Privacy Policy

Our approach

Limitly handles the information needed to operate the app primarily on your device. Except where necessary for support or service operations, we do not collect information that directly identifies you.

Information handled in the app

Block rules, focus sessions, usage summaries, and settings are stored mainly on your device or in the app group container. Screen Time selections are handled through Apple frameworks to provide restriction features.

Information sent with an inquiry

When you use the in-app inquiry form, we send the category, message, optional reply email address, and diagnostics such as app version, build number, iOS version, device type, language, and authorization status.

Information sent for Live Activities

To notify a Live Activity when an unlock period ends, we send the Activity push token, Activity, session, and rule identifiers, and the start and end times. We do not associate these identifiers with account information.

Information sent for the referral program

To issue referral codes, provide two weeks of Premium, count invitations, and review lifetime rewards, we send an anonymous installation identifier, the App Attest key identifier, attestation and assertions, DeviceCheck verification data, referral codes, reward and application status, and usage dates. We receive an App Store transaction ID to confirm a lifetime reward, but store only an HMAC fingerprint and not the raw transaction ID. For fraud detection, we do not store the IP address itself; we store an HMAC of its network range.

Information sent for usage analytics

To improve the app, we send anonymous usage data through TelemetryDeck. This includes interactions such as onboarding pages viewed, Screen Time and notification permission results, the block method and mode of rules you create, paywall views and purchased plans, focus timer starts and completions, the number of times a block screen was closed, unlocks, and review prompts, along with the app version, iOS version, device type, and language. Devices are identified by a hashed value of the identifier for vendor. We do not send the apps or websites you block, the details of your usage time, or your name or email address.

How we use information

We use collected information to respond to inquiries, investigate issues, end Live Activities at the scheduled time, provide referral rewards, prevent abuse, improve service quality through usage analytics, and comply with applicable laws and terms.

Third-party services

We use Cloudflare to process inquiries, schedule Live Activity end notifications, and operate the referral program; Resend to deliver inquiry email; Apple services for Live Activity notifications and device verification; and TelemetryDeck for usage analytics. Each service handles information only as needed for processing, delivery, analytics, and security.

Retention

Inquiry information is retained for 12 months from receipt, and network hashes are retained for 90 days from creation. Referral and audit records are retained for 24 months after the referral program or applicable reward ends. Expired App Attest challenges are deleted within one hour. Live Activity registration data is deleted after the end notification is delivered or its retry sequence completes. To request deletion, contact support@limitly.jp with information that allows us to identify the relevant installation data.

Contact

For inquiries regarding this Privacy Policy, please contact us at the address below.

Email: support@limitly.jp