Privacy Policy

Last updated: September 5, 2026

Disponible en français

This Privacy Policy explains how Analog Wellbeing Inc. ("we", "us", "our") collects, uses, shares, and protects information when you use the Analog mobile application ("Analog", the "App") and our website at turnanalog.com (together, the "Services"). The Services are intended for users 18 and older. If you are in the European Economic Area, the United Kingdom, or Switzerland, section 10 sets out the legal bases we rely on and the rights you have. If you do not agree with this Privacy Policy, do not use the Services.

1. Summary

  • Analog helps you understand and improve your digital habits using Apple's Screen Time features, and (optionally) Apple Health.
  • Most insights are computed on your device. When you sign in, Analog also keeps a private cloud account so your history is preserved and you can use social features (Friends, benchmarks) and see how you compare with others.
  • Your account is keyed to a random ID, never your name or email. You sign in with Apple; Apple does not share your name or email with us, and we store only a one-way, keyed hash of your Apple ID.
  • What is uploaded to your account (after you sign in and consent): your screen-time summaries (totals, pickups, first-pickup time, per-app and per-category usage, hourly patterns, per-app notification counts, sleep-window activity), your daily scores, and app/feature events (focus and block usage, interventions, achievements, subscription status). If you use Friends, also your chosen display handle and the social graph.
  • Apple Health stays on your device. If you connect Apple Health, Analog reads health metrics read-only and processes them only on your device. We do not upload your Apple Health data to our servers or share it with anyone.
  • What we never collect: your name, email, exact date of birth, precise location, your phone number, your contacts, advertising identifiers, or full payment-card details.
  • The Analog browser extension measures which sites you spend time on, and it does that on your own computer. Those site names are not uploaded. The one exception is the list of sites you choose to block, which syncs between your own devices so that a block you set on one works on another. See section 12.
  • You're in control: turn off syncing and comparisons, opt out of product analytics, disconnect Apple Health, and delete your entire account (server and device) from within the app at any time.

2. Information We Collect

A. Information you provide

Support requests and messages you send us (which include your email address and any name you choose to share); bug reports you send from inside the app; a display handle you choose for social features; and preferences you set in the app. A bug report contains what you write, plus a fixed set of technical details: your app version and build, your iOS version, your device model, whether Screen Time access is on, whether your screen time data is up to date, how many days of data the app holds, your plan, your time zone and language, and whether notifications and Apple Health are connected. You can see that exact list before you send, and you can turn it off. A bug report never includes app names, website addresses, or anything you have typed elsewhere in the app.

B. Account and identity information

When you sign in with Apple, we create an account identified by a random account ID (UUID) and store: a one-way keyed (HMAC) hash of your Apple ID identifier (not your Apple ID, name, or email); a display handle you choose; your time-zone region (used to group fair comparisons); and consent records (what you agreed to, when, and a fingerprint of the wording).

C. Screen Time and device-activity information

With your permission, Analog accesses Apple Screen Time / device-activity information: total device and per-app time, pickups and activity patterns (including empty pickups and first-pickup time), app names and categories, per-app notification counts, and website-domain activity where the system provides it. Insights and scores are computed on your device; once you sign in and consent, daily and hourly summaries are uploaded to your account so history and comparisons work. This includes sleep-window activity and your daily score. Website domains are the exception: they are read and shown to you on your device only, and are removed before anything is uploaded, so the specific sites you visit never reach our servers.

D. App and feature events

To power features and your history, we upload a stream of app events tied to your account ID: focus-block and app-block usage, intervention events, baseline snapshots, achievement unlocks, your permission state, and subscription status. Some of these reveal which apps you are trying to limit.

E. Apple Health data (optional, on-device only)

If you connect Apple Health, Analog reads health and fitness metrics read-only to show you correlations between your phone use and your sleep, activity, and recovery. Apple Health data is processed only on your device and is never uploaded to our servers, shared with anyone, or sent to our analytics provider. We never write to Apple Health. The categories Analog reads are limited to what these on-device features use: sleep analysis, resting heart rate, heart-rate variability, steps, active energy, exercise and stand time, walking and running distance, respiratory rate, time in daylight, sleeping wrist temperature, walking heart-rate average, and workouts. You can disconnect Apple Health at any time in iOS Settings.

