analytics, advertising, or tracking SDK is used.
• Ryzlo does not track you across apps or websites owned by other companies. No App Tracking Transparency prompt is shown, because none is required.
• Screen Time selections and usage figures never leave your device.
• Most other app data is stored on your device. If you sign in, your account, session history, and progress are additionally synced to Ryzlo's own backend.
• Apple may process information when you use Apple services such as Sign in with Apple, StoreKit purchases, Game Center, notifications, and Screen Time permissions.

Account and Sync

Signing in with Apple is optional. Ryzlo is fully usable signed out, with everything kept on your device. If you choose to sign in, the following is synced to Ryzlo's own backend, hosted on Supabase, so your progress survives a reinstall or carries over to a new device:

• Profile: your Apple-provided user identifier, display name, and email address (this may be an Apple private relay address).
• Focus session history: start time, duration, mode name, whether a session completed, whether it was ended early and the reason you chose, and the reflection answers you give at the resistance checkpoint.
• Progress: streak, shields, total and rolling reclaimed minutes, and weekly totals.
• Scheduled blocks and preferences, and a record of your currently active session, used to mirror that session to a paired computer.
• Registered devices, including any paired browser device.

Analytics

Ryzlo records how people move through its subscription paywall, so we can understand which features people actually subscribe for. This is collected whether or not you're signed in, and it stays inside Ryzlo's own backend, never a third-party analytics, advertising, or tracking SDK.

• A random identifier generated on your device when you install the app. It is not derived from your Apple ID or any device identifier, and it never leaves Ryzlo's backend.
• Product interaction events: which paywall screen was shown, which plan you selected, and the outcome of a purchase attempt.
• If you later sign in, your install identifier and your account identifier appear on the same records, so from that point on this analytics data is linked to your account.
• Analytics never include message content, session names, or the identity of any app you've blocked.

Subscriptions and Purchases

Purchases are processed by Apple through StoreKit. Ryzlo never sees your payment details.

Apple sends Ryzlo server notifications about subscription events, such as a purchase, renewal, cancellation, billing issue, or refund. Ryzlo stores these as a purchase history record, so the app can unlock the right features and our subscription records stay accurate.

Purchase history is the one exception to account deletion. If you delete your Ryzlo account, this record is kept, with your account identity removed, so subscription revenue stays reconcilable with Apple. Every other piece of your account data is deleted.

Screen Time and Blocking

This part is genuinely private. Ryzlo uses Apple's Screen Time (Family Controls) framework, which only ever gives the app opaque tokens for the apps and categories you select. Ryzlo cannot see the names of those apps, and it never learns which apps you actually use.

Those tokens, and any per-app usage figures, are stored only on your device, in the app's shared app group container. They are never uploaded anywhere, including to Ryzlo's own backend.

You can revoke Screen Time authorization at any time in iOS Settings.

Browser Pairing

If you use the Ryzlo Chrome extension, you can pair it to your phone by scanning a QR code with your camera. The camera is used only to read that pairing code. Ryzlo does not store or transmit any photo or video.

Once paired, session start and stop signals are relayed through Ryzlo's backend so the extension knows when to block sites during a session. You can revoke a pairing from inside the app at any time.

Game Center

If you connect Game Center, Ryzlo submits your total reclaimed minutes to a leaderboard operated by Apple, alongside your Game Center display name. This is governed by Apple's own privacy policy.

Notifications

All notifications are local and scheduled on your device. Nothing is sent through a push server. This covers focus reminders, streak protection, trial-ending reminders, and at most one promotional offer reminder, which has its own opt-out toggle in the app's notification settings.

How Information Is Used

Ryzlo uses the information above for two things: making the app work, and understanding the subscription paywall.

• running focus timers, blocking sessions, schedules, habits, widgets, and Live Activities;
• showing statistics, streaks, achievements, insights, and weekly reports;
• syncing and restoring your account across launches, reinstalls, and devices;
• unlocking subscription features and restoring purchases through Apple StoreKit;
• understanding paywall performance, through the analytics described above;
• supporting optional Game Center and browser-pairing features; and
• responding to support, privacy, or deletion requests you send.

