Legal

Privacy Policy

Effective and last updated July 18, 2026

Curbit is built around a simple boundary: the apps you select stay on your device. We keep only the information needed to run your account, connect you with trusted people, and deliver unlock requests.

1. Scope

This Privacy Policy explains how Curbit (“Curbit,” “we,” “us,” or “our”) handles information when you use the Curbit mobile app, website, APIs, notifications, and related services (the “Service”). Curbit is the operator responsible for the information described here.

2. Information we collect

Information you provide

  • Account information: your name, email address, authentication credentials, and account preferences.
  • Accountability information: reviewer relationships, invite status, optional invitee names, unlock duration, request status, and any optional reason you include with a request.
  • Support communications: information you include when you contact us for help, privacy requests, or feedback.

Information created when you use Curbit

  • Protection settings: schedule windows, protection mode, armed status, and the number of selected apps and categories.
  • Activity needed for the Service: unlock requests and decisions, emergency-pass use, relationship history, and relevant timestamps.
  • Device and notification information: an Expo push token when you permit notifications.
  • Authentication and security information: session identifiers, IP address, user agent, login times, and similar information used to operate and secure your account.
  • Website request information: our hosting providers may process IP address, user agent, requested URL, and timestamps as part of ordinary security and delivery logs. The landing site does not use advertising trackers or analytics cookies.

Information that stays on your device

Your selected apps and categories stay on your device in Apple-protected Screen Time token form. Curbit’s server receives the number of selected apps and categories, but not their identities or Apple Screen Time tokens. Local authorization, shield state, and short-lived unlock state are stored on your device using Apple system storage. Curbit does not read the content of your apps, messages, photos, browsing history, or on-screen activity.

3. How we use information

We use information to:

  • create, authenticate, and maintain your account;
  • save your protection schedule and synchronize account state;
  • create invites and connect blockers with reviewers;
  • send, approve, deny, expire, and notify users about unlock requests;
  • track the weekly emergency-pass allowance;
  • provide support, prevent abuse, secure the Service, and diagnose failures;
  • comply with law and enforce our Terms of Service; and
  • maintain and improve reliability using support reports and operational information.

We do not use Screen Time data, request reasons, or relationship data for advertising or to build advertising profiles.

4. Legal bases for processing

Where applicable law requires a legal basis, we process information as needed to perform our agreement with you and provide Curbit; for our legitimate interests in securing, supporting, and improving the Service; with your consent, such as for notifications; and to comply with legal obligations. You may withdraw consent through the controls described below, without affecting earlier lawful processing.

5. When information is shared

  • With people you choose: a reviewer may see your display name, requested duration, optional reason, and request status. People in a relationship can see the other person’s name and relationship status.
  • With service providers: Railway provides application hosting and database infrastructure; Expo processes push tokens and delivers push notifications; Apple provides app distribution, device permissions, Screen Time frameworks, and notification services.
  • For legal and safety reasons: we may disclose information when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or defend legal claims.
  • Business transfers: information may transfer as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to this Policy and applicable law.

We require service providers that process personal information for us to protect it consistently with this Policy and applicable law. We do not sell your personal information, share it for cross-context behavioral advertising, or allow third-party advertising in Curbit.

6. Your choices and controls

  • Screen Time: change or revoke Curbit’s Screen Time authorization in iOS Settings.
  • Notifications: change notification permissions in iOS Settings.
  • Relationships: remove a reviewer or person you support from the People tab.
  • Account deletion: delete your account from You → Delete account. This removes your account and associated active data from Curbit’s production database. If you cannot access the app, contact support@curbit.app.

7. Retention and deletion

We retain account, relationship, request, pass, and protection data while your account is active or as needed to provide the Service. When you delete your account, Curbit deletes your active account, sessions, account credentials, protection profile, push tokens, emergency-pass records, relationships, and access requests involving you. Limited information may remain temporarily in backups, security logs, or where retention is required by law; it is isolated from normal use and removed under ordinary retention cycles.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect information, including encrypted network transport, protected authentication credentials, access controls, and Apple system storage for local secrets. No system can guarantee absolute security.

9. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or obtain a copy of your personal information, or to object to certain processing. You may also have the right to appeal a decision or contact your local data-protection authority. Email support@curbit.app to make a request. We may need to verify your identity before responding.

10. Children

Curbit is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have done so, we will take steps to delete the information. If you believe a child under 13 has provided information to Curbit, contact support@curbit.app.

11. International use

Curbit and its providers may process information in the United States and other countries. Where required, we use lawful safeguards for international transfers and preserve mandatory rights available in your jurisdiction.

12. Changes to this Policy

We may update this Policy as Curbit changes. We will post the updated version here, revise the date above, and provide additional notice when required by law. Material changes will apply prospectively.

13. Contact

Questions, requests, or complaints can be sent to support@curbit.app.