Privacy Policy

Introduction

Toorta ("we," "our," or "the app") is a digital wellness application that helps you reduce screen time through commitment-based accountability. This Privacy Policy explains what data we collect, how we use it, and your rights.

What Data We Collect

Screen Time Data

• What: Usage minutes for the single app you select to monitor
• How: Collected via Apple's Screen Time APIs (FamilyControls and DeviceActivity frameworks)
• Scope: We only track the ONE app you explicitly choose. We cannot and do not access usage data for any other apps on your device.
• Storage: Usage data is stored locally on your device and synced to our secure servers for commitment evaluation

Account Data

• What: Email address, username, and authentication tokens
• How: Provided by you during registration or via Apple Sign In
• Purpose: Account identification and communication

Payment Data

• What: Payment method details (credit/debit card)
• How: Processed entirely by Stripe, Inc. — our PCI-compliant payment processor
• Important: We never store your full card number, CVV, or other sensitive payment details on our servers. Stripe handles all payment data directly.

Commitment Data

• What: Your commitment details (selected app, daily limit, duration, deposit amount), evaluation results, and transaction history
• Purpose: To operate the commitment system and maintain your account history

Device Data

• What: Device timezone, push notification token
• Purpose: Accurate daily tracking and sending relevant notifications

How We Use Your Data

We use your data exclusively to:

1. Track your screen time for the app you selected, within your commitment
2. Evaluate your weekly progress (success or failure) based on your daily limit
3. Process commitment deposits and returns via Stripe
4. Send you notifications about your commitment status, weekly results, and reminders
5. Maintain your account and commitment history

We do NOT:

• Sell your data to third parties
• Use your data for advertising
• Share your screen time data with other users
• Track apps you haven't selected
• Access your contacts, photos, messages, or any other personal data

Data Storage and Security

• Server: Our backend runs on Heroku (Salesforce) with encrypted data at rest and in transit (TLS/SSL)
• Database: PostgreSQL with encrypted connections
• Payments: Stripe (PCI DSS Level 1 compliant) — the highest level of payment security certification
• Authentication: JWT tokens with automatic expiration and refresh
• Screen Time data: Stored in Apple's App Group shared container on your device, synced to our servers via encrypted HTTPS

Data Retention

• Account data: Retained while your account is active. Deleted upon account deletion request.
• Screen time data: Retained for the duration of your active commitment plus 90 days for dispute resolution.
• Payment records: Retained as required by financial regulations (typically 7 years for transaction records).
• Audit logs: Retained for 1 year for service integrity and dispute resolution.

Your Rights

You have the right to:

• Access your data at any time through the app
• Delete your account and associated data by contacting us
• Export your commitment and usage history
• Opt out of non-essential notifications through your device settings
• Revoke Screen Time tracking permission at any time through iOS Settings

Third-Party Services

Children's Privacy

Toorta is not intended for use by children under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, please contact us to have it removed.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification or email. Continued use of Toorta after changes constitutes acceptance of the updated policy.

Contact

For privacy questions, data deletion requests, or concerns:
Email: support@toorta.com