Storage and Sharing

Data you create while signed out, and Screen Time selections regardless of sign-in state, stays on your device, using local storage, SwiftData, UserDefaults, and an app group container shared by the main app, widgets, Live Activities, and extensions.

When you're signed in, the account, session, progress, and analytics data described above is stored on Ryzlo's own backend, hosted on Supabase. Ryzlo does not sell or rent this information, and does not share it with any third-party analytics, advertising, or tracking service.

Information may also be processed by Apple when you use Apple platform services, including iCloud device backups, Sign in with Apple, StoreKit, Game Center, notifications, and Screen Time frameworks, subject to Apple's own privacy terms.

For completeness: the ryzlo.net website records cookieless, aggregate page statistics, and stores an email address if you join the launch waitlist. That's website data, never app data. The two are never joined, and nothing you do in the app is visible to the website. See the Website Privacy Notice.

Tracking and Advertising

Ryzlo does not use your data to track you across apps or websites owned by other companies, and does not include any third-party advertising network or ad-measurement SDK. No App Tracking Transparency prompt is shown, because Ryzlo doesn't do anything that requires one.

What Ryzlo Does Not Collect

Ryzlo does not collect your health data, location, contacts, browsing history, search history, sensitive information, or financial information.

Matching Our App Store Privacy Label

Apple requires every app to publish a privacy label. Ryzlo's covers six data types, all linked to your account, none used for tracking:

• Name — App Functionality
• Email Address — App Functionality
• User ID — App Functionality, Analytics
• Device ID — Analytics. This is the random per-install identifier described above, not Apple's advertising or vendor identifier.
• Purchase History — App Functionality, Analytics
• Product Interaction — Analytics

Permissions

Ryzlo asks for permissions only when a feature needs them:

• Screen Time / Family Controls: to block selected apps and categories during focus sessions or scheduled blocks.
• Notifications: for reminders, alerts, and streak protection warnings.
• Camera: to scan a QR code when pairing the Chrome extension. Used only for that; no photo or video is stored.
• Game Center: for leaderboard participation, if you choose to use it.
• Sign in with Apple: for an optional account with cloud sync.

You can manage app permissions in the iOS Settings app, and sign out of your account inside Ryzlo at any time.

Data Retention and Deletion

Ryzlo has an in-app Delete Account flow. Using it permanently removes your account, session history, progress, preferences, schedules, and device and pairing records from Ryzlo's backend.

The one exception is purchase history: as described above, that record is kept with your account identity removed, so subscription revenue stays reconcilable with Apple. It's kept indefinitely, for financial record-keeping. Everything else is deleted.

If you're signed out, your data lives only on your device, and you can remove it at any time by deleting app data, resetting the app, or uninstalling it. Signed-in account data is otherwise kept for as long as your account exists. Some Apple service records, such as purchases or Game Center activity, are managed by Apple.

To request help with privacy or deletion, contact the developer using the contact information below.

Children's Privacy

Ryzlo is not intended to knowingly collect personal information from children. If you believe a child has provided personal information through Ryzlo, contact the developer so the issue can be reviewed.

International Users

Ryzlo may be available in different countries and regions. Apple platform services may process information according to Apple's terms and the settings on your Apple Account and device.

Changes to This Policy

This Privacy Policy may be updated from time to time. Updates will be posted on this page with a new "Last updated" date.

Your Rights

If you are in the UK or the EU, you have the right to ask for a copy of any personal data we hold about you, to have it corrected or deleted, and to object to or restrict how it's used. If you're signed in, the in-app Delete Account flow handles most of this directly; if you're signed out, your data lives only on your device. Either way, you can always ask us, and we'll get back to you as quickly as we can, within one month at the latest.

If you think we have handled your data badly, you can complain to the UK's Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.

Contact

For privacy questions, data requests, or deletion requests, email ryzloapp@gmail.com. You can also raise non-private issues on the Ryzlo GitHub repository.