Privacy Policy

1. Summary

• –Analog helps you understand and improve your digital habits using Apple's Screen Time features, and (optionally) Apple Health. On Android, it uses Android's own usage records instead; section 13 describes the Android app.
• –Most insights are computed on your device. When you sign in, Analog also keeps a private cloud account so your history is preserved and you can use social features (Friends, benchmarks) and see how you compare with others.
• –Your account is keyed to a random ID, never your name or email. On iPhone you sign in with Apple; Apple does not share your name or email with us, and we store only a one-way, keyed hash of your Apple ID. On Android you sign in with Google or Apple, and we likewise keep only a one-way, keyed hash of that account's identifier, never your name or email.
• –What is uploaded to your account (after you sign in and consent): your screen-time summaries (totals, pickups, first-pickup time, per-app and per-category usage, hourly patterns, per-app notification counts, sleep-window activity), your daily scores, and app/feature events (focus and block usage, interventions, achievements, subscription status). If you use Friends, also your chosen display handle and the social graph.
• –Apple Health stays on your device. If you connect Apple Health, Analog reads health metrics read-only and processes them only on your device. We do not upload your Apple Health data to our servers or share it with anyone.
• –What we never collect: your name, email, exact date of birth, precise location, your phone number, your contacts, advertising identifiers, or full payment-card details.
• –The Analog browser extension measures which sites you spend time on, and it does that on your own computer. Those site names are not uploaded. The one exception is the list of sites you choose to block, which syncs between your own devices so that a block you set on one works on another. See section 12.
• –Quiet mode opens Instagram, TikTok and the other supported apps as their websites inside Analog. Those pages come straight from the company to your phone, never through our servers, and your logins stay on your phone. See section 14.
• –You're in control: turn off syncing and comparisons, opt out of product analytics, disconnect Apple Health, and delete your entire account (server and device) from within the app at any time.

2. Information We Collect

3. How We Use Information

We use information to:

• –Provide, maintain, and improve the Services and the features you request
• –Generate your insights, scores, and personalization from your activity data
• –If you connect Apple Health, compute correlations on your device between your health metrics and your screen-time data
• –Power social features you choose to use: Friends, invites, benchmarks, and standings
• –Provide customer support; protect against abuse, fraud, and security risks; and comply with legal obligations

We do not use your personal information for advertising. We do not sell your personal information or use it for cross-context behavioral advertising.

4. How We Share Information

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising (as defined under US state privacy laws).

• –Service providers (sub-processors), processing on our behalf under contractual and security obligations. This is our complete current list: Apple (Sign in with Apple, in-app purchases, notifications); Google (Sign in with Google and Google Play billing for the Android app, and Google sign-in on our account deletion page); Supabase (database hosting, United States); Railway (application hosting, United States); Amazon Web Services (key management and encrypted backups, United States); Google Workspace (email hosting for our contact addresses, United States); and ntfy.sh (operational alerting to our team, Germany; no user personal information is sent). We publish this list rather than providing it on request, and we update it here when it changes.
• –Other users (social features): people you connect with can see your display handle, your standing/rank, your weekly Analog score, a streak indicator, an achievements count, whether you have a Pro subscription, the month you joined, your chosen profile background, and a recent-activity indicator. Your weekly Analog score is a single 0-100 summary of the past week. They never see the underlying measurements it is calculated from (screen-time totals, pickup counts, sleep-window activity, per-app or per-category usage), your individual daily scores, or any health data. If you have not synced in over a week, your score is not shown to others at all.
• –Legal and safety: we may disclose information if required by law, or to protect rights, safety, and security, or to investigate fraud or misuse.
• –Business transfers: in a merger, acquisition, financing, or sale of assets, information may transfer as part of the transaction.

We do not share your Apple Health data with anyone. It never leaves your device.

