Privacy Policy

The short version. PhonePact helps you use your phone less, with support from a small circle you choose. We keep the data we collect small and we never sell it. Your circle only ever sees a simple duration check-in (for example, “reached 2h today”) — never the apps you use, the websites you visit, or your browsing history. You can ask us to access or delete your data at any time.

This Privacy Policy explains how PhonePact LLC (“PhonePact,” “we,” “us,” or “our”) collects, uses, and shares information when you use the PhonePact mobile application (the “App”) and related services. We are the “data controller” (GDPR) and “business” (CCPA/CPRA) responsible for your information.

1. Information we collect

Information you give us

• Your name and email address — to create and secure your account (via Firebase Authentication) and identify you to your circle.
• Profile photo (if you add one) — shown to members of your circle as your avatar.
• Your hand-drawn signature — saved to personalize your “Phone Pact.” We treat this as sensitive personal information and store it only for that purpose.
• Your pact answers & goals — the intentions and settings you enter during onboarding, used to set up your pact and personalize the App.
• Circle & membership data — the circles you create or join and who is in them.
• Room messages — short messages you send in a circle’s room. These automatically disappear after 24 hours.

Screen Time information

With your permission, PhonePact uses Apple’s Screen Time / Family Controls / Device Activity features to measure your overall phone-usage duration. This usage data stays on your device. We do not receive the names of apps you use, the websites you visit, or your browsing history. Only a duration “check-in” (for example, “reached 2h today”) is shared with your circle, and only when you reach a point you set.

Information collected automatically

• Push notification token — via Firebase Cloud Messaging, so we can send the private prompts and check-ins you enable.
• Diagnostics & crash data — via Firebase Crashlytics, to find and fix bugs. This may include device model, operating-system version, and technical details about a crash.
• Basic device & log data — such as app version and general device information used to operate and secure the service.

Purchases

Subscriptions are sold through Apple’s In-App Purchase. Apple processes your payment — we never see or store your credit-card or payment details. We receive only your subscription status (for example, active, trial, or expired) so we can unlock features.

2. How we use your information

• To provide, operate, and maintain the App and your pact.
• To enable your circle features — check-ins, the room, and change requests.
• To send the notifications and prompts you turn on.
• To keep the service secure and prevent abuse.
• To diagnose problems and improve the App.
• To comply with law and enforce our Terms of Use.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. PhonePact contains no advertising SDKs and does not track you across other companies’ apps or websites.

Legal bases (for EU/UK users)

• Performance of a contract — to give you the App and features you sign up for.
• Consent — for Screen Time access and push notifications (you can withdraw this in your device settings at any time).
• Legitimate interests — to secure, maintain, and improve the service.
• Legal obligation — where we must retain or disclose data by law.

3. How we share information

• With your circle — your name, avatar, pact point, presence, duration check-ins, and any room messages you send are visible to members of the circle you choose. This is the core purpose of the App.
• With service providers — Google (Firebase Authentication, Cloud Firestore, Cloud Messaging, and Crashlytics) processes data on our behalf as a “data processor,” and Apple provides In-App Purchases, Sign in with Apple, and Screen Time features. RevenueCat manages subscription state on our behalf; it receives your account identifier and your purchase status, and never receives your screen-time data. See Firebase’s privacy information, RevenueCat’s Privacy Policy, and Apple’s Privacy Policy.
• For legal reasons — if required by law, or to protect the rights, safety, or property of our users or us.
• Business transfers — if we are involved in a merger, acquisition, or sale of assets, your information may be transferred, subject to this Policy.

4. Data retention

• Room messages — automatically deleted after 24 hours.
• Account & profile data (name, email, photo, signature, pact settings, circles) — kept while your account is active, and deleted when you delete your account, subject to any short backup or legal-retention period.
• Diagnostics — retained by Crashlytics for a limited period per Google’s defaults.

5. Your choices and rights

• Access, correct, or delete your personal information.
• Delete your account and all associated data from within the App, under You → Your Profile → Delete account. You can also email us to request deletion.
• Turn off Screen Time access and notifications in your iOS Settings at any time.

EU/UK (GDPR): you also have the right to portability, to object to or restrict processing, to withdraw consent, and to lodge a complaint with your local data-protection authority.

California (CCPA/CPRA): you have the right to know, access, correct, and delete your personal information, to opt out of “sale”/“sharing” (we do neither), to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights.

To exercise any right, email info@getphonepact.com. We will respond within the time required by applicable law.

6. Children’s privacy

PhonePact is intended for people 13 years of age and older, and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, contact info@getphonepact.com and we will delete it.

7. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls on our Firebase backend. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

8. International users

We are based in the United States and process data in the United States. If you use PhonePact from outside the U.S., you understand your information will be transferred to and processed in the U.S., where data-protection laws may differ from those in your country. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.

9. Changes to this Policy

We may update this Policy from time to time. We will post the new version here and update the “Last updated” date, and, for material changes, provide additional notice in the App.

10. Our website and waitlist

This Policy also covers getphonepact.com. If you join our waitlist or send feedback on the website, we collect the email address you submit (and, only if you opt in to SMS updates, your mobile number and consent) along with any message you send. These submissions are processed on our behalf by Google Apps Script, which records them to a Google Sheet; if your browser has JavaScript disabled, the waitlist form falls back to Formspree, which processes that submission instead. Google Fonts may receive basic request information when your browser loads the site’s fonts. We use this only to manage the waitlist, send updates you asked for, and respond to you — never for advertising, and we never sell it. You can unsubscribe from emails at any time, and reply STOP to opt out of SMS. To access or delete anything you submitted on the website, email info@getphonepact.com.

11. Contact us

PhonePact LLC
Email: info@getphonepact.com