Twilock ("we," "us," or "the app") helps you stop doomscrolling during your chosen night and morning windows. We built Twilock to protect your attention, and we take the same care with your privacy. This policy explains what data the app handles, why, and the choices you have.
Our core principle: your Screen Time and app usage data never leaves your device. We do not sell your data, we do not use it for advertising, and we do not share it with data brokers.
Data that stays only on your device
Screen Time & app usage data. Twilock uses Apple's Family Controls / Screen Time framework to shield the apps you select during your no scroll windows. This usage data is processed entirely on your device and is never uploaded to us or anyone else. We cannot see which apps you use or how long you use them.
Your no scroll windows & app selection. The times you set and the apps you choose to shield are stored locally on your device.
Self reported check ins. Any sleep, energy, or mood ratings you enter are stored on your device only and are not uploaded.
Data stored to power accounts & the social features
These features are optional. Onboarding offers sign in, but includes a "Skip for now" option, creating an account is only actually required if you want to use the Friends tab. If you do sign in, we store the minimum needed, via our backend provider, Supabase:
Account. You can sign in with Sign in with Apple, Sign in with Google, or email/password. Depending on the method, this gives us your email address (or, with Apple, a private relay address if you choose to hide your email from us) and a unique account identifier, which our authentication provider, Supabase, stores to keep you signed in. If Apple or Google shares your name on first sign in, we store an editable display name too. We never see your Apple ID password, your Google password, or (for email sign in) your password in plain text, Supabase stores only a salted hash of it.
Profile & progress. To show you on your friends' leaderboard, we store your display name, invite code, current streak, and longest streak. We also sync a day by day record of your no scroll windows, the date, which window (night or morning), the outcome (clean, frozen, or violated), and your device's time zone, so your streak and history stay consistent across devices. We do not store which apps you shield, your raw app usage data, your check ins, or your earned badges on our servers, those stay on your device only.
Friends. Friend connections and pending friend requests you create (via invite codes) are stored so the social and leaderboard features work.
Product analytics
We use PostHog to understand how the app is used overall, for example how many people complete onboarding, which screens are visited, and whether a purchase was made. These events do not include which apps you shield, your Screen Time or app usage data, your check ins, or your no scroll window settings, all of which stay on your device as described above. Analytics events are tied to an anonymous identifier rather than your name or email, and we do not use them for advertising or share them with advertisers or data brokers.
Purchases
Subscriptions and the lifetime purchase are processed by Apple. We use RevenueCat to verify your purchase and manage your subscription status, this involves RevenueCat processing your purchase/transaction history to confirm your entitlement. We do not receive or store your payment card details; Apple handles all billing.
What we do NOT do
We do not sell or rent your personal data.
We do not use your Screen Time or usage data for advertising or advertising measurement, and we do not share it with any data broker.
We do not track you across other apps or websites.
Third party services
Apple: Sign in with Apple, Screen Time / Family Controls, and in app purchases. See Apple's Privacy Policy.
Google: Sign in with Google, if you choose that option. Google receives your request to authenticate and returns an identity token confirming who you are; see Google's Privacy Policy.
Supabase: stores your account, profile, progress (including your day by day no scroll history), and friend connections for the social features.
RevenueCat: manages your subscription status.
PostHog: processes anonymous product analytics events, such as app opens and onboarding completion, to help us understand usage and improve the app.
Data retention & deletion
You can delete your account and all associated server side data at any time from Settings → Delete Account inside the app. This permanently removes your profile, progress, and friend connections from our servers. Data stored only on your device is removed when you delete the app.
Children
Twilock is rated 13+ and is not directed to children under 13. We do not knowingly collect personal information from children under 13.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected here with an updated date.