Privacy Policy

Overview

Accountability Shield is a digital-habit and accountability service available as a Chrome extension, iPhone/iPad app, Android app, and website. We help you stay accountable by blocking distracting websites or apps, providing usage insights where available, and notifying accountability partners you choose. The data we collect depends on your platform, plan, permissions, and enabled features.

We are committed to:

• Transparency: Being clear about what data we collect and why
• Minimal data collection: Only collecting what's necessary to provide our service
• User control: Giving you full control over your data
• No selling: Never selling your data to third parties
• AI privacy: We use your data to provide your features and insights, not to sell personal profiles
• Security: Protecting your data with industry-standard security measures

Platform Differences

Chrome Extension

The Chrome extension can process domain-level browsing activity for website blocking and accountability. When analytics or paid AI features are available on your plan, it may upload hourly domain aggregates such as domain names, counts, timestamps, categories, and blocked attempts so your analytics and AI features can work. The Chrome Free plan supports limited blocking/accountability and does not include analytics or AI Coach access.

iPhone and iPad

The iOS app uses Apple Screen Time, Family Controls, Managed Settings, Device Activity, and Network Extension/DNS proxy features to support app selection, app limits, website protection, local analytics, and protection notifications. Screen Time reports, app-selection tokens, local app aliases, local analytics snapshots, and local coach/reflection sessions are processed and stored on device. Account, billing, authentication, push-token, protection-status, and explicit accountability event data may still be sent to our servers when needed to operate the service.

Android

The Android app uses Usage Access, installed app/package visibility, VPN/DNS filtering, foreground services, and notifications to provide app blocking, app time limits, website protection, and accountability. Depending on your plan and enabled settings, Android app usage and domain analytics may sync to our backend for analytics, accountability, AI features, troubleshooting, and cross-device continuity.

Data We Collect

1. Account Information

When you create an account, we collect:

• Email address: Used for account authentication, password recovery, and sending accountability notifications
• Name: First name, last name, or display name you choose to provide
• Password: Stored securely using bcrypt hashing (we never store passwords in plain text)
• Authentication identifiers: Social sign-in identifiers such as Google ID or Apple user ID if you choose those login methods
• Profile image: Profile picture URL if provided by a social login provider or added by you
• Extension, app, or device identifiers: Extension user ID, app installation ID, device ID, push notification token, RevenueCat app user ID, and related identifiers used to associate your account with installed clients, sync activity, deliver notifications, and manage entitlements

2. Blocking Configuration Data

To provide the blocking functionality, we store:

• Accountability groups: Names and descriptions of groups you create
• Blocked websites and apps: Domain patterns, keywords, app identifiers, and app names you choose to block or limit
• Group settings: Blocking schedules, time limits, exceptions, and custom rules you configure
• Accountability partners: Names and email addresses of people you invite to receive notifications

3. Domain and Website Activity

For website blocking, accountability, and analytics where available, we may process:

• Domain visits: Websites you visit or attempt to visit (domain names only, not full URLs or page content)
• Visit frequency: How often you visit specific domains
• Timestamps: When you visit or attempt to visit domains
• Categories: Automatic categorization of domains (e.g., social media, streaming, productivity)
• Hourly aggregates: On Chrome and Android, eligible analytics data may be aggregated by hour and synced to our backend for analytics and AI features where available
• Block attempts: When you attempt to access blocked websites or domains
• iOS local-only website analytics: On iPhone, website usage summaries and local analytics generated from Screen Time or DNS protection remain on device and are not uploaded as usage analytics

4. Mobile App Usage Data

For mobile app blocking, app time limits, and app usage insights, we may process:

• Platform and device context: Platform, device ID, browser/app version, and related client metadata needed to process synced analytics
• Android app usage: Installed package names, app labels, app categories where available, foreground app activity, open counts, usage duration, time-limit status, and blocked attempts may sync to our backend where analytics/accountability features require it
• iOS app selections: Apple app-selection tokens, app aliases you provide, selected apps, time-limit status, and local Screen Time reports are processed on device and are not uploaded as usage analytics
• Notification history: Records of which accountability events were sent, to whom, and when

