Scroll Stopper — Privacy Policy
Scroll Stopper ("we", "us", "the app") helps parents manage which apps their children can use, and helps individuals lock themselves out of distracting apps. We believe in collecting the bare minimum data needed to make the app work. This policy explains what we collect, why, and what we never do.
- We do not sell your data. Ever.
- We do not run ads.
- We do not use third-party analytics, trackers, or advertising SDKs.
- Data is stored on our servers (Supabase) only for as long as it takes two paired devices to talk to each other.
- Anyone you pair with (your parent or your child) can see the data you share with them. No one else, including us, can read your data.
Who this policy applies to
- Parents using the app to manage a child's device.
- Children whose device is being managed by a paired parent.
- Solo users who use the app only to lock themselves out of distracting apps.
If you are a child under 13 in the United States (or under 16 in the EU/UK), your parent must set up the app and consent on your behalf. This happens during pairing — when you enter the 6-digit code your parent gives you, you are confirming consent has been given.
What we collect
On every device
| Data | Why we collect it | Where it goes |
|---|---|---|
| Anonymous account ID (auto-generated UUID) | To identify your install across app restarts so paired devices can find each other. Not tied to your name, email, or phone number. | Our database (Supabase) |
| App usage statistics (which apps were locked, how long) | Shown to you on the "Stats" screen so you can see your progress. | Local device only — never sent to our servers |
| List of installed apps (kid devices only) | So the parent can choose which apps to lock from a real list. | Sent only to the paired parent device's pairing record |
| Parent PIN hash (parent devices only) | To gate sensitive actions (switch mode, unpair). The PIN itself is never sent — only a salted SHA-256 hash. | Synced to the paired kid device via the pairing record so the kid app can verify PINs offline |
| Last-seen timestamp | So the parent knows if a kid's device has gone offline or had the app force-stopped. | Our database |
| Time-request text (kid devices, optional) | If a kid types a reason when asking for more time on a locked app, the text is delivered to the parent. | Our database, then deleted when the parent answers |
What we never collect
- Your name, email, phone number, or address.
- The contents of any other app on your phone (we do not read your messages, browsing, photos, etc.).
- Your location.
- Any financial or payment information.
- Any biometric data.
How data is protected
- Anonymous authentication. Every device has an anonymous account ID, with no link to your real identity.
- Row-level security. Our database enforces that only paired devices can read or modify each other's records. We could not show your data to someone you have not paired with even if we tried.
- Local PIN verification. Your PIN is hashed with a unique random salt and SHA-256 before it ever leaves the device. The plain PIN is never transmitted.
- TLS in transit. All network traffic between the app and our servers is encrypted.
Third parties
- Supabase (database and authentication provider). They process and store your data on our behalf. They do not have permission to use it for any other purpose. Supabase Privacy Policy
- Google Play Services for crash reporting and push notifications (if you opt in).
- No analytics. No advertisers. No data brokers.
How long we keep data
- Pairings, rules, and PINs: until you unpair the device or uninstall the app. Unpairing immediately deletes the pairing row and all associated rules from our database.
- Time-request texts: deleted within 30 days of the request being answered.
- Anonymous accounts: kept indefinitely so you can re-open the app and find your existing pairings. You can delete your account from the app's About screen, or by emailing support.
Your rights
You have the right to:
- Know what data we hold about you (which is almost nothing because we tied it to an anonymous ID, not you personally).
- Request deletion of all data tied to your anonymous account.
- Stop the app from collecting any further data, at any time, by uninstalling it.
To exercise these rights, email support@getscrollstopper.com with the anonymous account ID shown in the app's About screen, or tap "Delete my data" from inside the app.
Children's privacy
This app is intended to be used by families. If you are a parent setting up the app for a child:
- By generating a pair code and giving it to your child, you are providing verifiable consent for our limited data processing on their behalf, as required by COPPA (US) and similar laws.
- You can unpair the device at any time. Unpairing deletes the pairing record and all rules.
- The data we collect from a managed device is limited to what is shown above — installed app list, last-seen timestamp, and any time-request text the child voluntarily writes.
- We do not run ads, do not track location, and do not share data with third parties for advertising.
Changes to this policy
If we materially change this policy, we will update the "Last updated" date at the top and, when meaningful, notify you in the app on next launch.
Contact
Privacy questions or deletion requests: support@getscrollstopper.com