CrossOff Privacy Policy

Effective 15 August 2026

CrossOff is a personal productivity app that helps you block distracting apps, finish what you planned, and stay accountable with people you trust. This policy explains what data CrossOff handles, what it deliberately cannot see, and who else is involved. It is written to be read, not skimmed past.

What we collect

• Account: when you sign in with Apple or Google, we receive your name, email address, and a user ID. Sign in with Apple lets you hide your email.
• Things you create: tasks, lists, actions, schedules, notes to buddies, XP and completion history, and your settings. These sync to your account so your devices stay in step, and a daily safety copy is kept so your data can survive a lost phone.
• Buddy connections: who you've linked with, invite codes, your @username if you claim one, an email-to-account lookup entry so friends can find you, approval requests you send or answer, and a push-notification address for your device.
• Subscription status: whether your CrossOff Standard subscription is active, via Apple and RevenueCat (below). We never see your payment details — Apple keeps those.
• Diagnostics: crash reports (via Sentry) and a small number of in-app events (for example, that a paywall was viewed) so we can fix problems and understand what's working. These are tied to your user ID, not sold or shared for advertising.

What we deliberately cannot see

CrossOff's blocking is built on Apple's Screen Time technology (Family Controls). Apple designed it so that:

• We never learn which apps you block. When you pick apps in the system picker, CrossOff receives anonymous tokens that only mean something on your device. The names and icons of your chosen apps are never visible to us and never leave your iPhone.
• Your app usage stays on your device. Time measurements run inside Apple's sealed system extensions on the phone itself. CrossOff's servers receive none of it.
• Vault labels are local. If you name a Vault entry, that name stays on your device only. When you ask a buddy to open your Vault, they are told you want to open "your Vault" — never what's inside it.

What your buddies can see

Accountability works by sharing — but only what you switch on, and you can see exactly what that is in the app:

• Sections or lists you explicitly share from the Sharing screen.
• Your Productivity Tracker at the level you choose (off, totals only, or full).
• Requests you send them (for unlock time, settings changes, or opening your Vault) — with minutes asked, never app names or Vault contents.
• Whether a PIN they hold for you was used — an honesty signal, part of the deal.
• If your subscription lapses and your blocking turns off, linked buddies get one notification saying so. Accountability you can switch off silently isn't accountability.

Services we rely on

• Apple — sign-in, payments, subscriptions, and the Screen Time system itself.
• Google Firebase — authentication and the database where your synced data lives.
• RevenueCat — subscription receipt validation. Receives your user ID and purchase receipts; never your payment details.
• Expo — delivery of push notifications.
• Sentry — crash reporting.

Each receives only what it needs to do its job. None of them may use your data for their own advertising.

Deleting your data

Settings → Account → Delete Account removes your account and your synced data. Data you shared with buddies (like a standing note) disappears with it. Device-local Screen Time configuration is removed when you delete the app. If anything ever seems left behind, email us and we'll remove it by hand.

Children

CrossOff is not directed at children under 13, and we don't knowingly collect data from them.

Changes

If this policy changes in a way that matters, the app will say so — we won't rely on you re-reading this page. The effective date above always reflects the current version.

Contact

Questions, concerns, or deletion requests: support@crossoff.io