5. iOS Local-Only Screen Time and Coach Data

On iPhone and iPad, these items stay on your device unless you choose to submit support diagnostics or a future product version asks for separate consent:

• Screen Time reports: App and website usage summaries generated by Apple's Device Activity system
• App-selection tokens and aliases: Privacy-preserving app tokens from Apple and any app names you save for your own display
• Local analytics snapshots: Daily or weekly app and website summaries shown inside the app
• Local coach/reflection data: Local coach sessions, local coach activity, recommendations, and reflections stored on the device

6. Mobile Permissions and Platform-Specific Protection Data

Some mobile features require operating-system permissions. We use these permissions only to provide the protection, usage insight, notification, and accountability features you enable.

iOS and iPadOS:

• Screen Time, Family Controls, Device Activity, and Managed Settings: Used to let you select apps, apply app restrictions, apply daily limits, and show Screen Time-based usage insights.
• Privacy-preserving app tokens: Apple may provide app-selection tokens instead of readable app names. Where needed, you may provide an app alias so the app can display understandable names to you.
• Website protection: We may use Apple Screen Time website controls and, where you enable strict website protection, Apple's DNS proxy framework to block configured domains across browsers. DNS proxy processing is used to decide whether a requested domain should be allowed or blocked. We do not inspect page contents, form inputs, messages, passwords, screenshots, or full web pages.
• Local-only iOS usage processing: iOS Screen Time reports, app-selection data, local analytics, and local coach/reflection data are processed on device. They are not uploaded to our backend as usage analytics in the current iPhone app.

Android:

• Usage Access: Used to read app usage statistics, foreground app activity, time spent in selected apps, and blocked attempts.
• Installed app visibility: Used to let you search and select apps to block or limit, match selected apps to installed package names, and enforce app protection rules. This may include installed package names, app labels, icons, and category-like metadata available from Android.
• Foreground service and notifications: Used to keep protection noticeable and active when needed, and to notify you about protection status or blocked activity.

7. AI Coach and Local Coach Data

Coach behavior differs by platform:

• Chrome and Android remote AI Coach: If available on your plan and enabled, chat messages, AI responses, chat history, and actions taken may be processed by our backend and AI providers to provide the feature.
• iPhone local coach/reflections: The current iPhone app does not use the remote AI Coach and does not store remote coach chat history. Local coach sessions, local activity, recommendations, and reflections stay on device.
• Actions taken: When a coach feature creates or modifies blocking groups, app limits, or settings, those resulting settings may sync as normal configuration data where the app supports sync.

8. Technical Data

• Device information: Platform (Chrome extension, Android, iOS), device ID for sync
• Browser/app version: To ensure compatibility and provide updates
• Session and authentication data: API keys, access tokens, refresh tokens, and session identifiers used to securely sync data across devices
• Timezone: For accurate schedule-based blocking
• Operational logs: IP address, user agent, request metadata, and limited request or error logs used for security, abuse prevention, troubleshooting, and reliability
• Diagnostics: Crash reports, performance information, device state relevant to protection, and error logs used to diagnose bugs and service reliability issues

9. Billing, Website, and Voluntary Feedback Data

• Subscription and billing data: Plan, billing cycle, purchase state, Stripe customer or subscription IDs, RevenueCat app user ID, product identifiers, store, and renewal/cancellation status
• Payment information: Payment card, bank, App Store, and Google Play payment credentials are processed by Apple, Google, Stripe, or other payment providers. We do not receive or store your full payment card number, bank account number, or store account credentials.
• Website analytics data: When you visit our marketing website, we may collect page views and basic browser/device information through Google Analytics
• Uninstall or support feedback: Reason for uninstalling, optional email address, extension version, plan, and related client identifiers if you choose to submit feedback

🤖 AI and Analytics Features by Platform

Accountability Shield's analytics and AI features are designed to help you understand and improve your digital habits. These features work differently by platform and plan.