F. Social graph

If you use Friends, we store your friendships, friend requests, invite codes, and any users you have blocked or removed.

G. App data stored on your device

Generated insights and summaries, focus blocks, app settings, and diagnostic state are stored locally on your device.

H. Automatically collected information

Limited device and app information (device family/model, OS version, app version) and reliability data. Unless you turn product analytics off, we also record in-app events such as which screens you open, which features you use, and your subscription and paywall interactions. We store these records ourselves, on our own servers, linked to your account, and delete them after 180 days. We do not send them to any third-party analytics provider, and we do not record your Screen Time content or your Apple Health data as product analytics. Your IP address is terminated at our content-delivery edge and is not stored in our application logs.

I. Subscription and purchase information

Subscriptions are processed by the App Store (Apple). We receive whether you have an active subscription and the tier, associated with your account to unlock features. We do not receive or store your full payment-card details.

J. What we do NOT collect

Your name or email (except if you contact support or choose to share them); your exact date of birth; your precise or GPS location; your phone number; your contacts; the web addresses you visit (browsing activity stays on your device and is never uploaded); advertising identifiers (IDFA); or full payment-card details.

3. How We Use Information

We use information to:

  • Provide, maintain, and improve the Services and the features you request
  • Generate your insights, scores, and personalization from your activity data
  • If you connect Apple Health, compute correlations on your device between your health metrics and your screen-time data
  • Power social features you choose to use: Friends, invites, benchmarks, and standings
  • Provide customer support; protect against abuse, fraud, and security risks; and comply with legal obligations

We do not use your personal information for advertising. We do not sell your personal information or use it for cross-context behavioral advertising.

4. How We Share Information

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising (as defined under US state privacy laws).

  • Service providers (sub-processors), processing on our behalf under contractual and security obligations. This is our complete current list: Apple (Sign in with Apple, in-app purchases, notifications); Supabase (database hosting, United States); Railway (application hosting, United States); Amazon Web Services (key management and encrypted backups, United States); Google Workspace (email hosting for our contact addresses, United States); and ntfy.sh (operational alerting to our team, Germany; no user personal information is sent). We publish this list rather than providing it on request, and we update it here when it changes.
  • Other users (social features): people you connect with can see your display handle, your standing/rank, your weekly Analog score, a streak indicator, an achievements count, whether you have a Pro subscription, the month you joined, your chosen profile background, and a recent-activity indicator. Your weekly Analog score is a single 0-100 summary of the past week. They never see the underlying measurements it is calculated from (screen-time totals, pickup counts, sleep-window activity, per-app or per-category usage), your individual daily scores, or any health data. If you have not synced in over a week, your score is not shown to others at all.
  • Legal and safety: we may disclose information if required by law, or to protect rights, safety, and security, or to investigate fraud or misuse.
  • Business transfers: in a merger, acquisition, financing, or sale of assets, information may transfer as part of the transaction.

We do not share your Apple Health data with anyone. It never leaves your device.

5. Comparisons and Aggregate Statistics

If you opt in, your contributed data is used to show you how you compare with other contributors (for example, where your screen time falls relative to others). We publish group comparison statistics only once a group is large enough that they do not reveal an individual's data (a minimum group size), and while a group is smaller than that you see only your own standing or position, not a precise group comparison. We commit not to attempt to re-identify any individual, and we do not provide other users with your raw screen-time values or scores. You can revoke your contribution in the app at any time; revocation applies going forward.

6. Consumer Health Data

This section addresses consumer-health-data laws (such as Washington's My Health My Data Act). Analog processes Apple Health data only on your device. We do not collect it on our servers, sell it, or share it with anyone, including our analytics provider. Health metrics are read read-only and used solely to show you correlations between your phone use and your sleep, activity, and recovery, on your device. You may disconnect Apple Health and delete the on-device health cache at any time. If we ever introduce features that upload health summaries to your account, we will first obtain your separate, explicit health-data authorization and update this Policy. Separately, some of the screen-time information you contribute to your account (for example, activity during your sleep window, or which apps you choose to limit) may relate to your wellbeing; we process that information only to provide the features you use, under the consent you give when you sign in, and the rights described in this Policy apply to it. We do not sell it or use it for advertising.

