Privacy Policy

Our approach

Limitly handles the information needed to operate the app primarily on your device. Except where necessary for support or service operations, we do not collect information that directly identifies you.

Information handled in the app

Block rules, focus sessions, usage summaries, and settings are stored mainly on your device or in the app group container. Screen Time selections are handled through Apple frameworks to provide restriction features.

Information sent with an inquiry

When you use the in-app inquiry form, we send the category, message, optional reply email address, and diagnostics such as app version, build number, iOS version, device type, language, and authorization status.

Information sent for Live Activities

To notify a Live Activity when an unlock period ends, we send the Activity push token, Activity, session, and rule identifiers, and the start and end times. We do not associate these identifiers with account information.

Information sent for the referral program

To issue referral codes, provide two weeks of Premium, count invitations, and review lifetime rewards, we send an anonymous installation identifier, the App Attest key identifier, attestation and assertions, DeviceCheck verification data, referral codes, reward and application status, and usage dates. We receive an App Store transaction ID to confirm a lifetime reward, but store only an HMAC fingerprint and not the raw transaction ID. For fraud detection, we do not store the IP address itself; we store an HMAC of its network range.

How we use information

We use collected information to respond to inquiries, investigate issues, end Live Activities at the scheduled time, provide referral rewards, prevent abuse, improve service quality, and comply with applicable laws and terms.

Third-party services

We use Cloudflare to process inquiries, schedule Live Activity end notifications, and operate the referral program; Resend to deliver inquiry email; and Apple services for Live Activity notifications and device verification. Each service handles information only as needed for processing, delivery, and security.

Retention

Inquiry information is retained for 12 months from receipt, and network hashes are retained for 90 days from creation. Referral and audit records are retained for 24 months after the referral program or applicable reward ends. Expired App Attest challenges are deleted within one hour. Live Activity registration data is deleted after the end notification is delivered or its retry sequence completes. To request deletion, contact support@limitly.jp with information that allows us to identify the relevant installation data.

Contact

For inquiries regarding this Privacy Policy, please contact us at the address below.

Email: support@limitly.jp