Chrome Extension and Android

• Hourly batches: Eligible browsing or app usage data may be aggregated every hour for analytics and AI features where available
• Automatic filtering: Browser infrastructure (updates, telemetry) is automatically excluded
• Upload to secure API: Chrome and Android analytics data may be sent to our backend for analysis, accountability, and AI features depending on your plan and settings
• Local buffering: If offline, data is stored locally and synced when connection resumes

iPhone and iPad

• Local analytics: iOS Screen Time reports, local website summaries, local app usage summaries, and local analytics snapshots stay on device
• No remote iPhone AI Coach: The current iPhone app does not send Screen Time usage data to the remote AI Coach and does not store remote coach chat history
• Local coach/reflections: Any local iPhone coach/reflection sessions, recommendations, and activity are stored on device
• Accountability events: Explicit protection events, such as protection being disabled or a configured blocked event, may still be sent when needed for accountability notifications

Remote AI Features Where Available

• Pattern detection: AI may identify behavioral patterns, peak vulnerability times, and trigger domains or apps
• Risk scoring: AI may calculate a daily risk score based on frequency, timing, and deviation from your baseline
• Trend analysis: AI may track improvements or regressions over time
• Answer questions: "What are my biggest triggers?" "How did I do this week?"
• Manage blocking: Coach features may create or modify blocking groups, limits, and settings when you ask them to
• Plan availability: Chrome Free does not include analytics or AI Coach. Paid plans unlock analytics and AI Coach features where supported by the platform.

How We Use Your Data

We use the data we collect for these specific purposes:

Account Management

• Create and maintain your user account
• Authenticate your login sessions
• Send password reset emails when requested
• Provide customer support
• Support Google and Apple sign-in if you choose those options

Core Blocking Functionality

• Enforce website blocking rules you configure
• Enforce app blocking and daily app time limits you configure on supported mobile platforms
• Sync your blocking groups across devices where you're logged in
• Apply blocking schedules and exceptions
• Maintain pre-loaded blocklists (adult content, gambling, etc.)

Accountability Notifications

• Send email alerts to your designated accountability partners when you attempt to access blocked websites, domains, or apps covered by your protection settings
• Include relevant context in notifications (which site, which group, when)
• Send partner invitation emails
• On iPhone, send explicit protection-event or accountability-event notifications where configured, without uploading Screen Time usage analytics or usage-derived partner summaries

Analytics and AI-Powered Features

• Chrome/Android paid features: Generate risk scores, trends, AI insights, and remote AI Coach responses where available on your plan
• iPhone local features: Show local Screen Time insights, local analytics, and local coach/reflections on device
• Chrome Free plan: Supports limited blocking/accountability but does not include analytics or AI Coach functionality
• Usage-derived partner summaries: May be available for Chrome/Android where enabled, but are not generated from iPhone Screen Time usage uploads

Cross-Platform Sync

• Sync blocking groups, settings, and schedules across all your devices (Chrome, Android, iOS)
• Maintain account, billing, and configuration continuity across platforms
• Enable seamless experience when switching devices
• Do not sync iPhone Screen Time usage analytics or local iPhone coach history to our backend in the current iPhone app

Billing and Subscription Management

• Process purchases, renewals, cancellations, and entitlement checks
• Sync subscription status across web and mobile billing systems
• Prevent duplicate billing and provide subscription support

Security, Website Analytics, and Operations

• Detect abuse, fraud, service misuse, and technical failures
• Maintain audit trails and debugging logs needed to keep the service reliable and secure
• Register and manage push notification tokens for account, protection, and accountability notifications
• Measure marketing website traffic and conversion performance using Google Analytics

Service Improvement

• Use aggregated or de-identified product usage statistics to improve the service
• Identify and fix bugs
• Develop new features based on user needs

