Unfry helps you spend less time in the apps that eat your day. You choose apps to protect, do short focus sessions and healthy tasks to earn Braincells, and spend Braincells on Unwind time in those apps. This policy explains what information Unfry handles, why, and what you can do about it.
Unfry is made by REWORK AS, organisation number 927 255 812, Norway. REWORK AS is the data controller: we decide how and why your information is used. For any privacy question or request, email sebastian@rework.no. This policy also covers earlier versions of the app released as Task Lock, LockTok and LockIn.
The short version
- We don't sell your data, and there are no third-party ads in Unfry.
- Proof photos are checked and then dropped. We don't store them on our servers.
- In the EEA, the UK and Switzerland, usage analytics and ad measurement stay off unless you tap "Allow" when Unfry asks. Elsewhere they start on, and you can turn either off in Settings at any time.
- We use AppsFlyer to see which of our ads bring installs. On iPhone your advertising ID is only used if you also allow tracking when Apple asks.
- Unfry can't read what's inside other apps, your messages or your files.
- You can export your data and delete your account from inside the app.
Your account
The first time you use Unfry, it creates a guest account so your progress can be saved. A guest account has an account ID but no name or email address.
If you sign in with Apple or Google, we receive your email address, your name if the provider shares it, and an identifier from that provider. If you use Apple's "Hide My Email", we only see the relay address.
When a guest signs in, the guest's progress, Braincells, purchases and feedback move to the signed-in account, and the guest account is then deleted.
Your plan and progress
To run your plan and restore it on a new phone, we store with your account:
- your schedule and rule, and the apps you protect (an app identifier and its label);
- the habits and tasks you pick, timer and Unwind settings, and preferences such as your time zone;
- focus sessions and completed tasks, Braincells earned and spent, Unwind time used, streaks and badges;
- for each phone you use: a random installation ID, the platform and the app version.
App blocking on your phone
iPhone and iPad
Unfry uses Apple's Screen Time features (Family Controls, Managed Settings and Device Activity). Apple gives Unfry private tokens for the apps you choose, not their names. Unfry uses them to shield those apps on your schedule and to show screen-time figures on your device.
Android
With your permission, Unfry uses:
- Usage access, to notice when a protected app opens and to show your screen time;
- the list of installed apps, so you can choose which ones to protect;
- Display over other apps, to show the Unfry screen over a protected app;
- Alarms and reminders, to end Unwind time on time;
- a foreground service, which keeps protection running and shows a persistent notification while it does.
Your installed-app list and usage figures are used on your phone. We don't send them to analytics or advertising services. On either platform, Unfry can't see what you do inside other apps, and it doesn't read your messages, emails, browsing or files.
Proof photos and camera tasks
Some tasks ask for a photo, for example of a book, your notes or your desk. The photo is sent over an encrypted connection to our backend (Supabase), which passes it to OpenAI to check whether it shows the task. Storage of OpenAI's response is turned off for these requests.
We don't keep the photo on our servers. We store the result (accepted or not, the task and the time) and a one-way fingerprint of the photo (a SHA-256 hash). The fingerprint lets us spot the same photo being reused; it can't be turned back into the photo. Supabase and OpenAI handle the photo while the check runs and may keep ordinary service logs under their own terms.
Accepted photos can be kept on your phone as stickers in your collection. They stay there until you delete them, clear the app's data or uninstall Unfry.
Exercise tasks such as push-ups, squats and planks use the camera to count reps on your phone. The video and body tracking stay on your phone; only a short summary (such as the count and timing) is sent to confirm the task.
Please don't photograph other people, ID cards, payment cards, medical papers or confidential documents.
Feedback you send
If you write a note from the app (Settings → Send feedback to Sebastian, or when the app asks how it's going), we store your message with your account ID, how many tasks you've completed, the app version and the platform. Only we can read these notes. We use them to understand what works and to improve Unfry. They're deleted when your account is deleted.
If you email us instead, we receive your email address and whatever you write.
