Privacy Policy

Bernie Bouncer ("the app", "we") is a screen-time app that blocks distracting apps on your iPhone using Apple's Screen Time technology. This policy explains what data the app handles, what stays on your device, and your rights. It covers the Bernie Bouncer iOS app and this website (berniebouncer.com).

The short version

• Your Screen Time data (which apps you use, which apps you block) never leaves your device. Apple's Family Controls framework keeps app identities opaque even to us.
• Using the app requires signing in with Apple or Google. Sign in with Apple lets you hide your real email address.
• We collect a small amount of data to run the service: your account details if you sign in, your onboarding answers, your subscription status, and usage analytics.
• We do not sell your data, we show no ads, and we do not track you across other companies' apps or websites.
• You can delete your account and all associated data at any time inside the app (Profile, Delete account).

Who is responsible (controller)

We are the controller within the meaning of the EU General Data Protection Regulation (GDPR) for the processing described in this policy.

Data that stays on your device

• Screen Time and app-blocking data. The apps and categories you put on your list, your blocking rules, and everything the iOS shield does is processed on-device through Apple's FamilyControls, ManagedSettings, and DeviceActivity frameworks. Apple designs these APIs so that apps like ours receive opaque tokens, not app names or usage logs. We have no server-side access to any of it, and we do not sell, use, or disclose it to any third party for any purpose.
• The verbatim text of your excuses. The full text of what you type to the bouncer is kept in the attempt log on your device only.
• Local preferences, such as whether you completed onboarding, and a cache of public app icons.
• Sign-in tokens, stored in the iOS Keychain on your device, optionally protected with Face ID.

Data we collect, and why

Account data

An account is required to use the app. When you sign in with Apple or Google, we store your email address and a user ID with our backend provider, Supabase. Sign in with Apple lets you hide your real email address. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Onboarding answers

During setup you may answer a few questions (approximate daily phone hours, age range, which apps distract you, focus preferences). These answers are stored with your account so your setup can be restored and the bouncer can personalize the negotiation. They are never sold or shared for advertising. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Bouncer conversations

When you talk to the bouncer to ask for a pass, your chat messages are sent to our server, which uses an AI infrastructure provider (OpenRouter) to generate the bouncer's replies. We instruct OpenRouter to route requests only to model providers that do not retain or train on the content. Conversations are used solely to run the negotiation, never for advertising. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

A short record of each attempt (which app was at the door, the outcome, the granted minutes, and a summary of your reason) is kept on your device so the app can show your stats. These records are also backed up to your account; before upload, your reason text is automatically scrubbed of email addresses, links, handles, and numbers, and truncated.

Purchases

Subscriptions are processed by Apple and managed through RevenueCat. We receive your subscription status (for example, trial active or subscribed) linked to your user ID. We never see your payment details. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Usage analytics

We use PostHog to understand how the app is used: events such as screens viewed, onboarding completed, or paywall shown, plus basic device information. Once you sign in, analytics are linked to your user ID and email. We do not use advertising identifiers, and analytics never include your Screen Time data or which apps you block. Legal basis: our legitimate interest in understanding and improving the app (Art. 6(1)(f) GDPR).

App updates

The app checks Expo's update service (EAS Update) for updated app code. This involves standard technical request data such as your IP address and app version. Legal basis: our legitimate interest in shipping fixes and improvements (Art. 6(1)(f) GDPR).

This website

berniebouncer.com is a static site served by Cloudflare. It sets no cookies and runs no analytics or tracking scripts. Cloudflare processes technical connection data (such as your IP address) to deliver the site and protect it from abuse. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).

Service providers and recipients

We share data only with the processors needed to run the service, under data processing agreements:

Some of these providers are based in the United States. Where personal data is transferred outside the EU/EEA, we rely on safeguards such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. Any third party with access to personal data is required to protect it to the same standard described in this policy.

What we do not do

• No selling of personal data, ever.
• No advertising networks or cross-app tracking.
• No access to your messages, passwords, browsing history, or the content of the apps you use.
• No use or disclosure of Screen Time data to third parties, for any purpose.

Data retention and deletion

Account data, onboarding answers, attempt records, and purchase status are kept while your account exists. Deleting your account in the app (Profile, Delete account) permanently removes your account and associated data from our backend. Data stored only on your device is removed when you delete the app. You can also contact us atinfo@simongneuss.com to request deletion.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15),
• correct inaccurate data (Art. 16),
• have your data erased (Art. 17),
• restrict processing (Art. 18),
• receive your data in a portable format (Art. 20),
• object to processing based on legitimate interests (Art. 21),
• withdraw any consent at any time, with effect for the future (Art. 7(3)).

To exercise any of these rights, email info@simongneuss.com. You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority of the German federal state where you live or where we are based (Saxony).

Providing personal data is not legally required, but an account (and the email address that comes with it) is needed to use the app; Sign in with Apple lets you provide a private relay address instead of your real one. We do not use automated decision-making within the meaning of Art. 22 GDPR.

Children

Bernie Bouncer is intended for users managing their own screen time. It is not directed at children under 13, and we do not knowingly collect personal data from children.

Contact

Simon Gneuss
Email: info@simongneuss.com

Changes

We will update this policy when the app's data practices change and adjust the effective date above.