Upgrade Complete

touchgrass — Privacy Policy

Effective November 5, 2026 · Contact gerrymi@upgradecomplete.net

touchgrass is a wellness app with a virtual pet whose health reflects your screen time and movement. This policy explains what we collect, why, and your choices. Short version: your raw activity stays on your device wherever possible, we sync what the app's features need, we use analytics to see what breaks and how the app is used, we don't run ads, and we never sell your data.

What we collect

Account. When you sign in with Apple or Google we receive your account identifier and email address. You choose a display name and provide a birth date for age-appropriate features. These are stored with your account. We also store your account timezone and server-issued calendar-day boundaries so daily progress remains consistent across daylight-saving changes and travel.

Screen time.With your permission, touchgrass uses Apple's Screen Time framework (or Android usage access) to measure time spent in the apps you choose to track. Which specific apps you selected, and per-app usage detail, stay on your device. We sync how many apps you track, your daily limit, your daily tracked-usage minutes and the score derived from them so your progress and buddy work across the app's features.

Movement. With your permission, touchgrass reads step counts and workouts from HealthKit (or Health Connect / device sensors on Android). Raw health records stay on your device. We sync your daily step total, active minutes, the daily step goal you set, and the derived Movement score. touchgrass never writes health data.

Focus sessions. Start/end times, goal duration, completion, the kind of Focus you chose, and the task you typed, used for Coin rewards and your history. We also sync the daily Focus goal you set. A Focus session credits no egg time.

Quests, collection, and Coins. Quest activation, progress, completion and reward history; your Coin balance and transaction history; Shop orders made with Coins; the buddies, Eggs, world items (trees, flowers, landmarks and skies) and Reactions you earn or buy; and where you place items in your world. touchgrass does not currently sell Coins or items for real money.

Social. If you use Friends and Groups: your friend handle, friendships, group memberships, and the buddy snapshot you share (buddy identity, health, scores, streak, daily minutes/steps, and screen-time limit). Privacy tiers control what group members can see. Friends features are optional.

If you turn on Focus sharing, friends and anyone on an Adventure with you also see that you are focusing, the kind of Focus, the task you typed, and when the session ends. On iOS that is one switch, so a shared session shares its task — you cannot share the session and withhold the task.

Friends also see a timeline of your past week. It shows the Focus sessions of five minutes or more that you shared with friends (when each started, how long it ran and whether you finished it; its kind and task only if you shared the task), each buddy you hatch with its name and appearance, and, only if you turn on step milestones, the highest step milestone you reached each day (5,000, 10,000, 15,000 or 20,000 steps), never your step count. Step milestones are off until you turn them on.

If you join a friend's Focus, your friends and anyone on an Adventure with you can see that session and who you're focusing with, even if you don't usually share Focus. Its kind and task stay private unless you share them.

In an Adventure, your Focus time, and your daily steps if Movement is on, count together toward your party's weekly goal. Members see how full your share is as a percentage, which blends the two and doesn't show either one. In a party of two, each of you can work out the other's share from the party's total. A party's scenes follow its owner's clock, so members can work out the owner's UTC offset from when scenes play. We keep the name of the owner's time zone with that Adventure's weeks on our servers, and members don't see it.

Reactions. When you send a Reaction, we store the sender, recipient, optional group, Reaction identifier, delivery/read state, and timestamps so it can be delivered, displayed, and dismissed.

Push tokens & device info. Device push tokens (to deliver notifications and to start/end Live Activity countdowns), platform, and app version.

Diagnostics. Crash and anomaly reports without advertising identifiers. TestFlight/Play beta feedback is handled by Apple/Google under their terms.

Analytics. We use PostHog, an analytics service hosted in the United States, to see what breaks and how people use the app. PostHog receives:

  • What you do in the app, such as opening it, opening a notification, moving through first-run steps, hatching and naming your first buddy, collecting a quest, connecting Health or tracked apps, opening and starting Focus, opening the Shop, and sharing an invite.
  • Crash reports with stack traces, and reports when your buddy can't be displayed or a Focus session fails to start or finish.
  • Device and app details: device model and type, operating system, screen size, app version and build, language, time zone, and whether you're on Wi-Fi or cellular.
  • How many friends you have, and how many Shop items you can afford when you open the Shop, each as none, one, or two or more.
  • A random ID stored on your device and, once you sign in, your touchgrass account ID. The account ID links these events to your account, including ones sent before you signed in.
  • Your approximate location, such as your country, region, city, and postal code. PostHog estimates it from your IP address and doesn't keep the address.

PostHog never receives your steps, workouts, or anything else from HealthKit or Health Connect; your tracked-app minutes or which apps you track; your buddy's health or mood; the text of your Focus tasks; or your buddy names, handle, display name, or email. PostHog keeps these events for up to one year.

What we don't do

  • No advertising, no ad tracking, no cross-app tracking.
  • No selling or renting personal data.
  • No reading of your notifications, messages, or browsing content. App blocking happens on-device via the system's Screen Time machinery.

Where data lives

Synced data is stored in touchgrass's private application database and object storage hosted on Google Cloud. We use it to operate the app: syncing progress across sessions, powering social features you opt into, and sending notifications you enable. We also query it on our own systems to run and improve the app, for example to see how many people use a feature, keep the Coin economy balanced, and measure in aggregate whether, over the weeks, tracked-app time falls, Focus time grows, and people raise their daily step goal. We don't use step counts or workout data for this.

Analytics and crash reports are stored by PostHog in the United States. Notification delivery uses Apple Push Notification service on iOS and Firebase Cloud Messaging on Android.

Your choices

  • Screen Time and Health permissions are optional and can be revoked in system settings; the related features simply stop.
  • Notifications are optional and configurable in-app.
  • Social features are optional. Friends see your Focus sessions only if you share them or join a friend's Focus, and your step milestones only if you turn them on. A group's members see what your privacy tier for that group allows, which you can change at any time.
  • Analytics is on by default. You can turn it off in Settings, and the app then stops sending analytics and crash reports to PostHog. If your app store region is in the EU or the UK, or the app can't tell your region, it asks first and sends nothing unless you agree.

Deleting your account

Settings → Delete Account permanently deletes your account and personal synced data — buddies, cosmetics, focus history, friendships, and groups you own. Immutable economic records are retained only in de-identified form: the account identifier is replaced with a random, unlinkable identifier for ledger, refund, fraud-prevention, and accounting integrity. This is immediate and irreversible; signing in again later starts a brand-new account. It also tells PostHog to delete your analytics profile and events. PostHog clears events in scheduled batches, so they can take longer to go.

Children

touchgrass is not directed at children under 13 (or the equivalent minimum age in your region), and we do not knowingly collect data from them. The app sends no analytics until you pass its age check or sign in to an existing account.

Changes

We'll update this page when the policy changes and note the new effective date above. Material changes will be called out in the app or release notes.