Privacy Policy

Effective 11 November 2026. Applies to the Scroll Quest iOS app and scrollquest.app.

Scroll Quest is made by Zac Rubin, trading as Scroll Quest. It puts a short task between you and the apps you choose to slow down. This policy explains what the app collects, what never leaves your phone, who processes the data and how to delete it. Questions go to support@scrollquest.app.

The short version

We cannot see which apps you block, what you do inside them, or your screen. Apple's Screen Time framework hands the app opaque tokens that never leave your device.
The app works without an account. On first launch it creates an anonymous account so your progress can sync; you can attach Sign in with Apple later or never.
We store your puzzles, streaks, chosen topics, the names you give your app groups and your subscription status. Nothing is sold, shared for advertising or used to track you across other apps.
Delete everything with one tap in Settings. It completes immediately.

What stays on your phone

The apps and categories you selected. Apple provides these as opaque tokens stored only in the app's protected container on your device.
The complete history of every task you have seen, including the free puzzle library.
Your blocking rules and schedules, applied locally by the Screen Time extensions, which never connect to the internet.

What we collect and why

Data	Why
An anonymous account identifier created on first launch; if you use Sign in with Apple, the identifier Apple provides and, if you choose to share it, your email address (Apple's Hide My Email works)	To keep your progress attached to you and restore it on a new phone
A per-install device identifier (Apple's vendor identifier), platform and app version	To tell your devices apart during sync and to diagnose problems
The names you type for your app groups and their rules	So your rules follow you to a new device. The apps inside a group are never included
Task events: when a task was shown, completed, failed, skipped or bypassed, how long it took, the kind of task and the ids of the learning items involved	Streaks, statistics and spaced repetition scheduling
The topics and languages you choose, and your learning progress on each item	To build and sync your learning content
Subscription status (plan, trial, renewal and expiry dates) received from RevenueCat	To unlock Premium. Apple handles payment; we never see your card
Referral codes you enter or share, and which referral led to a subscription	To run the referral programme and pay commissions
Feedback you send from inside the app: your message, an optional contact email and diagnostics about Scroll Quest itself (app version, device model, iOS version, recent app log lines). Diagnostics never include app names, group names or Screen Time data	To answer you and fix bugs
Launch notifications: the email address you enter on scrollquest.app, with your browser's language and user agent, and a one-way hash of your IP address (never the address itself) to stop abuse	To send one email when the app launches. Stored until that email is sent or you ask us to remove it, and never shared. To remove it, email support@scrollquest.app

What we never collect

Which apps you blocked or opened, or anything about your use of other apps.
Your screen, keyboard input in other apps, contacts, photos, location or health data.
Advertising identifiers. The app does not show ads and does not request App Tracking Transparency because it does not track.

Who processes the data

We use a small number of service providers under contract. Each receives only what it needs.

Provider	Role
Supabase	Hosts the database, file storage and server functions. Data is stored in Supabase's Sydney, Australia region
Apple	App Store payments, Sign in with Apple and push notifications. Apple's own privacy policy applies to those services
RevenueCat	Subscription management. Receives your anonymous account identifier and purchase receipts from Apple
Anthropic	Generates Premium learning content on request. It receives the topic, language and level you asked for, never your identity or any other personal data

If we add a crash-reporting or analytics provider, this page will be updated first and the data sent will be limited to Scroll Quest's own events and errors.

Retention and deletion

Account data is kept while your account exists.
A launch-notification address is deleted once the launch email has been sent, or sooner if you email support@scrollquest.app. It is not linked to any app account.
Settings in the app has a Delete account button. It removes your account, devices, groups, task events, topics, progress, feedback and referral links immediately, and asks RevenueCat to delete its record of you. Encrypted backups expire within 30 days.
Deleting your account does not cancel an App Store subscription. Cancel it in iOS Settings under your Apple ID, then Subscriptions.
Content packs are shared between users who request the same topic and are not personal data. Referral commission records are kept as long as required for accounting.

Your rights

You can access, correct, export or delete your data at any time. Most of this is in the app; for anything else email support@scrollquest.app and we will respond within 30 days. If you are in the EU, UK or another region with data protection law, you also have the right to complain to your local supervisory authority. Our legal basis for processing is performing the service you asked for and, for feedback and referrals, your consent.

Children

Scroll Quest is for people managing their own screen time and is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has created an account, email us and we will delete it.

Security

Data in transit is encrypted with TLS. Every database table is protected by row-level access rules so an account can only ever read its own rows. Server secrets never ship inside the app.

Changes

When this policy changes, the new version is posted here with a new effective date. Material changes are also announced in the app.