Privacy Policy

Account information

• Email address and password (for web accounts stored in our PostgreSQL database)
• Account identifiers, subscription tier, and entitlement status
• Firebase authentication identifiers on some mobile or legacy clients

Billing and payments

• Checkout references, payment status, product purchased, and currency
• Payment channel (for example M-Pesa or card) processed by Paystack
• We do not store full card numbers or M-Pesa PINs on our servers

Device and sync data

• Device platform, app version, timezone, and last-seen timestamps
• Blocklist metadata (app identifiers and domains you choose to block — not in-app message content)
• Focus session summaries and usage analytics you choose to sync

Technical and usage data

• IP address, browser type, and diagnostic logs for security and reliability
• Crash reports and performance metrics
• Cookies or local storage tokens to keep you signed in on the web

Information we do not collect

• Content inside other apps (messages, emails, browsing history within pages)
• Contacts, photos, microphone, or camera (unless a future feature explicitly requests it and you consent)
• Precise GPS location

We use information to:

• Create and secure your account and authenticate sessions
• Provide blocking, focus sessions, schedules, and cross-device sync
• Process subscriptions, renewals, refunds where applicable, and payment reconciliation
• Operate the web dashboard (devices, blocklists, payments, and account settings)
• Improve reliability, detect abuse, and prevent fraud
• Send service messages (receipts, renewal reminders, security alerts)
• Comply with law and enforce our Terms of Service

We do not sell your personal information.

We share information only when necessary:

Service providers

• **Paystack** — payment processing (M-Pesa, cards)
• **Google Play / Apple App Store** — in-app purchases where you buy through those stores
• **Cloud hosting** — databases and API infrastructure for pauseward-api
• **Firebase / Google Cloud** — optional legacy sync, marketing site configuration, or mobile auth where enabled

Legal and safety

• When required by law, court order, or government request
• To protect rights, safety, and security of users and Pauseward

Business transfers

• If we merge, acquire, or sell assets, data may transfer subject to this policy

We require processors to handle data only for our instructions and apply appropriate safeguards.

We use administrative, technical, and organizational measures including:

• Encrypted connections (HTTPS/TLS) for web and API traffic
• Hashed passwords for web accounts (passwords are not stored in plain text)
• Access controls on production databases and admin tools
• Webhook signature verification for payment providers

No method of transmission or storage is 100% secure. Please use a strong, unique password and keep it confidential.

Mobile and desktop apps may request OS permissions to function:

Android

• **Accessibility / usage access** — detect when a blocked app opens and show blocking UI
• **Display over other apps** — focus overlays and reminders
• **Usage stats** — screen-time and app-duration analytics

iOS / macOS

• **Screen Time / Family Controls** (where supported) — app shields and limits
• **Notifications** — focus session reminders

What permissions do not allow

• Reading private content inside other applications
• Recording your screen without your knowledge
• Accessing unrelated personal files

You can revoke permissions in system settings; some features may stop working.

Depending on your location, you may have the right to:

• Access a copy of personal data we hold about you
• Correct inaccurate account information
• Delete your account and associated cloud data
• Export portable copies of your data
• Object to or restrict certain processing
• Withdraw consent where processing is consent-based

To exercise these rights, contact us at the email below. We may verify your identity before fulfilling requests.

Kenya Data Protection Act and other applicable laws may provide additional rights for residents of Kenya and other regions.

Pauseward is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it promptly.

Family plans may be managed by a parent or guardian who is responsible for minors' use of the Service.

We retain data while your account is active or as needed to provide the Service.

After account deletion:

• Account and profile data are removed from active systems within a reasonable period
• Billing records may be kept longer where required for tax, accounting, or legal obligations
• Anonymized analytics may be retained to improve the product

You may request deletion by contacting support or through in-app settings where available.

Pauseward is operated from Kenya and may process data in Kenya, the United States, the European Union, or other regions where our providers host infrastructure.

When we transfer data internationally, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms where required by law.

If you use the Service from the EU, UK, or other jurisdictions with specific privacy laws, you may have additional rights as described in the "Your Privacy Rights" section.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Post the updated policy on this page with a new effective date
• Update the version history below
• Notify registered users by email or in-app notice when appropriate

Continued use of the Service after changes become effective constitutes acceptance of the updated policy.