Data Sharing and Disclosure

Who We Share Data With

Accountability Partners (By Your Explicit Choice):

• We send email notifications to people you designate as accountability partners
• Notifications may include: your name, the blocked website/domain/app or protection event, the group name, and timestamp
• Chrome/Android usage-derived summaries: Where available and enabled, partners may receive summaries with risk score trends, progress metrics, identified triggers, and success factors
• iPhone usage analytics: We do not upload iPhone Screen Time usage analytics and do not send usage-derived partner summaries from iPhone Screen Time data
• You have full control over who receives notifications and can remove partners at any time

Service Providers:

• Email delivery providers: We use transactional email providers such as Resend or other configured SMTP/email relay providers to send accountability notifications and account emails. They receive email addresses, message content, and delivery metadata.
• Hosting and infrastructure providers: Our API, database, and supporting infrastructure are hosted on cloud platforms such as Railway and related infrastructure providers. They store or process data on our behalf so the service works.
• AI providers: We use OpenAI and Google AI services for remote AI Coach conversations and analytics processing on platforms and plans where those features are available. They receive chat messages and aggregated browsing or app-usage patterns needed to generate responses and insights. They do not receive current iPhone Screen Time usage analytics from the iPhone app.
• Authentication providers: If you sign in with Google or Apple, those providers process your login request and we receive account information needed to authenticate you.
• Billing providers: We use Stripe for web billing, RevenueCat for mobile subscription management, and Apple App Store or Google Play billing for mobile purchases. They process subscription and purchase information needed to activate and maintain your paid plan.
• Push notification services: We use Apple Push Notification service, Firebase Cloud Messaging, Expo notifications, or related platform services to deliver account, protection, and accountability notifications.
• Website analytics provider: Our website may use Google Analytics to measure page visits, traffic sources, and site performance.

When We Share Data

• With your consent: When you explicitly choose to share (e.g., adding accountability partners)
• Legal requirements: If required by law, court order, or government regulation (we will notify you unless legally prohibited)
• Security threats: To prevent fraud, security threats, or illegal activity
• Business transfers: If Accountability Shield is acquired, your data may transfer to the new owner (you will be notified)

Data Storage and Security

How We Store Your Data

• Local storage: Your blocking groups and settings are stored locally in your browser using Chrome's storage API
• Cloud storage: Data is also stored on our secure servers to enable syncing across devices
• Encryption in transit: All data transmission uses HTTPS/TLS encryption
• Encryption at rest: Database is encrypted using industry-standard encryption

Security Measures

We implement multiple layers of security:

• Password hashing: Passwords are hashed using bcrypt with salt
• API authentication: Secure token-based authentication for all API requests
• Access controls: Strict role-based access to data and systems
• Regular audits: Periodic security reviews and vulnerability assessments
• Secure infrastructure: Hosted on reputable cloud providers with strong security track records

Data Retention

• Account data: Retained while your account is active
• Chrome/Android analytics: Hourly aggregates and authoritative Android app usage snapshots stored for 90 days to enable trend analysis, accountability, and AI insights where available
• iPhone local analytics: iPhone Screen Time usage reports, local analytics snapshots, and local coach/reflection history are stored on device and are controlled by your device/app storage unless you submit support diagnostics or delete them through available controls
• Remote AI Coach conversations: Chat history for remote AI Coach features retained for up to 90 days unless a shorter retention or deletion period applies in your product version or we must keep records for security or legal reasons
• Block attempt logs: Retained for 90 days for accountability reporting
• Subscription and billing records: Retained as long as needed to manage your subscription, maintain financial records, resolve disputes, and comply with legal obligations
• Mobile app selection and usage records: Android records are retained only as needed to provide app blocking, daily limits, analytics, accountability reporting, and sync. iOS app-selection tokens and Screen Time-derived usage data remain local to your device in the current iPhone app.
• Operational and security logs: Retained only as long as reasonably necessary for troubleshooting, abuse prevention, security review, and reliability monitoring
• Uninstall or support feedback: Retained as long as reasonably needed to review feedback, improve the product, and provide support
• Deleted accounts: When your account deletion request is processed, we delete or de-identify associated data subject to backup retention, fraud prevention, dispute handling, and legal obligations
• Backup retention: Encrypted backups are retained for 30 days for disaster recovery

