Privacy Policy

What we collect

Ruminate collects only what is needed to run the app:

• Email address and username — to create your account and let friends find you.
• Push notification token — to deliver the friend-break alerts you opt into.
• Rule-break events — timestamps, app names and unlock counts when you exceed a self-set daily limit, shared with your confirmed friends only.
• Bug reports — if you choose to submit a bug report, we receive the title, description and steps you write, any screenshots you attach, and basic technical details (your app version, device model, OS version, and a submission timestamp) to help us diagnose the issue.

We do not collect browsing history, location, or any data from the apps you block.

Permissions we use

Accessibility Service. Ruminate uses Android's Accessibility Service to detect when a blocked app comes to the foreground and show the buffer screen. The service is declared without the ability to retrieve window content (canRetrieveWindowContent="false") and subscribes only to window-state-change events, so it receives the package name of the app you just opened and nothing else. It cannot read text on your screen or intercept input. What it detects stays on your device, with one exception: if you are signed in and exceed a daily target you set, the app's name and your unlock count are saved to your account and shared with your confirmed friends (see Rule-break events above).

Usage Access. Ruminate uses the Usage Access permission to see which app is currently in the foreground so it can enforce the limits you set. This information stays on your device and is not sent anywhere.

How we use it

Your data is used solely to operate Ruminate:

• Streak tracking and rule-break accountability with friends you add.
• Push notifications for friend-break alerts (can be turned off in Settings).
• Responding to and diagnosing bug reports you send us.

We never sell, rent, or share your data with advertisers or third-party analytics services.

Data storage & third parties

App state (your rules, streak, and settings) is stored locally on your device using AsyncStorage. Ruminate sets android:allowBackup="false" and excludes every storage domain from Android Auto Backup and device transfer, so this data is never uploaded to Google Drive and does not survive uninstalling the app.

Account and social data is stored on Supabase, a hosted PostgreSQL service with encryption at rest and in transit, processing data in the EU (West). See supabase.com/privacy.

Bug reports you submit are delivered to our support inbox through Resend, an email delivery provider. Resend processes the report only to transmit it to us. See resend.com/legal/privacy-policy.

Your rights

You can delete your account and all associated data at any time from Settings → Delete Account. This permanently removes your profile, friendships, and rule-break history from our servers within 30 days. Local device data is cleared immediately on sign-out.

Children

Ruminate is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes

We may update this policy as the app evolves. Significant changes will be communicated through an in-app notice. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy or your data? Reach us at rayrlapps@gmail.com. We aim to respond within 5 business days.