Purchases
Subscriptions are bought and billed through the App Store or Google Play. We use RevenueCat to check what you've bought and unlock paid features. RevenueCat receives your Unfry account ID, your purchase and subscription status, and, if your account has one, your email address to help with support. We never see your card number.
When we ask first
Right after the welcome screens, Unfry shows a short pop-up, "Help improve Unfry?", to people in the European Economic Area (the EU, Norway, Iceland and Liechtenstein), the United Kingdom and Switzerland. It asks once for both usage analytics and ad measurement. "Allow" and "Not now" are equal choices, and every feature works either way. If you tap Not now, both stay off. On iPhone, Allow is followed by Apple's own tracking question.
Everywhere else there is no Unfry pop-up: usage analytics and ad measurement start on, and you can turn either off in Settings → Account → Privacy and data. On iPhone, Apple still asks whether Unfry may track you before your advertising ID is used, and ad measurement stays off on iPhone unless you allow it.
We work out which group you're in from your phone's region setting (for example Norway in "English (Norway)"), and if that isn't available, from your time zone. If we can't tell, we ask. Your choice belongs to this installation of Unfry, so it still applies if you later sign in or switch to another account on the same phone.
Where we ask, we rely on your consent. Elsewhere we rely on our legitimate interest in improving Unfry and measuring our own ads, and you can object at any time with the same switches.
Usage analytics
Usage analytics helps us see where people get stuck, for example which setup step people leave on. Turn it on or off in Settings → Account → Privacy and data → Optional analytics. Everything in Unfry works with it off.
When it's on, Unfry sends events about how the app is used: screens visited, each onboarding step viewed, finished or gone back from (and how long it took), tasks started and finished, permission results, purchase outcomes and error codes. Each event has a timestamp, the app version, the platform, a random session ID and a random analytics ID. Once you're signed in, events are linked to a random analytics account ID, never your email, so we can export or delete them with your account. Events go through our backend to PostHog in the EU. IP addresses are discarded and aren't used to look up your location.
Analytics never includes photos, your answers, text you write, the names of other apps, location, advertising IDs or screen recordings, and it isn't shared with advertisers. Events are kept for up to one year. Turning analytics off stops collection and clears events that haven't been sent. "Delete analytics history" in the same place deletes what was already collected.
Ad measurement with AppsFlyer
We advertise Unfry in other apps and on websites, for example on Meta. To see which of those ads lead people to install Unfry, we use AppsFlyer on iPhone and Android. AppsFlyer is our processor: it handles this information for us and on our instructions, not for its own purposes.
When ad measurement is on, AppsFlyer may receive:
- Install attribution: which ad or campaign, if any, led to your install, and when you installed and first opened Unfry. On Android this includes the Google Play install referrer.
- Your advertising ID: the IDFA on iPhone, only if you tap "Allow" when Apple asks whether Unfry may track you; the advertising ID on Android, unless you've deleted it or opted out in your phone's settings. We don't collect the IDFV or the Android ID.
- Device and app events: your device model, system and app version, language, network type, a rough region worked out from your IP address, an AppsFlyer ID for your installation, and events such as opening the app, finishing setup, starting a trial or subscribing.
The AppsFlyer ID is linked to your RevenueCat customer so trials, purchases, renewals and refunds can be matched to the ad that brought you, and those results may be passed on to the ad network that showed the ad, such as Meta. This information is pseudonymous, not anonymous. AppsFlyer never receives your name, email, proof photos, text you write or which apps you protect. For people in the EEA, the UK and Switzerland we also tell AppsFlyer that consent was given for measurement only, not for personalised ads.
To say no or stop it later:
- In Unfry: tap "Not now" when asked, or turn off Settings → Account → Privacy and data → Optional ad measurement.
- iPhone: tap "Ask App Not to Track" when Apple asks, or later turn Unfry off in Settings → Privacy & Security → Tracking.
- Android: in your phone's Settings → Privacy → Ads (on some phones, Settings → Google → Ads), tap "Delete advertising ID". On older Android versions, turn on "Opt out of Ads Personalisation".
Turning it off stops new measurement but doesn't erase what was already sent; email us to ask for that.