Your Rights and Controls

You have the following rights regarding your data:

Access Your Data

• Request information about the personal data we hold about you
• Request a copy of the data we can provide in a reasonably portable format

Correct Your Data

• Update your account information (name, email) at any time
• Modify your blocking groups and settings
• Correct any inaccurate information

Delete Your Data

• Delete blocking groups or remove accountability partners using available product controls
• Request deletion of server-side analytics, remote chat history, uninstall feedback, or your full account in the app where available or by contacting us
• Delete local iPhone analytics, local coach/reflection history, and local app data through available in-app controls or device/app storage controls where available
• Use any in-product account/data deletion controls we make available in current or future versions of the service

Export Your Data

• Request export of account, blocking, server-side analytics, and remote chat data that we can reasonably provide
• iPhone local-only Screen Time reports and local coach/reflection data may not be available to us for export because they remain on your device
• Ask us for a machine-readable copy where applicable

Control Notifications

• Add or remove accountability partners at any time
• Disable notifications for specific groups
• Opt out of system emails (except critical security notices)

Third-Party Services

Accountability Shield uses the following third-party services:

Email Service Provider

• Purpose: Sending accountability notifications, invitations, password resets, and service emails
• Data shared: Email addresses, notification content, timestamps, and delivery metadata
• Examples: Resend or another configured transactional email or SMTP relay provider

Cloud Hosting Provider

• Purpose: Hosting our backend API and database
• Data shared: All data stored on our servers
• Examples: Railway and related infrastructure providers we use to operate the service

AI Processing

• OpenAI: Powers remote AI Coach conversations and related AI assistance features where available on your platform and plan
• Google AI services: Provide remote analytics classification and related AI capabilities where available
• Purpose: Natural language processing, pattern analysis, insight generation, and feature delivery
• Data shared: Remote coach messages, aggregated browsing patterns, and aggregated app-usage patterns needed to provide your enabled Chrome/Android AI features
• iPhone exception: The current iPhone app does not send Screen Time usage analytics, local analytics snapshots, or local coach/reflection history to OpenAI or Google AI services for remote AI processing
• We configure these providers to process data for service delivery and not for advertising. Their handling is also governed by their own terms, privacy policies, and any applicable data processing commitments.

Authentication and Billing Providers

• Google and Apple: Used only if you choose social login
• Apple App Store, Google Play, Stripe, and RevenueCat: Used to process billing, subscriptions, entitlement checks, renewals, cancellations, and subscription support
• Data shared: The identifiers and subscription details needed to authenticate you or maintain your paid plan

Mobile Platform Services

• Apple Screen Time, Family Controls, Device Activity, Managed Settings, Network Extension, and Push Notification services: Used on iOS to provide app selection, time limits, website protection, usage insights, and notifications.
• Google Play Billing, Android Usage Access, package visibility APIs, foreground services, and Firebase/Expo notification services: Used on Android to provide app selection, time limits, app protection, billing, and notifications.
• Data shared: Platform services may process identifiers, app-selection information, purchase records, notification tokens, and device information necessary for the operating-system feature you enable.

Website Analytics

• Google Analytics: Used on our marketing website to measure visits, traffic sources, and page performance
• Data shared: Cookie or tag-based website analytics data such as page views, browser information, and referral information

What We DON'T Use

Children's Privacy

Accountability Shield is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13.

If we discover that we have collected data from a child under 13, we will delete that information immediately. If you believe we have collected data from a child under 13, please contact us at [email protected].

International Data Transfers

Accountability Shield operates globally with servers hosted in multiple regions. Your data may be transferred to, stored, and processed in the United States and other countries where our service providers (hosting, email, AI processing) operate.

