Privacy Policy

Fit App Block locks apps you choose until you reach your daily step goal. This Privacy Policy explains what data the app uses, what stays on your device, what is stored in the cloud, who can see it, and how to delete it.

1. Your Account

• Google Sign-In: You sign in with your Google account through Firebase Authentication. We receive your Google account's email address, display name, and a unique user ID.
• Account Profile: A basic profile (user ID, email address, account status, creation date, and your cloud sync choice) is stored in Google Cloud Firestore so that sign-in works across devices.
• Security Log: Sign-ins, account creation, and data deletion requests are recorded in a write-only log (user ID, event type, and time). This log is used to prevent abuse and to verify that deletion requests were carried out.

2. Fitness Data

• What We Read: The app reads your step count from Android Health Connect (with the READ_STEPS permission). It also records the names of the apps that wrote those steps (for example, Google Fit or Samsung Health) so it can show where your count came from.
• Why: Steps are used only to decide whether you have reached your step goal, to unlock your restricted apps, to show your progress and history, and to share progress with partners if you choose to.
• On Your Device: Today's step count is stored in the app's private storage and refreshed about every minute while the app is monitoring your restricted apps.
• Health Connect Limited Use: Data obtained through Health Connect is never sold, never used for advertising, and never used for any purpose other than the features described in this policy. It is not shared with third parties except as needed to provide those features (for example, storing it in Firestore when cloud sync is on, or showing it to a partner you have allowed).

3. Cloud Sync (Optional)

When you first sign in, you choose whether to turn on cloud sync. You can change this later in Settings. With cloud sync off, your goals, restricted apps, and step data stay on your device, and only your account profile and security log are stored in the cloud.

With cloud sync on, the following is stored in Firestore under your account so it can sync across your devices and be shared with partners:

• Settings: Your step goal, Sabbath mode setting, and break mode setting.
• Restricted Apps: The package name and display name of each app you restrict, whether it is currently restricted, and a history of when you added or removed restrictions.
• Daily Steps: Each device's step total for the day, the device's name, and the apps the steps came from. These records are automatically deleted after 90 days.
• Block Activity: The number of times each restricted app was blocked per day. These records are automatically deleted after 90 days.
• Devices: For each device you sign in on: its name (for example, "Pixel 9" or a name you gave it), model, type (phone, tablet, or TV), whether it can count steps, and when it was last active. The device is identified by a one-way hashed ID that cannot be linked across accounts.
• Login History: The dates and times you signed in.
• Blocking Protection Status: Whether the permissions that blocking depends on (such as Accessibility, overlay, and usage access) are turned on, and when they changed.
• Invite Lookup: Your email address is added to a lookup so that other users can invite you as a partner by email.

4. Accountability Partners

• Invitations: If cloud sync is on, you can invite another Fit App Block user by email, or accept their invitation. Partners can see each other's email address.
• Off by Default: When a partnership starts, nothing is shared. You choose, per partner, whether to share each of the following: restricted apps and block activity; steps (today and the last 7 days); step goals; Sabbath mode; and blocking protection status and login activity.
• Access Rules: A partner can read only the categories you have turned on, and only while the partnership is active. Our database security rules enforce this.
• Ending a Partnership: You can remove a partner at any time. Both of you immediately stop seeing each other's data, and the other person is notified. A record that the partnership ended is kept.

5. Advertising

The app shows ads through Google AdMob. The Google Mobile Ads SDK may collect your device's advertising ID, IP address, approximate location derived from your IP, and app interaction and diagnostic data to serve and measure ads. Your step data, health data, and restricted app list are never shared with advertisers. You can reset or delete your advertising ID, or opt out of personalized ads, in Android Settings > Privacy > Ads. Learn more at How Google uses information from sites or apps that use its services.

6. Third-Party Services

The app uses the following Google services. Each processes data under Google's Privacy Policy.

• Firebase Authentication: Google sign-in.
• Cloud Firestore: Stores the account and cloud sync data described above.
• Firebase Crashlytics: Collects crash reports (device model, Android version, app state, and stack traces) so we can fix bugs.
• Google Analytics for Firebase: Collects usage statistics (such as app opens, screens viewed, session length, and device type) along with an app instance ID.
• Firebase Remote Config and Cloud Messaging: Deliver app configuration and service messages, using a Firebase installation ID and a messaging token.
• Google AdMob: Ads, as described in Section 5.

None of these services receive your step counts or restricted app list, except Firestore when cloud sync is on.

7. Permissions Used and Why

• Accessibility Service: Detects when a window changes so the app can tell which app has just been opened and block it right away if it is restricted. It reads only the name of the app that opened. It cannot read screen content, what you type, or any other information from other apps.
• Usage Access (Package Usage Stats): Checks which app is in the foreground and calculates break-mode reward time.
• Display Over Other Apps: Shows the restriction screen on top of an app you have restricted until you reach your goal.
• Query All Packages: Lists the apps installed on your device so you can choose which ones to restrict. This list is not uploaded. Only the apps you choose to restrict are synced, and only if cloud sync is on.
• Health Connect (Read Steps): Reads your step count.
• Foreground Service (Special Use): Keeps app blocking active in the background and checks your steps about every minute.
• Post Notifications: Shows the persistent notification required while the blocking service runs, and partner notifications.
• Internet: Needed for sign-in, cloud sync, partners, and ads.

8. Data Security

Data sent between the app and Google's servers is encrypted in transit (TLS). Firestore security rules allow only you to access your data, and allow a partner to read only the categories you have chosen to share. We do not sell your personal data.

9. Retention and Deletion

• Automatic Expiry: Daily step and block activity records in the cloud are deleted automatically after 90 days.
• Turn Off Cloud Sync: Deletes your synced data from the cloud (restricted apps and their history, steps, block activity, devices, and login history), ends your partnerships (your partners are notified), and removes you from the invite lookup. Data on your device is kept.
• Delete All Data (in Settings): Deletes all of the above from the cloud and clears your goals, restricted apps, and step data from your device. You stay signed in, and only your basic account profile remains.
• Delete Account (in Settings): Deletes all cloud data, your account profile, and your Firebase account, then signs you out and erases the app's data on your device.
• Uninstalling: Removes all data stored on your device. It does not delete data in the cloud. To delete that data, use Delete Account before uninstalling, or contact us.
• What We Keep: Entries in the security log (user ID, event type, and time) and records that partnerships ended are kept for security and abuse prevention. Crash, analytics, and advertising data are kept by Google under its own retention policies.
• Revoking Access: You can revoke Health Connect, Accessibility, usage access, overlay, and notification permissions at any time in Android Settings.

You can also ask us to delete your account and data by emailing fitappblock@gmail.com from the email address linked to your account.

10. Changes to This Policy

We may update this policy as the app changes. When we do, we will update the effective date above, and we will notify you in the app about significant changes.

11. Contact Us

If you have any questions about this privacy policy or how your data is handled, please contact us at: fitappblock@gmail.com