5. Comparisons and Aggregate Statistics

Analog shows you where your own synced days stand among contributors, from your first synced days. If you opt in, your data also counts toward comparisons with everyone (not your friends' leaderboards or groups, which show your weekly score from your first day) and toward the statistics of phone use Analog computes each night and the app statistics our team reads, once your account has at least 14 days of data. You can stop it counting at any time in the app's Privacy Center, with Sync & Compare, or on Android with Count my days: the statistics stop including you from the day you revoke, and comparisons from the next night. We publish group comparison statistics only once a group is large enough that they do not reveal an individual's data (a minimum group size), and while a group is smaller than that you see only your own standing or position, not a precise group comparison. Those statistics of phone use (screen time, pickups, scores, app use and the measures your scores are calculated from), and the app statistics our team reads, never describe fewer than 3 people: a row that would describe one or two people is not kept. They store no measure of your phone use during your sleep window, and nothing that shows when that window is. They do include your daily score, which partly reflects that use, so a group's average for that part of the score can be worked out from them, and your phone-free waking hours, which your sleep window helps define. We commit not to attempt to re-identify any individual, and we do not provide other users with your raw screen-time values or scores. You can revoke your contribution in the app at any time; revocation applies going forward. Counts of how many accounts use Analog, and checks of data quality, include every account that syncs. Counts of how many people use each feature, keep a block or limit, go through onboarding or the paywall, and subscribe are not statistics of phone use: they come from product analytics (described in section 2), which you can turn off in the app, from the blocks and limits you keep, and from subscription status, and the 14-day rule and the minimum of 3 people above do not apply to them. Authorised staff can also query account data directly, to operate and improve Analog.

6. Consumer Health Data

This section addresses consumer-health-data laws (such as Washington's My Health My Data Act). Analog processes Apple Health data only on your device. We do not collect it on our servers, sell it, or share it with anyone, including our analytics provider. Health metrics are read read-only and used solely to show you correlations between your phone use and your sleep, activity, and recovery, on your device. You may disconnect Apple Health and delete the on-device health cache at any time. If we ever introduce features that upload health summaries to your account, we will first obtain your separate, explicit health-data authorization and update this Policy. Separately, some of the screen-time information you contribute to your account (for example, activity during your sleep window, or which apps you choose to limit) may relate to your wellbeing; we process that information only to provide the features you use and, within the limits section 5 sets, for the statistics it describes, under the consent you give when you sign in or, on Android, when you choose Allow or turn on Count my days, and the rights described in this Policy apply to it. We do not sell it or use it for advertising.

7. Your Choices and Controls

• –Permissions (Screen Time, Apple Health, Notifications) are managed in iOS Settings; revoking them may disable related features.
• –Syncing, and counting toward comparisons, can be turned off in the app's Privacy Center. Turning syncing off stops further uploads; your own standing stays visible from days already synced.
• –Product analytics has an in-app opt-out toggle.
• –Apple Health can be disconnected at any time in iOS Settings.
• –Delete your account: “Delete Account” (in the app, under Settings, then Privacy Center) removes your server account and all associated data and signs you out. If you sign in with Google, you can also delete your account without the app at turnanalog.com/delete-account. Deletion runs server-side first; a background process completes removal within a short grace window. Some data may persist briefly in encrypted backups and is overwritten as those backups expire (see Data Retention); when we restore from a backup, we re-apply any account deletions made since that backup. A minimized record that you exercised a deletion or consent right may be retained where required by law.
• –Access or export your data: you can request a copy of the personal information in your account by contacting us. We fulfill access/portability requests within applicable timelines.
• –App Clip: opening an Analog invite link can launch an App Clip, a lightweight part of Analog that runs without installing the full app. If you sign in there, it creates a real Analog account and connects you with the person who invited you, exactly as the full app would. The App Clip reads no Screen Time, Health, or contacts information. You can delete that account from inside the App Clip itself, and if you later install the full app, the same account and connection carry over.

8. Data Retention

Information stored on your device (including your Apple Health cache) is controlled by you, through in-app deletion and uninstalling the app. Information in your cloud account is retained while your account is active and deleted on account deletion, except: product-analytics events are deleted after 180 days; consent records are retained up to approximately six years for legal accountability; encrypted backups are retained on a rolling 30-day window and then expire; and bug reports are kept, with your account identifier, your device identifier and the identifying technical details removed, because a report describes how the app behaves rather than who you are and the fault may still affect other people. We cannot remove information from the part of a bug report you wrote yourself, so please do not type personal details into one; if you want a specific report deleted, email privacy@turnanalog.com and we will remove it. We are not currently shortening the retention of in-account behavioral summaries below the life of your account; if we introduce a shorter retention period, we will state it here and enforce it.

9. Where Your Information Is Processed

Your cloud-account information is processed and stored in the United States (our hosting, key-management, and backup providers operate there). We are established in Ontario, Canada. If you are in the European Economic Area, the United Kingdom, or Switzerland, your information is therefore transferred outside your country. Those transfers are covered by the European Commission's Standard Contractual Clauses (controller-to-processor module) with each of our United States providers, together with the UK International Data Transfer Addendum where UK data is involved, except where a provider is certified under the EU-US Data Privacy Framework and the transfer to that provider relies on that certification instead. We have assessed the laws of the United States as they apply to these transfers and the technical measures that protect your information in them, including encryption in transit and at rest and separation of identity from behavioural data; you can request a summary of that assessment at the contact address below. For our Quebec users: information is processed outside Quebec (in the United States); we apply contractual and technical safeguards to that transfer, consistent with applicable law.

