Privacy Policy — climbr

Last updated: 17 July 2026

climbr is a screen-time and self-accountability app for iPhone. This policy explains exactly what the app collects, where it goes, and what we can never see. It describes the app as it is actually built — not as we might like it to sound.

Who we are. climbr is operated by Jacob Simangunsong ("we", "us"). For any privacy question, or to exercise any right below, contact us at fokupaysupport@gmail.com.

The short version

• Your Screen Time data never leaves your iPhone. Not to us, not to anyone. We are technically incapable of seeing which apps you use or block.
• We store what you type and tap — your goal, your onboarding answers, your journal — so it survives reinstalling and syncs across your devices.
• We use no advertising, no analytics SDKs, and no third-party trackers. We do not track you across other companies' apps or websites, and we never sell or share your data.
• Everything is tied to your account only, and you can delete all of it from inside the app, at any time.

What we collect

1. Account information

If you create an account (Sign in with Apple, Sign in with Google, or email and password), we store your email address and a user ID. If you use Sign in with Apple's Hide My Email, we only ever receive the relay address — that is Apple's design, and it is fine by us.

If you never sign in, the app works offline and nothing is transmitted at all. Everything below stays on your phone.

2. What you tell us during onboarding

climbr asks you questions so it can build your plan and speak to you in your own words. If you are signed in, your answers are stored on our servers so they survive a reinstall:

• Your first name, age, gender, and occupation
• How many hours a day you estimate you spend on your phone, and the age you got your first phone — your estimates, not measurements
• Which apps you say waste your time, from a list we show you
• What you value an hour of your time at
• Your goal, your deadline, and who you're doing it for
• Your answers about habits and past attempts — what you do when you're bored or stressed, what you've tried before and why it didn't work
• Who you are today and who you want to become, in your own words

3. Your journal

If you write a nightly entry, we store its text, the date, and whether you marked the day Closer, Held, or Slipped. This is free text and it is personal. Write only what you're comfortable storing.

4. Your settings and progress

Your blocking schedules, chosen difficulty, notification times, streak, altitude, and your bail-out ledger (how many times you ended a block early, and what that cost).

5. Purchases

Subscriptions and the Hardcore consumable are billed by Apple, not by us. We never see your card, and Apple does not give it to us. We only store whether your subscription is currently active.

What we do NOT collect — and cannot

Your actual Screen Time data never leaves your device. This is worth being precise about, because it is the whole point:

• When you pick apps to block, iOS hands climbr opaque tokens, not names. We cannot read them. climbr genuinely does not know that a token is Instagram — Apple designed it that way, and it applies to us like everyone else.
• Those tokens are stored only in a private container on your iPhone. They are never uploaded, and they do not sync between your devices. (This is why, after reinstalling, you have to pick your apps again. That's not a bug.)
• We do not collect your real usage figures, pickup counts, notification counts, location, contacts, photos, health data, or browsing history.

We also do not use advertising identifiers, ad networks, attribution SDKs, or any third-party analytics. Because we do not track you across other companies' apps or websites, climbr does not ask for App Tracking Transparency permission.

Why we hold it, and on what basis

We use your data only to make the app work for you: to build your plan, show your goal on the shield, keep your streak honest, remind you at the times you chose, and restore everything when you sign in on a new phone.

For users in the UK/EU, our lawful basis is performance of a contract — the app cannot deliver what you signed up for without it. Where your journal entries or habit answers reveal something about your wellbeing, we rely on your explicit consent, given by choosing to write them. You can withdraw that consent at any time by deleting the entries or your account.

We do not use your data for automated decision-making or profiling.

Who else touches it

• Supabase — our database and authentication provider, acting on our instructions as a processor. Your data is stored in their infrastructure and protected by row-level security, so one account can never read another's.
• Apple — sign-in and all payments.
• Google — only if you choose Sign in with Google.

That's the entire list. We do not sell your data, share it with advertisers or data brokers, or hand it to anyone for their own purposes.

How long we keep it

For as long as your account exists. Delete your account and the record is removed — not archived, not anonymised and retained. Some deletion may persist briefly in routine encrypted backups before ageing out.

Your rights

Wherever you live, you can delete everything from inside the app (More → Delete account). That removes your account and its data.

If you are in the UK/EU (GDPR), California (CCPA/CPRA), or a comparable regime, you also have the right to access a copy of your data, correct it, restrict or object to processing, port it elsewhere, and complain to your local data protection authority. Write to fokupaysupport@gmail.com and we will respond within 30 days. We will never charge you or degrade the app for exercising these rights.

Children

climbr is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has given us their information, contact us at fokupaysupport@gmail.com and we will delete it.

Security

Data is encrypted in transit and at rest. Row-level security means your rows are readable only by your authenticated account. No system is perfectly secure, but we do not store payment details or Screen Time data — the two things worth stealing are simply not there.

Changes

If we change this policy we will update the date above, and tell you in the app if the change is material.

Questions? fokupaysupport@gmail.com