Privacy Policy

Dopa Toll is an iOS app made by Alex in Vancouver — one person, no VC, no ads, no engagement loops, and no team of trackers. This document explains the only data the app touches, and what it doesn't. The short version: we never see your data. Everything personal stays on your device. The longer version is below.

Effective: Jul 01, 2026

📱What this app tracks locally

The app records the following on your device only:

• Minutes per tolled app — how long you spent on each app you chose to guard.
• When a cap is hit — the moment a daily limit triggers a shield.
• Stay-strong vs unlock outcomes — whether you walked away or paid to pass.
• Pomodoro sessions — start time, work duration, whether completed, coins earned.
• Coin balance + ledger — every coin earned, spent, or purchased.
• Your hourly rate — the dollar value you assigned to your time.

All of these are written to your iPhone's local storage. They never leave the device by any path under our control.

🚫What this app never asks for

We deliberately do not request, collect, transmit, or store any of the following:

The app has no user accounts and no sign-in. There is no profile to fill out, ever.

☁️iCloud sync (Apple's iCloud, not ours)

If you're signed into iCloud on your iPhone, a small set of values sync across your other Apple devices via Apple's iCloud Key-Value Store:

• Your coin balance
• Your hourly rate
• Streak counters (usage streak, Pomodoro streak)
• Lifetime totals (real money spent, coins earned)

This data lives in your private iCloud account, not on any server we operate. We have no read or write access to your iCloud. Apple processes the sync; we never see it.

Your full day-by-day history (every unlock event, every Pomodoro session) is stored on your device only and is not synced via iCloud Key-Value Store. Apple's iCloud Backup (if you have it enabled) may include this history as part of your phone backup — that's Apple's standard backup behavior, not anything we control.

🔧Diagnostics (Apple MetricKit)

iOS automatically collects aggregated, anonymous performance and crash data using Apple's MetricKit framework. Reports include things like how often the app launched, how much memory it used, and whether it crashed. These reports:

• Are aggregated on your device with differential privacy by iOS
• Contain no personal identifiers
• Are visible to us as anonymous statistics through App Store Connect

Dopa Toll also subscribes to these MetricKit reports directly and saves the raw payloads to the app's own on-device storage so they can be inspected when debugging. They are never uploaded anywhere by the app, are deleted when you delete the app, and leave your device only if you choose to attach them to a support email. Either way they carry no personal identifiers.

This is the standard iOS app diagnostics behavior. You can disable Apple's side of it system-wide in Settings → Privacy & Security → Analytics & Improvements → Share With App Developers.

We use no third-party analytics SDKs. No Firebase, no Mixpanel, no Amplitude, no Facebook SDK, no Google Analytics, nothing of the kind. Ever.

💳Purchases (Apple StoreKit)

If you buy coin packs or subscribe to Dopa Toll Pro, the transaction is processed entirely by Apple's StoreKit infrastructure. We receive:

• A transaction ID (so we can recognize a successful purchase and grant the entitlement)
• Confirmation that the purchase succeeded

We do not receive your credit card number, billing address, or any payment detail. Apple handles all of that.

Subscription receipts are validated locally on your device. They are not sent to a server we operate.

🔐App permissions explained

Dopa Toll uses the following iOS frameworks. Here's what each does and what it can see:

• Screen Time / Family Controls — required to display the shield on the apps you guarded. iOS only tells us which app you tapped (as an opaque token), never what you did inside it. The app names you see in the Tolls list are rendered by Apple's iOS UI, not pulled into our code.
• Notifications — used for three things: Pomodoro session completion, the weekly receipt (one push per week, Mon 9am, summarizing last week's costs), and a one-tap "Open Dopa Toll" bridge when you tap that shield button (iOS doesn't let a shield extension open another app directly, so we send a quick notification as the relay). We do not send marketing, engagement nags, or any unsolicited notifications. You can disable any of these in iOS Settings.
• Live Activities — show running Pomodoro / unlock timers on your lock screen. Local-only.

🧒Children's privacy

Dopa Toll is designed for self-regulation of screen time and contains no objectionable content (no violence, no mature themes, no profanity).

The "no personal data collected" promise above applies to everyone — adult or child. There is nothing to send anywhere, regardless of who is using the app. This satisfies COPPA and similar children's-privacy regulations by structure, not by special handling.

The Apple-assigned age rating is 4+ in most regions — see the App Store listing for the rating in your area.

✋Your control

Because there is no account and no server, you have direct control over your data:

• See what's stored — everything is on your device. Browse it through the app's Stats and Tolls tabs.
• Delete everything — Settings → Delete all my data wipes day-by-day history and resets the app. (Your purchased coins are preserved per our refund stance — Apple won't refund coin packs through us either way, so the value stays yours.)
• Delete the whole app — uninstalling removes the local database. iCloud Key-Value Store retains your balance + rate so they restore on reinstall; if you want a fully clean slate, sign out of iCloud first.

📝Changes to this policy

If we ever change this policy, the Effective date at the top will update. Material changes — anything that broadens what data we touch — will be flagged on this page and in the app's update release notes. We have no current plans to change this policy in any way that would weaken the promises above.

✉️Contact

Questions, corrections, or just curious? Email hi@dopatoll.app. We read every email. We're one person, so the reply might come back in 24–48 hours — but it always comes back.