This page describes how Window, the iOS app from BetterFeed, handles your data.
The short version
Window has no account. We don't know who you are. The apps you lock, the times you set, and your actual usage data all stay on your phone. Two small things leave the device: anonymous event counts so we know whether the app is being used, and your install date through iCloud so your day count survives reinstalling. Neither can be tied back to you.
What stays on your device
Everything Window needs to function lives on your iPhone.
The apps and websites you choose to lock are referenced via opaque "tokens" provided by Apple's Family Controls framework. We never see the actual app names, bundle IDs, or your browsing history. The tokens are meaningless outside your device.
The time of your daily window stays in local storage.
Your usage data (minutes used, pickup counts, the bars and totals shown in the Trends tab) is computed on-device from Apple's DeviceActivity framework. None of it is uploaded anywhere.
Your day count, your locked list, and the rest of your settings live in app storage on your phone.
We don't have a server that holds any of this. We can't access it. We can't sell it.
What leaves your device
Two things, and only these two.
Anonymous event counts (Aptabase)
We use Aptabase, a privacy-focused analytics service, to track app health. The events we send are counts of things like "app opened," "window started," "lock added." Each event is a number, not a record about you. There is no user ID, no IP-based fingerprint, no association with any other data we hold.
We use this to know whether people are actually using the app, whether features work end to end, and whether to keep building. We can't use it to identify you, because there's nothing to identify.
Aptabase's own privacy policy is at aptabase.com/legal/privacy.
Your install date (iCloud key-value store)
We mirror one piece of data, the date you first installed Window, to Apple's iCloud key-value store. This lets your day count survive uninstalling and reinstalling the app on the same Apple ID. Without it, every reinstall would reset your streak to zero.
This data lives in your own iCloud account. It never reaches a BetterFeed server. We can't read it. Apple's standard iCloud privacy applies.
What we never collect
We don't collect your name, email, phone number, or any identifier. We don't have any of those.
We don't have the names of the apps you lock. Apple only gives us opaque tokens.
We don't have your browsing history, contacts, photos, files, microphone, camera, or location.
We don't have anything that could identify you.
Children and minors
Window is designed for adults choosing to limit their own phone use. It is not designed as a parental-control tool. If a parent installs Window on a child's device, the same data rules apply, but Window is not the right product for that purpose.
Apple's role
Window uses Apple's Family Controls and DeviceActivity frameworks. Apple may have its own logging or data handling around those frameworks as part of iOS itself. We don't control what Apple does with system-level data; Apple's privacy policy at apple.com/legal/privacy applies.
Changes
If we change what data leaves the device, we'll update this page and call it out in the app's release notes. We won't silently add tracking.
Questions
Write to hello@getwindow.io. The contact page has more.