Privacy Policy

CATROT is an iOS app published by Catrot. In this policy, “we”, “us” and “our” mean that company. Under the EU and UK General Data Protection Regulation we are the controller of the limited personal data described below.

This policy covers the CATROT iOS app and this website. CATROT is an independent, third-party application. It is not affiliated with, endorsed by, sponsored by or provided by Apple Inc.

CATROT is a wellness and productivity app. It is not a medical device, it does not provide medical or psychological advice, and it is not a treatment for any condition.

Most of what CATROT knows about you never leaves your iPhone. The panels below separate what stays on your device from what is sent elsewhere, and nothing appears here that the app does not actually handle.

CATROT does not ask you to create an account, and does not ask for your name, email address or phone number in order to use the app.

This website. Our hosting provider processes the technical information any web server receives when it answers a request — such as your IP address, the page requested, and your browser's user-agent — in order to serve the site and to keep it secure. The site itself sets no cookies, embeds no third-party scripts and runs no analytics.

• From your device, through Apple's frameworks. Once you grant Screen Time access, iOS reports activity for the apps and categories you selected. This happens inside the app on your device.
• From what you set up in the app. Your goals, limits and preferences are the ones you enter.
• From your purchase. When you subscribe, Apple issues a receipt that is validated so the app knows your subscription is active.
• From you, directly. When you email support, we receive whatever you send.

We do not buy personal information, and we do not obtain it from data brokers or from other apps.

Each category is used only for the purpose listed beside it above:

• To run the features you turned on, and to apply your limits.
• To keep your streaks, history and the state of your cat between launches.
• To confirm whether your subscription is active and unlock paid features.
• To answer you when you get in touch.
• To keep the app working — fixing crashes and faults, and protecting against abuse.

We do not use your information to build advertising profiles, and we do not use it to make decisions about you that produce legal or similarly significant effects.

This is the part people ask about most, so it is worth being exact.

Your Screen Time and Device Activity information stays on your device. It is not uploaded to any server operated by us. We do not receive it, we cannot read it, and we cannot reconstruct it. We do not operate a backend that receives app data.

This is also enforced by iOS itself. Apple's Family Controls and Device Activity frameworks hand apps like CATROT opaque tokens rather than names: the app can tell that a selected app was used, and for how long, without ever learning which app it is. Those tokens are meaningless outside your device.

In practice: CATROT can see that you spent time in the apps you chose to limit. We — the people who make CATROT — cannot.

Deleting CATROT removes the data it stored on your device.

CATROT asks for permissions only when a feature needs them, and each one can be withdrawn at any time in the iOS Settings app.

• Screen Time access (Family Controls). Required for the app to measure your activity and to shield the apps you select. iOS presents Apple's own authorisation prompt. Without it, the core features cannot work.
• Notifications. Optional. Used for reminders and for telling you how your cat is doing.

Revoking a permission stops the related feature. It does not delete data already stored on your device — deleting the app does that.

Any purchase in CATROT is processed by Apple through the App Store. We never see or receive your card number, your billing address or your Apple Account credentials. Apple handles the payment and shares only what it chooses to share with developers.

We use RevenueCat to check the receipt Apple issues and to tell the app whether your subscription is active. What that involves is set out in the panel in section 2 and in section 9.

Prices, billing periods and any introductory offers are shown in the app before you confirm a purchase, and are also governed by our Terms & Conditions.

CATROT does not include third-party analytics software. There is no analytics SDK in the app, so no behavioural or usage events are sent to an analytics provider.

Apple provides developers with aggregate, non-identifying reports — crash logs, download counts and performance metrics — through App Store Connect. Whether your device contributes to these is decided by your own iOS setting under Settings → Privacy & Security → Analytics & Improvements, not by us.

CATROT does not track you across apps or websites owned by other companies, and does not present Apple's App Tracking Transparency prompt, because it has nothing to ask for.

These are the only outside parties involved in running CATROT. Each handles data under its own privacy policy, which we encourage you to read.

• Apple — App Store distribution, in-app purchases and platform services. Apple processes your purchase and your App Store account information as the seller of record. Apple also provides the Screen Time APIs the app relies on; that processing is governed by Apple's own privacy policy. Privacy policy.
• RevenueCat — Subscription management. A randomly generated app user ID, your purchase receipt, and basic device and app information used to determine whether your subscription is active. Privacy policy.
• Vercel — hosting for this website. Our hosting provider processes the technical information any web server receives when it answers a request — such as your IP address, the page requested, and your browser's user-agent — in order to serve the site and to keep it secure. Privacy policy.