7. Your Choices and Controls

  • Permissions (Screen Time, Apple Health, Notifications) are managed in iOS Settings; revoking them may disable related features.
  • Syncing and comparisons can be turned off in the app's Privacy Center; turning them off stops further uploads.
  • Product analytics has an in-app opt-out toggle.
  • Apple Health can be disconnected at any time in iOS Settings.
  • Delete your account: “Delete Account” removes your server account and all associated data and signs you out. Deletion runs server-side first; a background process completes removal within a short grace window. Some data may persist briefly in encrypted backups and is overwritten as those backups expire (see Data Retention); when we restore from a backup, we re-apply any account deletions made since that backup. A minimized record that you exercised a deletion or consent right may be retained where required by law.
  • Access or export your data: you can request a copy of the personal information in your account by contacting us. We fulfill access/portability requests within applicable timelines.
  • App Clip: opening an Analog invite link can launch an App Clip, a lightweight part of Analog that runs without installing the full app. If you sign in there, it creates a real Analog account and connects you with the person who invited you, exactly as the full app would. The App Clip reads no Screen Time, Health, or contacts information. You can delete that account from inside the App Clip itself, and if you later install the full app, the same account and connection carry over.

8. Data Retention

Information stored on your device (including your Apple Health cache) is controlled by you, through in-app deletion and uninstalling the app. Information in your cloud account is retained while your account is active and deleted on account deletion, except: product-analytics events are deleted after 180 days; consent records are retained up to approximately six years for legal accountability; encrypted backups are retained on a rolling 30-day window and then expire; and bug reports are kept, with your account identifier, your device identifier and the identifying technical details removed, because a report describes how the app behaves rather than who you are and the fault may still affect other people. We cannot remove information from the part of a bug report you wrote yourself, so please do not type personal details into one; if you want a specific report deleted, email privacy@turnanalog.com and we will remove it. We are not currently shortening the retention of in-account behavioral summaries below the life of your account; if we introduce a shorter retention period, we will state it here and enforce it.

9. Where Your Information Is Processed

Your cloud-account information is processed and stored in the United States (our hosting, key-management, and backup providers operate there). We are established in Ontario, Canada. If you are in the European Economic Area, the United Kingdom, or Switzerland, your information is therefore transferred outside your country. Those transfers are covered by the European Commission's Standard Contractual Clauses (controller-to-processor module) with each of our United States providers, together with the UK International Data Transfer Addendum where UK data is involved, except where a provider is certified under the EU-US Data Privacy Framework and the transfer to that provider relies on that certification instead. We have assessed the laws of the United States as they apply to these transfers and the technical measures that protect your information in them, including encryption in transit and at rest and separation of identity from behavioural data; you can request a summary of that assessment at the contact address below. For our Quebec users: information is processed outside Quebec (in the United States); we apply contractual and technical safeguards to that transfer, consistent with applicable law.

10. Your Privacy Rights

United States (CCPA/CPRA and other state laws)

Depending on your state (California, Virginia, Colorado, Connecticut, Utah, Texas, and others), you may have the right to know/access, delete, and correct your personal information, and to opt out of sale, sharing, and targeted advertising. We do none of these. We do not sell or share your personal information, do not use it for cross-context behavioral advertising, and will not discriminate against you for exercising a right. To exercise a right, contact us; we respond within 45 days (extendable once where permitted), may verify the request against your account, and you may use an authorized agent. If we deny a request, you may appeal by replying to our decision. We do not disclose personal information to third parties for their own direct marketing.

Canada (PIPEDA and provincial laws, including Quebec's Law 25)

You may access and request correction of your personal information and withdraw consent (subject to legal/contractual limits), and request portability. Our Privacy Officer is reachable at the address below. Unresolved concerns may go to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information.

European Economic Area, United Kingdom and Switzerland: the legal bases we rely on

Analog Wellbeing Inc., Ontario, Canada, is the controller of your personal data. We rely on the following legal bases. Performance of a contract (Article 6(1)(b)): creating and operating your account, syncing your history to it, and providing the features you use, including blocks, focus sessions, insights and Friends. Consent (Article 6(1)(a)): uploading your screen-time summaries to your cloud account, contributing to aggregate comparisons and standings, and product analytics. You give this consent when you sign in and you can withdraw it at any time in the app's Privacy Center, which stops further uploads; withdrawal does not affect processing carried out before it. Legitimate interests (Article 6(1)(f)): keeping the Services secure and reliable and preventing abuse and fraud, balanced against your interests. Legal obligation (Article 6(1)(c)): meeting our obligations under applicable law. Your per-app usage necessarily includes the names of the apps you use, and an app name can imply something sensitive about you, for example a health, religious or political interest. Where that is the case we process it on your explicit consent (Article 9(2)(a)), given at sign-in, and you can withdraw it as described above. The web addresses you visit are removed on your device before anything is uploaded and never reach us.