By using Accountability Shield, you consent to the transfer of your data to these locations. We ensure that all data transfers comply with applicable data protection laws, including GDPR for European users and CCPA for California residents.

Your Legal Rights (GDPR & CCPA)

For European Users (GDPR)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to access: Obtain confirmation of data processing and a copy of your data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): Request deletion of your data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a machine-readable format
• Right to object: Object to certain types of data processing
• Right to withdraw consent: Withdraw consent for data processing at any time

For California Users (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act:

• Right to know: What personal information we collect and how it's used
• Right to delete: Request deletion of your personal information
• Right to opt-out: Opt out of sale of personal information (we don't sell data)
• Right to non-discrimination: We won't discriminate against you for exercising your rights

Common AI Privacy Questions

"Does the AI see what I'm looking at on websites?"

No. Where remote AI features are available, the AI only receives limited aggregate data such as domain names (e.g., "youtube.com"), visit counts, timestamps, categories, and similar app-usage summaries. It never sees page titles, full URLs, content, images, passwords, or anything you type or view on websites. On iPhone, Screen Time usage analytics are local-only and are not sent to remote AI providers.

"Is my data used to train ChatGPT or other AI models?"

No, not by us. We do not use your personal data to train our own commercial AI models, and we use third-party AI providers to process requests for service delivery rather than for advertising. Their handling is also subject to their own contractual and policy commitments.

"Can other users see my browsing patterns or risk scores?"

No. Your analytics and AI insights are private to you unless you choose accountability partners and enable features that notify or summarize activity for them. Chrome/Android partners may receive configured accountability alerts or usage-derived summaries where available. iPhone Screen Time usage analytics are not uploaded and are not used to generate usage-derived partner summaries.

"What happens if I disable AI features?"

You can disable AI Analytics and the AI Coach at any time. When disabled:

• We stop using new analytics data for AI-generated insights where that control is available in your version of the product
• No new risk scores or insights are generated
• The remote AI Coach becomes unavailable where applicable
• iPhone local coach/reflection data remains on device and can be cleared through available controls where supported
• Website blocking continues to work normally
• Existing analytics data remains subject to this policy's retention and deletion rules

"Can I delete my analytics and chat history?"

Yes. You can request deletion of server-side analytics, remote chat history, uninstall feedback, or your full account through available product controls, in the apps where available, or by contacting [email protected]. Local iPhone analytics and local coach/reflection history stay on device and can be cleared through available app or device controls where supported. We will process deletion requests subject to backup retention, fraud prevention, dispute handling, and legal obligations.

"Does Accountability Shield sell my data to AI companies?"

Never. We do not sell or rent your data to AI companies. When we use AI providers such as OpenAI or Google, they process data to deliver the features you use, subject to their terms, privacy policies, and any applicable data processing commitments.

Cookies, Local Storage, and Tracking

Accountability Shield uses a combination of browser storage, local app storage, and limited website analytics technologies:

Extension and App Storage

• Authentication tokens: To keep you logged in and sync your account
• Settings and cached data: To store blocking groups, schedules, and temporary offline sync data on your device

Website Analytics Cookies or Tags

• Google Analytics: Our website may use analytics cookies, tags, or similar technologies to understand site traffic and conversions
• Scope: This website analytics usage applies to our marketing website, not to the extension's browsing-blocking function

What We Don't Use in the Extension Product

• Third-party advertising cookies for ad targeting
• Sale of browsing activity to advertisers or brokers
• Social media tracking pixels inside the core blocking product

You can clear browser cookies and local storage through your browser settings, and you can log out of the service to invalidate active sessions.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

How we notify you:

• Material changes: Email notification to all users
• Minor changes: Updated "Last Updated" date at the top of this page
• Extension notification: In-app notification for significant changes

Your continued use of Accountability Shield after changes become effective constitutes acceptance of the updated policy. If you disagree with changes, you may delete your account.