Privacy Policy

Overview

MadeTime is an iPhone app that turns positive actions into intentional access time for apps you voluntarily choose to restrict. Its core features operate locally without a MadeTime account or backend. This policy covers the MadeTime iPhone app, its Device Activity extension, this website, and email you choose to send to MadeTime.

Who is responsible for your data

Susana Vázquez Corte, an individual developer based in Spain, is the data controller for processing described in this policy. “MadeTime” is the product name and is not a separate legal entity.

You can contact the controller at [email protected].

Information used by the iPhone app

The app uses only the information required for the features you request:

• App, category, and website selections: you voluntarily choose what to restrict through Apple’s Family Controls interface. Apple provides opaque tokens. MadeTime does not decode, log, profile, or transmit those tokens. Apple’s system views render available labels in the app.
• Today’s step total: after you authorize Apple Health access, MadeTime reads only step-count data for the current day to calculate your earned-time balance. It does not request other HealthKit data and does not write anything to Apple Health.
• Reward information: the current day, completed reward blocks, available and consumed minutes, and settlement identifiers used to prevent duplicate refunds. These values are derived from your step total; the raw daily step total itself is not persisted by MadeTime.
• Configuration and session information: reward rules and an active session’s start date, end date, and reserved minutes so the app can recover safely after closing or restarting.
• Local settings: onboarding completion, whether permission requests have been presented, restriction state, and local development preferences where available.

MadeTime does not read or retain Screen Time usage reports, browsing history, app-open counts, or activity information beyond the selections you make.

Purpose and legal bases

• Local selections, configuration, rewards, sessions, and safety state are processed to provide the app functionality you request. Where the GDPR applies, the basis is performance of the service requested by you under Article 6(1)(b).
• Access to today’s step count occurs only after you actively authorize it through Apple’s Health interface. The basis is your consent under Article 6(1)(a). Where this information is treated as special-category health data, MadeTime relies on your explicit consent under Article 9(2)(a). You can withdraw access at any time through Apple’s system privacy controls.
• Website traffic metadata is processed to deliver and protect the static site. The basis is the controller’s legitimate interest in providing a secure, reliable website under Article 6(1)(f).
• Email content is processed to respond to your request or take steps you ask for before using the service under Article 6(1)(b), and where applicable on the basis of your consent under Article 6(1)(a). Limited records may be retained where necessary for legal obligations or the establishment, exercise, or defence of legal claims.

Local storage, backups, and retention

Opaque restriction tokens are stored in MadeTime’s Apple App Group and shared only with its Device Activity extension. The extension uses them only to restore or apply your selected restrictions. Configuration, active-session state, and ordinary app settings are stored in the app’s local container.

The raw daily step total remains in memory while needed and is not persisted. The health-derived reward ledger is stored in a dedicated local file marked for exclusion from device backups. MadeTime does not use CloudKit, iCloud key-value storage, or another MadeTime synchronization service. Ordinary app preferences and opaque selections may be included in an iOS device backup according to the user’s Apple settings and Apple’s platform behavior.

Selections remain until you replace or delete them. Reward state is updated for the current local day. An active session remains until it ends or is deleted. Configuration and settings remain until you change them, use the in-app deletion action, or delete the app. Device backups remain subject to Apple’s separate retention and deletion controls.

Permissions and your choices

You choose whether to grant Screen Time and Apple Health access. Restriction features require Screen Time access, and step-based rewards require Apple Health access. Features that depend on a permission will not work if that access is denied or revoked.

Providing these app inputs is not a statutory requirement. It is necessary only when you choose to use the corresponding feature. MadeTime does not use your information for automated decisions that produce legal or similarly significant effects within the meaning of GDPR Article 22.

• Apple Health access can be changed in the Health app or in the Health privacy controls in iOS Settings. Menu names may vary by iOS version.
• Screen Time access can be changed under iOS Settings, Screen Time, and Apps with Screen Time Access where that option is available.
• “Turn Off All Restrictions” immediately clears MadeTime restrictions but keeps your selections and other local state so you can use them again.

Deleting MadeTime data

“Delete All MadeTime Data” in Settings turns off MadeTime restrictions and removes its opaque selections, reward ledger, reward configuration, active session, onboarding choices, and local permission markers. Apple Health and Screen Time permissions are controlled by iOS and must be revoked separately.

Deleting the app removes its current local containers according to iOS behavior. MadeTime has no account or backend from which it can remotely retrieve or delete device-local information. Copies that already exist in an Apple device backup remain controlled through the user’s Apple backup settings.

Sharing, advertising, and tracking

MadeTime does not sell app data or transmit it to advertising, analytics, tracking, profiling, marketing, or data-broker services. The app has no MadeTime-operated backend, advertising SDK, analytics SDK, tracking SDK, or crash-reporting SDK. HealthKit and Family Controls information is not used for advertising, marketing, profiling, tracking, or data mining.

Apple provides HealthKit, Family Controls, Managed Settings, Device Activity, system permission controls, and optional device backup services. Apple’s own processing is governed by its privacy notices and the user’s Apple settings.

This website and email

The MadeTime website is a static site. MadeTime does not add analytics, advertising cookies, tracking pixels, forms, or third-party marketing scripts. It is hosted by Cloudflare Pages. Cloudflare may process IP addresses, request URLs, routing information, security events, and other technical metadata to deliver and protect the site, and may use strictly necessary security technologies under its own documentation.

The beta contact link opens your email application; the website does not submit the message. Your email provider processes it when you choose to send it. Cloudflare Email Routing processes the incoming address and message to forward it to the controller’s configured mailbox provider. MadeTime then receives the email address, message contents, and any information you include. Messages are kept only as long as reasonably necessary to answer and manage the request, and longer only where required by law or for legal claims.

Service providers and international transfers

• Apple: provides the device, operating-system frameworks, permission controls, and optional backup services. See Apple’s Privacy Policy.
• Cloudflare: hosts and protects the static website, routes incoming contact email, and may process website and email-routing metadata. See Cloudflare’s Privacy Policy.
• Mailbox provider: the provider configured by the controller receives messages forwarded from the MadeTime contact address so they can be read, answered, and retained as described above.

MadeTime does not transfer app selections, HealthKit data, or reward/session state to MadeTime servers or advertising and analytics providers. Cloudflare, the configured mailbox provider, and Apple may process relevant website, email, or platform information outside the European Economic Area. Where applicable, those providers describe safeguards such as adequacy frameworks and Standard Contractual Clauses in their own privacy documentation.

Security

MadeTime minimizes remote risk by keeping core app state on the device and not maintaining a remote database of HealthKit or Screen Time information. iOS applies platform protections to app containers and permissions. No storage or transmission method can be guaranteed to be completely secure.

Your privacy rights

Where applicable, you may request access, rectification, erasure, restriction, objection, or portability, and may withdraw consent without affecting earlier lawful processing. You also have the right to lodge a complaint with a competent supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

Because MadeTime has no account or backend, the controller generally cannot identify, retrieve, correct, export, or remotely erase information that exists only on your device. You can manage that information using the controls described above. For website or email information that the controller can access, submit a request to [email protected]. Additional information may be requested only when necessary to verify the request.

Children

MadeTime is not directed to children and does not knowingly operate a service intended to collect children’s personal data. The current app uses Apple’s individual Screen Time authorization model controlled by the device owner.

Changes to this policy

This policy may change as MadeTime evolves. Material changes will be reflected on this page with an updated date before the affected practices are introduced.

Contact

For privacy questions, requests, or concerns, contact Susana Vázquez Corte at [email protected].