Privacy policy.

Last updated: October 5, 2026

Refund ("the app", "we", "us") is a personal phone-overuse tool built by Sirru Studio. This policy explains what data the app and this website touch, why, and where it goes.

Data the app uses

Refund asks for the following only to make specific features work. Each is used entirely on your device.

Screen Time (Family Controls)

Refund uses Apple's Screen Time framework to notice when you open apps you've chosen to watch, and to show a pause screen. The list of apps you choose and your use of them is handled on your device by Apple's framework and stored locally. Refund never sees the names of your apps as readable data, and this information is never sent anywhere.

Health (step count)

If you choose to put an app group behind walking, Refund reads your step count from Apple Health only to check whether you've reached the step goal you set. This is read-only. Refund doesn't write anything to Health, and your step data never leaves your device. If you don't use walking to unlock, this data is never accessed.

Contacts

If you add connection contacts, Refund opens Apple's standard contact picker. Refund doesn't ask for access to your contacts and never reads your address book: the picker runs outside the app and returns only the one person you tap. That person's name and phone number are saved on your device. Your contacts are never uploaded or shared.

Camera, microphone and photos

Refund lets you record short video or photo notes to your future self, or choose a photo from your library. These are saved on your device and never uploaded. Only you see them, inside the app. If you turn on Face in Pause screens, Refund shows your front camera live on some pauses so you can see yourself. That view is never recorded, saved or sent.

Notifications

Refund uses notifications for nudges and reminders. They're optional: saying no doesn't break the app.

Feedback you choose to send

Refund has a Send feedback screen in Settings, and a "Something's broken" step when you cancel Refund Pro. If, and only if, you write a message on one of them and tap Send, that message goes to the developer and is stored in a private spreadsheet.

• Nothing is sent unless you tap Send. The screen never opens by itself, and there's no background reporting.
• Bug reports also include your app version, iOS version, screen size, how many app groups you have, which levels you use, and whether Screen Time access is on. This is to reproduce the problem you describe.
• If you switch on Attach app state on a bug report, it also includes how your groups and locks are set up: levels, hours, budgets, your settings switches, active blocks, and how many apps are locked. You can read all of it first under See what's sent. It's off unless you switch it on.
• Bug reports never include your pause history, your identity statement, your notes to self, your contacts, or the names of the apps you watch.
• The email field is optional. Leave it blank and your feedback is anonymous: we have no way to identify you. If you fill it in, it's used only to reply to you.
• Feedback is kept until it's been acted on. To have yours deleted, email us at the address below.

Subscriptions

If you subscribe to Refund Pro, Apple handles the purchase with the payment details on your Apple ID. Refund never sees your card. To check and unlock your subscription, Refund uses RevenueCat, a subscription service. RevenueCat receives a random ID created for this install, your purchase records from Apple (which plan, when it started, whether it renews), and basic device details such as your country, app version and iOS version. It never receives your name, email, groups, pause history or anything else you do in the app. If you never subscribe, only the random ID and device details are sent, so the app can check you're on the free plan.

Anonymous analytics

To learn whether the app is working for people, Refund sends a small set of anonymous events to PostHog, an analytics service, stored in the European Union. The events are: opening and closing the Refund Pro screen, picking a plan, tapping buy or restore and whether it worked, which setup screens you reached, finishing setup, creating your first app group (only its level), starting and finishing the walkthrough shown on your first group, and the steps of cancelling Refund Pro (the reason you pick from a fixed list of five, which of two price offers you were shown and whether you took it, and whether you turned on the one-month check-in). Each event carries a random ID created for this install and basic device details (device model, iOS version, app version, language, time zone). Your IP address is discarded. Events never include your name, identity statement, notes, contacts, the apps you watch, why you picked up your phone, or your pause history. We don't record your screen, and nothing is used for advertising or shared with anyone else.

App updates

Refund can get small fixes without a new App Store version, using Expo (the toolkit Refund is built with). Each time you open the app, it asks Expo's update server whether there's a newer version, and downloads it if there is. The request includes a random ID the update system creates for this install, which version and release of Refund you have, and that your phone runs iOS. If the app hit a serious error the last time it ran, it also includes a short technical description of that error, so a broken update can be spotted. Like any request over the internet, it carries your IP address. It never includes your name, groups, notes, pause history or anything you do in the app.

Where your data is stored

Everything Refund creates (your groups, settings, identity statement, notes, pause history) is stored on your device. Refund doesn't use any advertising network or cross-app tracking, and there's no account to sign in to. Apart from the details described above and feedback you choose to send, we have no way to access anything on your device.

Data deletion

Deleting Refund deletes your groups, settings, notes and pause history. iOS keeps one small record after the app is deleted, in your iPhone's Keychain: when Refund was first installed, which versions you've had, when Refund Pro first started, and how many times it's been reinstalled. Refund uses it to recognise a returning install. It never leaves your phone.

The only things we hold are feedback you chose to send and, if you joined it, the Android waitlist (below). To have either deleted, email us.

This website

sirrustudio.com is hosted by Cloudflare. It doesn't use cookies, ads or trackers.

Visiting the site

Like any website, our host receives your IP address and basic browser details when you load a page, to deliver it and to protect the site from attacks.

Prices for your country

On the pricing page, Cloudflare tells the site which country you're in (worked out from your IP address) so it can show your local prices. We don't store it.

Visitor counts

We count visits with Cloudflare Web Analytics. It doesn't use cookies, doesn't store anything on your device and doesn't follow you across other sites. It records the page you visited, the site that linked you here, your country, your browser, device type and operating system, and how quickly the page loaded.

Android waitlist

If you join the Android waitlist, we store your email address and the time you joined, in a database at Cloudflare. We use it only to email you when Refund is on Android, and we don't share it. It's kept until you ask us to remove it or the waitlist closes. To be removed, email us.

Children

Refund isn't directed at children under 13 and doesn't knowingly collect data from anyone.

Changes to this policy

If this policy changes, the new version will be posted here with a new "Last updated" date.

Contact

Questions about this policy or your privacy: sirrustudio@gmail.com