touchgrass — Privacy Policy

Account. When you sign in with Apple or Google we receive your account identifier and email address. You choose a display name and provide a birth date for age-appropriate features. These are stored with your account. We also store your account timezone and server-issued calendar-day boundaries so daily progress remains consistent across daylight-saving changes and travel.

Screen time.With your permission, touchgrass uses Apple's Screen Time framework (or Android usage access) to measure time spent in the apps you choose to track. Which specific apps you selected, and per-app usage detail, stay on your device. We sync your daily tracked-usage minutes and the score derived from them so your progress and buddy work across the app's features.

Movement. With your permission, touchgrass reads step counts and workouts from HealthKit (or Health Connect / device sensors on Android). Raw health records stay on your device. We sync your daily step total and the derived Movement score. touchgrass never writes health data.

Focus sessions. Start/end times, goal duration, and completion of Focus sessions you run, used for hatching progress and your history.

Social. If you use Friends and Groups: your friend handle, friendships, group memberships, and the buddy snapshot you share (buddy identity, health, scores, streak, daily minutes/steps, step goal and screen-time limit). Privacy tiers control what group members can see. Friends features are optional.

Push tokens & device info. Device push tokens (to deliver notifications and to start/end Live Activity countdowns), platform, and app version.

Diagnostics. Crash and anomaly reports without advertising identifiers. TestFlight/Play beta feedback is handled by Apple/Google under their terms.

• No advertising, no ad tracking, no cross-app tracking.
• No selling or renting personal data.
• No reading of your notifications, messages, or browsing content. App blocking happens on-device via the system's Screen Time machinery.

Synced data is stored with our backend provider (Supabase) and used only to operate the app: syncing your progress across sessions, powering social features you opt into, and sending the notifications you enable. Notification delivery uses Apple Push Notification service on iOS and Firebase Cloud Messaging on Android.

• Screen Time and Health permissions are optional and can be revoked in system settings; the related features simply stop.
• Notifications are optional and configurable in-app.
• Social sharing is opt-in, per privacy tier.

Settings → Delete Account permanently deletes your account and personal synced data — buddies, cosmetics, focus history, friendships, and groups you own. Immutable economic records are retained only in de-identified form: the account identifier is replaced with a random, unlinkable identifier for ledger, refund, fraud-prevention, and accounting integrity. This is immediate and irreversible; signing in again later starts a brand-new account.

touchgrass is not directed at children under 13 (or the equivalent minimum age in your region), and we do not knowingly collect data from them.

We'll update this page when the policy changes and note the new effective date above. Material changes will be called out in the app or release notes.