Apple's aggregate install reports
On iPhone, Unfry also uses Apple's own privacy-preserving attribution (SKAdNetwork and AdAttributionKit). Unfry tells iOS once that it was installed and opened, with no account, purchase or behaviour details. Apple then sends delayed, anonymous and aggregated reports to the ad network that showed an Unfry ad. Unfry and AppsFlyer can't link these reports to you or your device, they don't use your advertising ID, and they work the same whatever you choose about tracking. Apple controls this; see Apple's privacy information for details.
Security and abuse checks
To stop fake accounts and reused proof, Unfry checks that requests come from a genuine copy of the app on a real device, using Apple App Attest on iOS and Google Play Integrity on Android. We store a key identifier and the check result for your installation. Rate limits use scrambled, secret-keyed versions of your IP address, account ID and installation ID that expire within about a day. When creating a guest account, Unfry may also show a Cloudflare Turnstile check.
Notifications
If you allow notifications, Unfry schedules reminders on your phone, for example for your day and night routines or when Unwind time ends. They aren't used for advertising. On Android, protection also shows a persistent notification while it's running.
What we don't collect
- your location (Unfry doesn't ask for location permission);
- health data from Apple Health or Health Connect;
- your contacts, messages or files;
- advertising IDs, unless you agree to ad measurement (on iPhone, by allowing tracking when Apple asks).
Who we share with
We share information only with providers that help run Unfry, and only what they need. We don't sell personal data.
| Provider | What for |
|---|---|
| Supabase | Accounts, database and backend functions |
| OpenAI | Checking proof photos |
| RevenueCat | Subscriptions and access to paid features |
| Apple and Google | Sign-in, purchases, Screen Time, App Attest and Play Integrity |
| PostHog (EU) | Usage analytics, when it's on (see "When we ask first") |
| Cloudflare | Turnstile check when creating a guest account |
| Expo | Delivering app updates |
| AppsFlyer (our processor) | Measuring which of our ads bring installs on iPhone and Android, when ad measurement is on |
| Meta and other ad networks | Receive ad results from AppsFlyer for our own Unfry ads |
Some providers process data outside your country, including in the United States. Where the law requires it, appropriate safeguards apply to those transfers. We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a sale or merger of the business.
How long we keep data
- Account, plan, progress, proof results and feedback: until you delete them or your account.
- Proof photos: not kept on our servers; on your phone until you delete them.
- Analytics events: up to one year. Unsent events wait on your phone for up to seven days. After a deletion request, a small receipt is kept for up to 90 days so old events aren't re-created.
- Rate-limit values: about a day. Device-check records are removed by regular cleanup.
- Purchases: Apple, Google and RevenueCat keep purchase records under their own policies.
- Backups: deleted data can stay in our providers' backups for their backup period. We may keep information longer where the law requires it or to handle a dispute.
Your choices and rights
- Allow or remove camera, notification, Screen Time, Usage access and other permissions in your phone's settings at any time.
- Turn usage analytics and ad measurement on or off in Settings → Account → Privacy and data, and allow or deny tracking for Unfry in your phone's settings.
- Use Export my data in Settings to get a copy of your data.
- Use Delete account and data in Settings, or follow the account deletion steps. Deleting your account doesn't cancel a subscription; cancel it in the App Store or Google Play.
Depending on where you live, you can ask to access, correct, delete or move your data, and object to or restrict how we use it. Where we rely on your consent (usage analytics and ad measurement in the EEA, the UK and Switzerland), you can withdraw it at any time with the switches in Settings, as easily as you gave it. We rely on our agreement with you to run the app, on consent for optional features where we ask, and on legitimate interests for usage analytics and ad measurement elsewhere (which you can object to with the same switches), security, abuse prevention and reading feedback. You can complain to your data protection authority; in Norway that's Datatilsynet.
Unfry isn't meant for children under 13, and it isn't designed to monitor someone else's phone.
Changes and contact
If we change this policy, we'll update it here with a new date, and tell you in the app or the store listing when a change is significant.
Questions or requests: sebastian@rework.no.