Privacy Policy

Last updated: June 4, 2026

Cashrot (“Cashrot”, “we”, “us”, or “our”) provides an iOS app that helps you set screen-time guardrails and stay disciplined through financial friction. This Privacy Policy explains what information we collect, how we use it, how long we keep it, and what choices and rights you have.

This policy applies to the Cashrot iOS app and our website at cashrot.app (including support and contact pages). It does not cover third-party services you access through blocked apps or Apple’s own services, which are governed by their separate policies.

1. Who we are

For the purposes of applicable privacy law, Cashrot is the controller of personal information described in this policy. You can reach us at support@cashrot.app or through our contact form.

2. Information we collect

We collect only what we need to operate Cashrot, improve the product, and respond to you. We do not sell your personal information.

2.1 Information stored on your device (not sent to our servers)

• Screen Time / Family Controls data — To enforce limits you configure, Cashrot uses Apple’s Family Controls and Device Activity APIs. This includes the apps and categories you select, your limit settings, focus sessions, strict mode state, and related enforcement data. This information is stored locally on your iPhone and in your App Group container (group.com.bmutafov.cashrot.blocker) so the main app and system extensions can work together. We do not receive a list of your installed apps, your browsing activity inside blocked apps, or your Screen Time history on our servers.
• On-device preferences — Settings and onboarding choices you make in the app are stored locally unless otherwise stated.

2.2 Purchase and transaction data

• Unlock and bypass purchases are processed entirely by Apple through StoreKit. Apple collects payment and billing information linked to your Apple ID. We do not receive your payment card number, bank account details, or Apple ID credentials.
• We may receive transaction identifiers and purchase validation data from Apple or StoreKit on your device to confirm that a bypass purchase was completed before delivering the digital unlock.

2.3 Usage and product analytics

In production builds, we use PostHog to understand how the app is used and to improve features. PostHog may collect pseudonymous identifiers, app version, platform, screen views, button interactions, and product events such as onboarding progress, purchase attempts, unlock outcomes, and focus or limitation actions. We do not use analytics to collect the content of your blocked apps or your Screen Time history.

Analytics are disabled in local development builds. We do not use analytics for cross-app advertising or to sell your data.

2.4 Support and contact information

• If you email us or submit our contact form (hosted by Tally), we receive the information you provide, such as your name, email address, and message content, so we can respond.

2.5 Information we do not collect

• Payment card numbers or bank account details
• Passwords or Apple ID credentials
• Contents of apps you use while blocked or unlocked
• Precise location data
• Contacts, photos, microphone, or camera data

3. How we use information

We use information to:

• Operate the app, including enforcing limits and delivering paid unlocks
• Validate in-app purchases through Apple/StoreKit
• Improve reliability, usability, and product decisions through analytics
• Respond to support requests and communicate with you
• Comply with legal obligations and protect our rights

4. Legal basis for processing (EEA, UK, and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal information on the following bases:

• Contract — to provide the Service you request, including processing unlock purchases and operating guardrails you configure.
• Legitimate interests — to secure, maintain, and improve Cashrot, understand product usage through analytics, and prevent misuse, balanced against your rights.
• Consent — where required for optional permissions or communications, such as Screen Time authorization through iOS or when you choose to contact us.
• Legal obligation — where we must retain or disclose information to comply with law.

5. How we share information

We do not sell or rent your personal information. We share information only in these situations:

• Service providers — with vendors that help us run Cashrot under contractual obligations to protect your data, including:
  • Apple — App Store, StoreKit, and iOS platform services
  • PostHog — product analytics
  • Tally — contact form hosting
• Legal and safety — if required by law, court order, or to protect rights, safety, and security.
• Business transfers — in connection with a merger, acquisition, or asset sale, subject to this policy or equivalent protections.

6. International transfers

Cashrot is operated from outside your country. If you use the Service from the EEA, UK, or other regions with data transfer rules, your information may be processed in countries that may not provide the same level of protection as your home jurisdiction. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms offered by our service providers.

7. Data retention

• On-device limit and session data — retained on your device until you change or delete it, revoke permissions, or uninstall the app.
• Analytics data — retained according to PostHog’s configuration and our operational needs, typically in pseudonymous form.
• Support communications — retained as long as needed to resolve your request and for a reasonable period afterward for record-keeping, unless a longer period is required by law.
• Purchase records — payment records are retained by Apple under Apple’s policies; we retain only what is needed on device or in analytics to confirm purchase delivery.

8. Your choices and rights

8.1 In the app and on your device

• Revoke Screen Time / Family Controls permission in iOS Settings
• Delete limits, focus sessions, and other data stored in the app
• Uninstall Cashrot to remove locally stored app data

8.2 Privacy rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to certain processing of your personal information, and to data portability or withdrawal of consent where processing is based on consent.

To exercise these rights, contact us at support@cashrot.app. We may need to verify your request. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

8.3 California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, use, and disclose; to request deletion of personal information we hold about you; to correct inaccurate personal information; and to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.

To submit a request, email support@cashrot.app with the subject line “California Privacy Request”. We will not discriminate against you for exercising your privacy rights.

9. Security

We use reasonable technical and organizational measures to protect information we process. No method of transmission or storage is completely secure. Because most sensitive limit data stays on your device, keeping your iPhone and Apple ID secure is an important part of protecting your information.

10. Children’s privacy

Cashrot is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page and update the “Last updated” date. If changes are material, we may also notify you in the app or by other reasonable means. Continued use of Cashrot after the effective date means you accept the updated policy.

12. Contact

Questions: contact form or support@cashrot.app