Privacy Policy

Automatic Screen Time reports stay on your device

Sandy uses your iPhone's Screen Time controls to lock apps and track your daily goal. Your automatic app-usage reports are processed and displayed on your device. Sandy does not upload those reports to our servers. If you manually enter a screen-time estimate or goal for an AI recommendation, that information is sent for processing as described below.

Data stored on your device

• Your app usage and screen-time history
• Which apps you chose to lock, and your locking rules and schedules
• Your daily screen-time goal and your streak
• Your onboarding answers (like your name and habits)

Sandy stores this information locally on your iPhone. Some onboarding answers, such as your goal, screen-time estimate and vulnerable time window, are also submitted when you request an AI recommendation. Deleting Sandy removes its files and preferences; credentials in iOS secure storage and records held by our servers or service providers follow the retention rules below.

What we do collect

We use third-party service providers for the purposes below. These categories describe the information we collect and the types of services we share it with.

• Product analytics: our analytics service receives screens used, features tapped, request outcomes and session replay recordings of app interactions, associated with an installation identifier. Replays can include text and other content visible on screen. Camera and photo screens are masked in these recordings. This helps us diagnose problems and understand what to improve.
• Crash and error reports: our diagnostic service receives technical diagnostics such as device model, iOS version and what the app was doing. AI error reports may include text you submitted, such as your goal, task or unlock conversation, and a manually entered screen-time estimate. Raw photo-proof images are excluded from these reports.
• Support feedback: when you tap Send in Settings → Feedback, we send your message, installation identifier and app/device context to our diagnostic service to receive and investigate your report. This happens before your email app opens, including if you later cancel the email. If you send the email, we also receive your message and sender address through our email service.
• Notification identifiers: our notification service receives installation identifiers to manage notifications and, if you allow notifications, a token used to deliver them. You can manage notification permissions in iOS Settings.
• Purchase state: our subscription services receive subscription status and purchase identifiers to provide Pro access and restore purchases. Payments are processed through the App Store; we do not receive your payment-card details.
• AI inputs and photo proof: when you request an AI recommendation or unlock decision, we send the information needed for that request, such as your goal, manually entered screen-time estimate, time window or conversation, to our servers and external AI processing services. When you submit photo proof for an unlock or habit check, we send the image and your task description to verify whether the task was completed. This processing happens off-device. We do not save the submitted image in Sandy's server database or attach raw images to analytics event properties or crash reports. Screen recordings are handled separately as described above.
• Marketing attribution: when configured, our marketing measurement and advertising partners receive app activation, subscription events and device or app identifiers to measure which campaigns lead to installs and purchases. Access to your iPhone's advertising identifier requires your App Tracking Transparency permission. You can manage that permission in iOS Settings.

What we never do

• We do not sell your data. To anyone. Ever.
• We do not display third-party ads inside Sandy.
• We do not access your contacts, precise location, private messages or browsing history. Images you submit for photo proof are processed only as described above.

Data retention and deletion

Deleting Sandy removes its files and preferences. Installation and security identifiers and session credentials kept in iOS secure storage may remain after deletion. When Sandy detects a fresh installation on first launch, it assigns a new installation identifier and clears stale device-verification identifiers and session credentials before connecting to its service providers.

Submitted photo-proof images are processed for the verification request and are not saved in Sandy's server database. AI responses may be cached for one hour; expired cache entries are removed by scheduled cleanup. Completed AI unlock-request records are scheduled for deletion after 30 days. Minimal onboarding request records remain to enforce usage limits. Error diagnostics and feedback messages held by our diagnostic service may contain submitted text, as described above, and follow our diagnostic retention settings.

External AI processing services may retain request data under their own policies, including for abuse monitoring, security or legal obligations. Their retention may extend beyond the processing request. We do not promise immediate deletion by every service provider.

Analytics events, session replay recordings, diagnostics, support emails and attribution records are retained according to the applicable service settings and policies. To request deletion of data associated with your installation, including feedback messages sent to our diagnostic service or by email, email support@namiai.cloud. We will help identify the relevant records and process the request, subject to records needed for purchase, security or legal obligations. Deleting the app alone or canceling a feedback email does not delete a feedback report already submitted or other records held by service providers.

Children

Sandy is a self-control tool intended for users aged 13 and older and is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes

If we change this policy, we'll update this page and the date at the top. Meaningful changes will be called out in the app.

Contact

Questions about privacy? Email support@namiai.cloud.