Privacy Policy — Stay Offline

The short version: Stay Offline exists to get you off your phone, not to harvest your data. The app works without a sign-up, your journey photos are private by default, your Screen Time usage is processed by Apple on your device and never sent to us, and we never sell data or show ads.

This Privacy Policy explains how the Stay Offline mobile app (“Stay Offline,” “we,” “us”) handles information when you use it. By using Stay Offline you agree to this policy.

1. Who we are

Stay Offline is built and operated by Melih Toksari under the Nadril brand. Contact: [email protected].

2. What we collect

Account. The app is guest-first: on first launch it creates an anonymous account with a random identifier — no email, no name, no password. If you later sign in with Apple or Google (needed for friends, circles, or carrying your data to a new phone), we receive your sign-in identifier and, depending on what you choose to share, your name and email address. Signing in upgrades the same account; your streak and journey carry over.

Profile. The display name you enter and the illustrated avatar you pick. No selfies or profile photos are used.

Activity data. The offline sessions you log: the activity, its duration, timestamps, and your streak and challenge progress.

Journey stories and photos. The notes and photos you attach to your journey. They are private by default, encrypted in transit, and access-controlled so that only your account can read them. There is no public feed.

Friends and circles. If you add friends, we store the connection and the nudges you exchange. Friends see your current streak and your offline hours for the week — never your stories, your photos, or anything about your screen time. Circles pool members’ offline hours toward a shared weekly goal; members of a circle see each other’s contribution to it.

Purchases. Subscription status is managed by RevenueCat and the App Store. We never see your payment details; Apple processes every payment.

Analytics. Anonymised product analytics through PostHog — which screens are used, where people drop off — so we can improve the app. No advertising SDKs, no cross-app tracking, no data sales.

3. Screen Time — on your device only

If you turn on the optional Screen Time promise, Apple’s Screen Time frameworks (FamilyControls and DeviceActivity) do all of the work on your iPhone. By Apple’s design we cannot read which apps you selected or how long you used them; the app receives only an opaque selection token and a simple signal that says whether your daily promise was kept. Nothing about your usage is uploaded. You can use every part of Stay Offline without granting this permission.

4. Permissions we ask for

• Camera and photo library — only to attach a photo to a journey memory or to save your share card. Access happens when you initiate it, never in the background.
• Notifications — the reminders you schedule and the gentle nudges friends send. Optional; the app works without them.
• Screen Time — optional, see section 3.

5. How we use data

To provide the app (sessions, streaks, journey, friends and circles), process your subscription, send the notifications you asked for, and improve the product through aggregated analytics. Under the GDPR our legal bases are performance of a contract, legitimate interest in improving the product, and your consent for the optional permissions.

6. Where data lives and for how long

Your data is stored with our backend provider, Supabase, on cloud infrastructure protected by row-level security, so that each account can only reach its own data. We keep your data while your account exists. Deleting your account removes your server-side data — sessions, stories, photos, friendships and circle memberships — within 30 days. Purchase records stay with Apple under its own policies.

7. Your rights

You can access, correct, export, or delete your data at any time. Delete your account in Settings → Delete account, or email us and we will do it for you. If you are in the EU or UK you have the GDPR rights of access, rectification, erasure, portability and objection, and the right to complain to a supervisory authority; California residents have the equivalent CCPA rights. We honour them for everyone — email [email protected].

8. Children

Stay Offline is not directed at children under 13, or under the minimum digital-consent age in your country. We do not knowingly collect data from children.

9. Who we share data with

Only the processors that run the app: Supabase (backend and storage), RevenueCat (subscriptions), PostHog (product analytics), and Apple (payments and push notifications). We never sell personal data and never share it for advertising.

10. Changes

When this policy materially changes we update this page and the date at the top, and note the change in the app’s release notes.