European Economic Area, United Kingdom and Switzerland: your rights

You have the right to access your personal data and receive a copy; to have inaccurate data corrected; to have your data erased; to restrict processing; to receive your data in a portable, machine-readable form; to object to processing carried out on the basis of our legitimate interests; and to withdraw any consent at any time. You can delete your entire account, server and device, from inside the app. To exercise any other right, contact privacy@turnanalog.com. We respond within one month, which we may extend by a further two months for complex requests, and we will tell you if we do. We do not charge a fee unless a request is manifestly unfounded or excessive. We do not make decisions about you by automated means that produce legal effects or similarly significantly affect you; your Analog score is shown to you and, if you use Friends, contributes to comparisons, and it is never used to determine access, price or eligibility. Retention periods are set out in section 8 and the international transfers that apply to you are described in section 9. If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with a supervisory authority: in the United Kingdom, the Information Commissioner's Office (ico.org.uk); in the EEA, the authority in the country where you live, work, or where you believe the issue occurred; and in Switzerland, the Federal Data Protection and Information Commissioner (edoeb.admin.ch). We would appreciate the chance to address your concern first.

11. Cookies and the Website

Our website (turnanalog.com) uses only a minimal functional cookie (for example, remembering interface state) and does not use advertising or cross-site tracking cookies. We honor browser “Do Not Track” / Global Privacy Control signals where required. If we add web analytics in the future, we will update this section.

12. The Analog Browser Extension

The Analog browser extension measures which sites you spend time on and blocks the ones you choose. Both happen inside your browser.

  • What it records: the hostname of the site in the tab in front of you, and how long it was there. It does not record page contents, addresses beyond the hostname, form data, search terms, or anything you type, and it does not read pages you have not granted it access to.
  • Where that goes: nowhere, unless you also install the Analog Mac app. The extension has no server of its own and makes no network requests. With the Mac app installed, the extension passes what it measured to that app on the same computer, over the browser's native messaging. That is a local channel between two programs on your machine.
  • What leaves your computer: your measurements stay on it unless you sign in to an Analog account. If you do, Analog uploads daily and hourly totals so your devices can show one picture of your week. Site names are not part of that, with one exception: the list of sites you have chosen to block travels between your own devices, because a block you set on your phone has to be enforceable on your laptop. That list is yours, it is never used to build a profile, and it is never shared with anyone else.
  • What we never do with it: we do not sell this data, use it for advertising, share it with third parties, or use it to train models.
  • Deleting it: uninstalling the extension removes everything it stored in your browser. The Mac app can delete everything it measured on that computer from its settings. Deleting your Analog account removes what was uploaded.

13. Children's Privacy

The Services are for users 18 and older, carry a 17+ App Store rating, and are not directed to children. We do not knowingly collect personal information from anyone under 18.

14. Security

Your behavioral data is keyed to a random account ID; identity and behavioral data are separated by access controls; your Apple ID identifier is stored only as a keyed one-way hash; and data is encrypted in transit and at rest, with role-separated database access. No system is perfectly secure, and we cannot guarantee absolute security; a sufficiently capable compromise of our infrastructure could, in principle, link data, which is why we minimize what we collect and separate identity from behavior.

15. Data Breaches

If a breach affecting your personal information occurs, we will notify you and the relevant authorities as required by applicable law.

16. Changes to This Privacy Policy

We may update this Policy. We will update the “Last updated” date above and, where required, provide additional notice or obtain consent. If a change materially expands how we use your data (for example, if we begin uploading health summaries), we will require existing users to review and re-accept before that change applies to them.

17. Contact Us

Questions, requests, or to exercise your rights:

  • Email: privacy@turnanalog.com

Analog Wellbeing Inc.'s designated Privacy Officer can be reached at the email address above. If you are in Canada and have a concern about how we handle your personal information that we are unable to resolve, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca (and, in Quebec, the Commission d'accès à l'information).