10. Your Privacy Rights

11. Cookies and the Website

Our website (turnanalog.com) uses only a minimal functional cookie (for example, remembering interface state) and does not use advertising or cross-site tracking cookies. We honor browser “Do Not Track” / Global Privacy Control signals where required. If we add web analytics in the future, we will update this section. Our account deletion page (turnanalog.com/delete-account) sets no cookies and has no analytics. When you choose to start a deletion there, it loads Google's sign-in button from Google so you can show which account is yours; Google handles that sign-in under its own privacy policy and may use its own cookies to do it.

12. The Analog Browser Extension

The Analog browser extension measures which sites you spend time on and blocks the ones you choose. Both happen inside your browser.

• –What it records: the hostname of the site in the tab in front of you, and how long it was there. It does not record page contents, addresses beyond the hostname, form data, search terms, or anything you type, and it does not read pages you have not granted it access to.
• –Where that goes: nowhere, unless you also install the Analog Mac app. The extension has no server of its own and makes no network requests. With the Mac app installed, the extension passes what it measured to that app on the same computer, over the browser's native messaging. That is a local channel between two programs on your machine.
• –What leaves your computer: your measurements stay on it unless you sign in to an Analog account. If you do, Analog uploads daily and hourly totals so your devices can show one picture of your week. Site names are not part of that, with one exception: the list of sites you have chosen to block travels between your own devices, because a block you set on your phone has to be enforceable on your laptop. That list is yours, it is never used to build a profile, and it is never shared with anyone else.
• –What we never do with it: we do not sell this data, use it for advertising, share it with third parties, or use it to train models.
• –Deleting it: uninstalling the extension removes everything it stored in your browser. The Mac app can delete everything it measured on that computer from its settings. Deleting your Analog account removes what was uploaded.

13. The Analog Android App

This section describes the Analog app for Android. The rest of this Policy applies to it too; where this section says something different, this section is what applies to the Android app.

14. Quiet Mode

Quiet mode opens Instagram, TikTok, YouTube, X, Reddit, LinkedIn and Facebook as their websites inside Analog, with the parts you choose hidden. It all happens on your phone.

• –What you see and do there: pages load straight from the company's website to your phone. They do not pass through our servers, and we do not record or upload what you view, post or send. Hiding the parts you chose happens on your phone.
• –Signing in: you sign in on the company's own website. Analog does not read, keep or send your password. Your login is kept on your phone, separately for each app, the way a browser keeps it. Analog checks on your phone whether you are signed in; your login is never stored by Analog or sent anywhere.
• –Notifications and links: if you add Quiet mode's shortcut, iOS passes Analog the notifications from the apps you set up, and messages that carry a link to one of them, so tapping one opens the right page. Analog keeps only the latest few, on your phone only, and stops using a notification after 10 minutes and a link after 24 hours.
• –Your settings: which apps are on, what you hide and how many switches to the real app you allow are stored on your phone only.
• –The companies' own policies: in a quiet app you are using that company's website, so what you do there is collected by that company under its own privacy policy, as it would be in a browser.
• –Removing it: to sign out of a quiet app, sign out inside it. Deleting Analog from your phone removes your quiet app logins and everything Quiet mode stored.

15. Children's Privacy

The Services are for users 18 and older, carry a 17+ App Store rating, and are not directed to children. We do not knowingly collect personal information from anyone under 18.

16. Security

Your behavioral data is keyed to a random account ID; identity and behavioral data are separated by access controls; your Apple ID identifier (and, on Android, your Google account identifier) is stored only as a keyed one-way hash; and data is encrypted in transit and at rest, with role-separated database access. No system is perfectly secure, and we cannot guarantee absolute security; a sufficiently capable compromise of our infrastructure could, in principle, link data, which is why we minimize what we collect and separate identity from behavior.

17. Data Breaches

If a breach affecting your personal information occurs, we will notify you and the relevant authorities as required by applicable law.

18. Changes to This Privacy Policy

We may update this Policy. We will update the “Last updated” date above and, where required, provide additional notice or obtain consent. If a change materially expands how we use your data (for example, if we begin uploading health summaries), we will require existing users to review and re-accept before that change applies to them.

19. Contact Us

Questions, requests, or to exercise your rights:

• –Email: privacy@turnanalog.com

Analog Wellbeing Inc.'s designated Privacy Officer can be reached at the email address above. If you are in Canada and have a concern about how we handle your personal information that we are unable to resolve, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca (and, in Quebec, the Commission d'accès à l'information).