We do not sell your personal information, and we do not share it with anyone for their own marketing or advertising.

We disclose information only in these situations:

• To the service providers listed in section 9, and only so far as they need it to perform their function for us.
• Where the law requires it — a valid legal request, court order or obligation we are subject to.
• To protect people — where disclosure is necessary to investigate abuse, prevent fraud, or protect the rights and safety of our users or of others.
• In a corporate transaction — if the business is merged, acquired or reorganised, information may transfer to the successor, which would remain bound by this policy or give you notice of a new one.

The providers named in section 9 may process information on servers located outside your country, including in the United States. Where personal data is transferred out of the European Economic Area, the United Kingdom or Switzerland, we rely on the transfer safeguards those providers put in place — typically the European Commission's standard contractual clauses, together with the UK addendum where it applies. Each provider's privacy documentation sets out the mechanism it uses.

Because the information described in section 5 never leaves your device, it is not transferred anywhere.

The “Kept” line on each entry in section 2 states how long that category lasts. In summary:

• Data on your device stays until you delete it in the app, or until you delete the app.
• Subscription records are kept by the provider for as long as they are needed to operate and support your subscription, and to meet the tax and accounting obligations that apply to purchases.
• Support emails are kept while we resolve your request and for a reasonable period afterwards, then deleted.

Because almost everything CATROT holds stays on your iPhone, it is protected first and foremost by your device: your passcode, Face ID or Touch ID, and iOS data protection. Keeping your device updated and locked is the single most effective thing you can do.

For the limited data that does travel — the subscription check in section 2, and requests to this website — transport is encrypted with HTTPS. We keep access to any provider dashboards limited to people who need it.

No app, website or transmission method is completely secure, and we make no guarantee that our safeguards cannot be defeated. We do not claim any security certification.

Wherever you live, you can do the following:

• Erase what the app holds by deleting CATROT from your device. This removes the data it stored locally.
• Withdraw Screen Time access at any time in Settings → Screen Time, and notification permission in Settings → Notifications.
• Ask us anything about your data by writing to catrotsupp@gmail.com.

We cannot retrieve or delete for you the information we never receive. If you ask us to delete Screen Time data, the honest answer is that we do not hold any — deleting the app is what removes it.

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the following rights over personal data we hold about you:

• Access — to be told whether we hold personal data about you and to receive a copy of it.
• Rectification — to have inaccurate data corrected and incomplete data completed.
• Erasure — to have your data deleted where one of the grounds in Article 17 applies.
• Restriction — to have our processing limited while, for example, a dispute about accuracy is resolved.
• Portability — to receive data you provided to us in a structured, commonly used, machine-readable format, and to have it sent to another controller where technically feasible.
• Objection — to object to processing based on our legitimate interests, on grounds relating to your particular situation.
• Withdrawal of consent — where we rely on your consent, to withdraw it at any time, without affecting processing carried out before you withdrew it.

How to exercise them. Email catrotsupp@gmail.com and tell us what you would like to do. We will respond within one month, and will tell you if we need longer because the request is complex. We may need to ask you for information to confirm the request comes from you — for the purchase data in section 2, the Apple Account email used for the purchase or the transaction identifier from your receipt is usually enough. Exercising these rights is free unless a request is manifestly unfounded or excessive.

Legal bases. The basis we rely on for each category is shown beside it below.

Complaints. You have the right to lodge a complaint with your local data protection supervisory authority. We would appreciate the chance to address your concern first.

Two things are true regardless of which statutes apply to us:

• We do not sell personal information as that term is defined by California law.
• We do not share personal information for cross-context behavioural advertising. CATROT contains no advertising software.

Whether the California Consumer Privacy Act, as amended by the CPRA, applies to a particular business depends on thresholds set out in the statute. We make no claim here about whether we meet them. Either way, if you are a California resident we will handle a request to know, correct or delete your personal information exactly as described in sections 14 and 15.

We will not discriminate against you for making a privacy request. To make one, write to catrotsupp@gmail.com.

CATROT is not directed to children, and we do not knowingly collect personal information from children. CATROT is intended for people aged 13 and over.

If you believe a child has provided us with personal information — for example by emailing support — please contact catrotsupp@gmail.com and we will delete it.

If what the app does changes, this policy changes with it. The “Last updated” date at the top always reflects the current version.

For a change that materially affects how we handle your information, we will give you reasonable notice — in the app, or here — before it takes effect. Continuing to use CATROT after a change means the updated policy applies to you.

Questions, requests and complaints about privacy all go to the same place, and a person reads them:

• Email — catrotsupp@gmail.com