Deflect Privacy Policy
Effective [DATE THIS VERSION GOES LIVE]
Deflect is an iPhone app that locks the apps you choose and asks you why before giving one back. It is made by [YOUR LEGAL NAME] ("we", "us"). This policy explains what Deflect collects, why, who it's shared with, and how to delete it.
In short: your Screen Time data stays on your iPhone. Your settings and your requests for time are backed up to your account. When Deflect's AI replies, your chat goes through our server to our AI provider. We use an analytics provider to see how far people get through setup and whether they subscribe, never what you write or answer. There are no ads and no tracking, and we never sell your data.
What stays on your iPhone
- Your Screen Time data: which apps, websites and categories you block, your schedules and limits, and how long you use them. Apple only lets Deflect use this on your device.
- The age range you pick during setup.
- Your chats with Deflect, kept on the device so it can remember your recent conversations.
Your account
Deflect gives you an account so its AI and backups work. It can be:
- An automatic account made during setup, with no email or password.
- An email account, with your email address and a password (we store only a secure hash of the password), or a sign-in link sent to your email.
- Sign in with Apple. Apple shares your email address (or a private relay address, if you choose) and, the first time, your name if you allow it.
What's backed up to your account
- Your settings: Deflect's voice and strictness, your time zone, and whether you've confirmed you're 18 or older.
- Your first name, if you give it, and the personal goal you write.
- Your requests for time: the app or category you asked about, what you said, whether you got time, how many minutes, when, and what kind of block was on. These are deleted after 90 days.
This lets your settings and history follow you to a new phone.
When Deflect replies with AI
Deflect asks your permission before its first AI reply. If you don't allow it, or turn AI replies off later in Customize, nothing below is sent and Deflect answers with basic replies written on your iPhone.
When you ask Deflect for time with AI replies on, our server sends the following to our AI provider to write its reply:
- Your chat, and up to two earlier chats from the past week about the same app.
- The name of the app or category you're asking about, and the blocks on it (their names, schedules, limits and the goals you set for them).
- Your local time and weekday, how many times you've asked for time or been let in today, and your recent requests for the same app.
- Your personal goal.
- A photo, only if you send one as proof. We don't save photos.
Your answers to the setup questions and your personal plan are put together on your iPhone and aren't sent to the AI provider.
Your name, email address and age are never sent to the AI provider. We ask the AI provider not to store these requests. Its handling of them is governed by its own API terms and privacy policy.
To keep the service affordable we count how many chats and AI replies each account uses per day. These counts hold no chat content and are deleted after 30 days.
Purchases
Deflect Pro is sold through the App Store. Apple handles payment; we never see your payment details. The app checks with Apple whether your subscription is active.
App analytics
To improve Deflect, the app sends usage events to PostHog, our analytics provider:
- Which setup screens you reach, and whether you go forward or back.
- Whether you allow Screen Time and notifications, and how you sign in (email or Apple).
- When the subscription screen is shown, and whether a purchase starts, completes or is cancelled, with the plan.
- When the app is installed, updated, opened and closed, with your device model, iOS version, app version, language and approximate location from your IP address.
Once you have an account, these events carry its account ID, but never your name or email. They never include your chats, your goal, your name, your answers to the setup questions, or which apps you block. Deflect doesn't record your screen.
You can turn this off anytime with Help improve Deflect in Deflect's Customize tab. While it's off, the app doesn't send these events.
Who we share data with
We share data only with the service providers that run Deflect, and only to run it:
| Provider | What for |
|---|---|
| Supabase | Accounts, the backup database and our server, hosted in the United States |
| OpenAI | Writing Deflect's AI replies |
| PostHog | App analytics (see above), hosted in the United States |
| Apple | Sign in with Apple, purchases and subscriptions |
Each of these providers may use your data only to provide its service to Deflect, and handles it under terms that give it the same or equal protection as this policy. OpenAI doesn't use the data we send it to train its models.
Like most online services, our providers keep technical logs of requests to our server (such as IP address, device type and time) for security and troubleshooting, for a limited time. We may also disclose data if the law requires it.
How long we keep it
- Requests for time: 90 days.
- Daily AI usage counts: 30 days.
- App analytics events: [ANALYTICS RETENTION].
- Your account, settings, first name and goal: until you delete your account.
- Proof photos: not stored.
Deleting your data
- Delete account in Deflect's Customize tab permanently deletes your account, settings and request history from our servers.
- Deleting the app removes everything stored on your iPhone.
- Deleting your account doesn't delete app analytics; email us and we'll delete them.
- You can also email us at support@deflectai.app to ask what we hold about you, to correct it, or to delete it. Depending on where you live (for example California, the UK or the EU), you may have these rights by law, and we honor them for everyone.
Children
Deflect isn't meant for children under 13, and we don't knowingly collect data from them. If you believe a child under 13 has given us data, email us and we'll delete it. Users under 18 can't turn on Deflect's 18+ voice.
Security
Data is encrypted in transit. Each account can only read and change its own data, which the database enforces, not just the app.
Changes
If we change this policy, we'll update the date above, and tell you in the app if the change is significant.
Contact
[YOUR LEGAL NAME] ยท support@deflectai.app