Time Recovery — Privacy Policy
The short version
Time Recovery keeps everything on your phone. There is no account, no server of ours, and nothing about your app use is sent anywhere. We cannot see which apps you block, how often you open them, or what you write into the app.
The single exception is the Pro subscription: checking whether it is active means asking a payment processor, and that is described in full below.
What the app stores on your device
All of it lives in the app's own storage on your phone (an App Group container on iOS, private preferences on Android):
- Which apps you chose to block. On Android this is a list of package names. On iOS it is the opaque selection Apple's Screen Time picker hands back — even we cannot read which apps it refers to.
- Your settings: schedule profile, daily budget, daily ceiling, chosen training goal, which exercises are switched on, and any exercises you wrote yourself (their name, instructions and length, in your own words).
- Daily counts: how many times a shield was shown, how many unlocks you earned, how long you trained, how many emergency passes you used, and how many unlocked minutes the day has held. These are kept for 30 days and then deleted automatically.
- Working state: when the current unlock ends, whether onboarding is done, and the name of the app a shield was last shown for.
What the app needs permission for
- iOS — Screen Time (Family Controls). Required to shield the apps you pick and to lift the shield when you have trained. Apple keeps your usage data inside Screen Time; it is never handed to us. That is also why the app can tell you that a daily budget is spent, but not how many minutes you have used.
- Android — Usage access. Required to see which app is in front, so a shielded app can be recognised the moment it opens. The reading happens on the phone, continuously, and is not stored: only the daily counts above remain.
- Android — Display over other apps. Required to show the workout screen over a blocked app.
- Notifications. Used for the blocker's ongoing notice on Android, and on iOS for the notification that carries you from the shield into the workout. They are created on your phone; no push service is involved.
- Battery optimisation (Android, optional). Some phones stop background apps, which stops blocking. The app can send you to the system screen where that is changed; it changes nothing by itself.
What leaves your device
Nothing about how you use your phone. Which apps you block, how often you open them, what you trained and what you wrote all stay on the device. The app has no analytics, no advertising, no tracking and no crash reporting.
The one thing that does leave is the subscription check. To know whether Pro is active, the app uses RevenueCat, Inc. (United States) as a processor acting for us. From the first launch, and again whenever you open the Pro page or buy, RevenueCat receives:
- a random identifier the app generates for this installation — not your name, email address, phone number or device id;
- the store receipt or purchase token, which plan it is for, its price and currency, and the country your store account reports;
- the platform, operating system version and app version making the request, and the IP address the request arrives from.
The app deliberately leaves RevenueCat's optional device-identifier collection switched off, so no advertising id, IDFV or Android id is sent. RevenueCat may use this only to run the subscription check for us.
The purchase itself is handled by Apple or Google as the seller. They process the payment and tell the app only whether a purchase is active. We never see your card, address or any other payment detail.
Children
Time Recovery is meant for the person using the phone to set their own limits. It is not directed at children, it offers no parental control over another person's device, and it does not knowingly collect anything from children.
Your rights
Nothing about your app use is in our hands, so there is nothing of that kind to access, correct, export or erase.
The one record held off your phone is the subscription record described above, keyed to that random identifier. Delete my data in the app shows you the identifier; send it to the address below and we will have RevenueCat delete the record. Apple's and Google's own record of the transaction belongs to them, kept for their legal and accounting obligations, and is covered by their privacy policies rather than this one.
Everything the app has written is on your phone, and deleting the app deletes it. "Remove all blocks" clears the app selection without deleting the app.
If you are in the EEA or the UK, GDPR applies to that subscription record, with us as controller and RevenueCat as processor; the lawful basis is performance of the contract you entered into when you bought Pro. In Türkiye the same applies under KVKK (Law 6698). For everything else the app does, there is no personal data of yours to exercise those rights over.
Changes
If the app ever starts sending something off the device — an account, backup or analytics — this page will say so before that version ships, and the change will be described here rather than quietly added.
Contact
Ayhan Şentürk — senturkayhan@gmail.com
Write in English or Turkish. If you want the subscription record described above deleted, send the identifier the app shows under Delete my data; without it there is no way to tell which record is yours.