Privacy Policy

Dopa Toll is an iOS app made by Alex in Vancouver. One person, no VC, no ads, no engagement loops, and no team of trackers. This document explains the only data the app touches, and what it doesn't. The short version: we never see your data. Everything personal stays on your device. The longer version is below.

Effective: Jul 27, 2026

📱What this app tracks locally

The app records the following on your device only:

• Minutes per tolled app: how long you spent on each app you chose to guard.
• When a cap is hit: the moment a daily limit triggers a shield.
• Stay-strong vs unlock outcomes: whether you walked away or paid the toll in coins.
• Pomodoro sessions: start time, work duration, whether completed, coins earned.
• Coin balance + ledger: every coin earned, spent, or purchased.
• Your hourly rate: the dollar value you assigned to your time.
• A daily screen-time total for the whole phone: one number per day, from Apple's Screen Time. It is your total foreground time across the phone, not counting Dopa Toll itself, plus the same total for your tolled apps. We use it to show your phone time next to what you paid in tolls. It is a sum, not a list. We never receive which apps made it up, or their names. You can erase it any time in Settings → Troubleshooting → "Delete Screen Time history".

All of these are written to your iPhone's local storage. The only place any of it goes is your own iCloud account, described below. Never to a server we operate.

🚫What this app never asks for

We deliberately do not request, collect, transmit, or store any of the following:

The app has no user accounts and no sign-in. There is no profile to fill out, ever.

☁️iCloud sync (Apple's iCloud, not ours)

If you're signed into iCloud on your iPhone, a small set of values sync across your other Apple devices via Apple's iCloud Key-Value Store:

• Your coin balance
• Your hourly rate
• Streak counters (usage streak, Pomodoro streak, and your longest of each)
• Lifetime totals (real money spent, coins earned, coins purchased)
• The daily screen-time totals described above, stored one month per entry, so they survive a reinstall
• The date you first used the app

This list is meant to be complete rather than illustrative. If we add a value to it, this page changes in the same release.

This data lives in your private iCloud account, not on any server we operate. We have no read or write access to your iCloud. Apple processes the sync, and we never see it.

Your event-level history, meaning every individual unlock and every Pomodoro session, is not in that Key-Value sync. It stays on your device. The daily screen-time totals listed above are the one day-by-day thing that does sync, and they are per-day sums rather than events. Apple's iCloud Backup, if you have it enabled, may include your full history as part of your phone backup. That's Apple's standard backup behavior, not anything we control.

🔧Diagnostics (Apple MetricKit)

iOS automatically collects aggregated, anonymous performance and crash data using Apple's MetricKit framework. Reports include things like how often the app launched, how much memory it used, and whether it crashed. These reports:

• Are aggregated on your device with differential privacy by iOS
• Contain no personal identifiers
• Are visible to us as anonymous statistics through App Store Connect

Dopa Toll also subscribes to these MetricKit reports directly and saves the raw payloads to the app's own on-device storage so they can be inspected when debugging. They are never uploaded anywhere by the app, are deleted when you delete the app, and leave your device only if you choose to attach them to a support email. Either way they carry no personal identifiers.

This is the standard iOS app diagnostics behavior. You can disable Apple's side of it system-wide in Settings → Privacy & Security → Analytics & Improvements → Share With App Developers.

We use no third-party analytics SDKs. No Firebase, no Mixpanel, no Amplitude, no Facebook SDK, no Google Analytics, nothing of the kind. Ever.

✉️If you send us a debug log

Settings → Troubleshooting has a "Share debug log" row. It opens an email to us, pre-filled so you can read every line before you send it. Nothing is transmitted unless you press send.

What it fills in: your device model, iOS version, region/language, the app version, how many tolls you have set up, whether an unlock is currently running, and today's counters (app opens, stay-strongs, coins spent). No app names, no history, no account or contact details beyond the email address you're sending from.

💳Purchases (Apple StoreKit)

If you buy coin packs or subscribe to Dopa Toll Pro, the transaction is processed entirely by Apple's StoreKit infrastructure. We receive:

• A transaction ID (so we can recognize a successful purchase and grant the entitlement)
• Confirmation that the purchase succeeded

We do not receive your credit card number, billing address, or any payment detail. Apple handles all of that.

Subscription receipts are validated locally on your device. They are not sent to a server we operate.

🔐App permissions explained

Dopa Toll uses the following iOS frameworks. Here's what each does and what it can see:

• Screen Time / Family Controls: required to display the shield on the apps you guarded. iOS only tells us which app you tapped (as an opaque token), never what you did inside it. The app names you see in the Tolls list are rendered by Apple's iOS UI, not pulled into our code.
• Notifications: all of them are about something you just did or asked for. Pomodoro session start, break-ended and session-completion notices. The weekly receipt, one push per week, Mon 9am, summarizing last week's costs. A one-tap "Open Dopa Toll" bridge when you tap that shield button (iOS doesn't let a shield extension open another app directly, so we send a quick notification as the relay). And, only if you start a Pro free trial, a single reminder two days before it charges so you can cancel first if you don't want to keep Pro. We do not send marketing, engagement nags, streak guilt, or any notification you didn't set in motion. You can disable any of them in iOS Settings.
• Live Activities: show running Pomodoro / unlock timers on your lock screen. Local-only.

🧒Children's privacy

Dopa Toll is designed for self-regulation of screen time and contains no objectionable content (no violence, no mature themes, no profanity).

The "no personal data collected" promise above applies to everyone, adult or child. There is nothing to send anywhere, regardless of who is using the app. This satisfies COPPA and similar children's-privacy regulations by structure, not by special handling.

The Apple-assigned age rating is 4+ in most regions. See the App Store listing for the rating in your area.

✋Your control

Because there is no account and no server, you have direct control over your data:

• See what's stored: everything is on your device. Browse it through the app's Stats and Tolls tabs.
• Delete everything: Settings → Troubleshooting → Delete all my data wipes day-by-day history and resets the app. (Your purchased coins are preserved per our refund stance, and Apple won't refund coin packs through us either way, so the value stays yours.)
• Delete the whole app: uninstalling removes the local database. iCloud Key-Value Store retains your balance + rate so they restore on reinstall. If you want a fully clean slate, sign out of iCloud first.

📝Changes to this policy

If we ever change this policy, the Effective date at the top will update. Material changes, meaning anything that broadens what data we touch, will be flagged on this page and in the app's update release notes. We have no current plans to change this policy in any way that would weaken the promises above.

✉️Contact

Questions, corrections, or just curious? Email hi@dopatoll.app. We read every email. We're one person, so the reply might come back in 24–48 hours, but it always comes back.