Privacy
Stays on the phone
Movement
iOS records how much the phone moves. Cooldown reads that record on the phone to tell hand from rest. It is never sent anywhere.
The apps you lock
The choice is made in Apple's own picker and stays with iOS. Cooldown cannot see which apps you chose or what you do in them.
Your days
The daily numbers behind your trends, your stickers, and a copy of each reason you write to open a locked app.
When the screen is in use
With the screen switch on, Cooldown notes when the phone is unlocked with its screen lit, to tell a phone in use from one carried in a pocket. The notes stay on the phone.
Location
The screen switch keeps Cooldown awake in the background through a location session, which iOS shows as location access set to Always. Cooldown discards every position as it arrives. No location is stored on the phone or sent anywhere. The switch is off until you turn it on in Settings.
Sent when you ask to open a locked app
Your reason and the app's name
In a circle they go to Cooldown's server and from there to the members of your circle, who can answer yes or no. If none of them answers within two minutes, or you are in no circle, they go on to an OpenAI model that answers instead. The server deletes the text as soon as there is an answer and keeps only the time and the answer; a question nobody settles is deleted the next time your circle's phones report, once ten minutes have passed. OpenAI handles the text under its API data policy. A switch in Settings keeps your reasons away from your circle.
Sent to your circle
Only while you are in one
Your name and sticker, your heat, whether the phone is resting, the times it rested in the last 24 hours, and each day's rest, time in the hand, pickups and peak heat. The times of rest are compared with your friends' on the server, to find when your phones rested together; your friends see only the result. A phone in no circle sends none of this.
Reminders
To deliver a reminder from your circle, the server holds the address Apple gives the phone for notifications and the phone's time zone, so that nothing arrives at night. The switches are in Settings.
Where it is kept
On a Supabase server in the United States, under an identifier the phone makes for itself. There is no account, no email address and no advertising identifier.
Deleting it
In the app: Settings, then "Leave the circle and delete my data". The server removes everything it holds about the phone.