Privacy Policy

Last updated: August 2026

Our Privacy Commitment

Friends67 is built on the principle of local-first privacy. We believe your detailed habits are your business. Our goal is to provide social accountability without compromising your digital footprint.

Information We Collect

To provide our services, we collect the following information on our servers:

  • Account Data: Name, email address, and profile picture, provided via Google Sign-In, Sign in with Apple, or an email address verified with a one-time code — whichever method you choose to register or log in with.
  • Social Data: Information about the connections you establish with other users ("Friends" or "Partners"), including any free-text messages, nudges, and proof images sent within a direct-message conversation or an accountability session.
  • Requests & Proof: When you request extra screen time, we store the target app name, your optional message, and the "proof" image you provide.
  • Feedback & Usage: Information such as bug reports, feature suggestions, and emergency token usage history.
  • Push Notification Token: A device token used solely to deliver notifications (such as a partner's nudge or request) to your device.
  • Automatically Collected Data: When the app runs, our service providers (described below) automatically receive limited technical data such as your device model, operating system version, app version, IP address, and crash logs. This is used only for diagnostics and to keep the service working.

What Stays on Your Device

Detailed daily app usage statistics, browsing history, and specific activity logs never leave your device. Friends67 only transmits the specific request events you choose to send to your partners. Local permissions — such as Android's Usage Access/Accessibility APIs or iOS's Screen Time (Family Controls) framework — are used strictly for on-device app monitoring and blocking. On Android, if you grant contacts access to find a partner to invite, your contacts are read locally to power that picker and are never uploaded to our servers.

Analytics, Crash Reporting & Payments

We use a small set of third-party service providers to keep the app stable and to process subscriptions. These providers act on our behalf and do not receive your detailed app usage or browsing data:

  • Firebase (Google): Crashlytics for crash reports, and Analytics/Performance Monitoring for anonymized product-usage and app-performance metrics, so we can find and fix bugs and understand which features are used.
  • RevenueCat: Manages in-app subscription purchases and links your purchase history to your account so your premium status stays in sync across devices.

How We Use Your Data

  • To facilitate the screen time request and approval process.
  • To notify your partners when you reach your limits or send a nudge.
  • To maintain your social connections and conversations within the app.
  • To manage emergency token quotas.
  • To process and keep your subscription/premium status in sync.
  • To diagnose crashes and improve app stability and performance.

Legal Basis for Processing

Where laws such as the EU/UK GDPR or Brazil's LGPD apply, we process your data on the following bases:

  • Performance of a contract: account data, social/request data, and notification tokens are necessary to provide the service you signed up for.
  • Legitimate interests: crash reporting, performance monitoring, and fraud prevention, balanced against your rights.
  • Consent: optional features such as analytics or contact-based partner invites, which you can decline or revoke at any time.
  • Legal obligation: where we must retain or disclose data to comply with applicable law.

Data Sharing & Protection

We do not sell, rent, or trade your personal information to third parties for advertising or marketing purposes. Your social/request data is only shared with the specific partners you have explicitly connected with. Limited data is shared with the service providers described above (Google/Apple for sign-in, Firebase for crash and performance diagnostics, RevenueCat for subscriptions) solely so they can perform those functions for us. We use industry-standard encryption to protect your data in transit and at rest.

International Data Transfers

Our servers and service providers (such as Google/Firebase and RevenueCat) may store and process data in countries other than your own, including the United States. When we transfer personal data internationally, we rely on safeguards such as Standard Contractual Clauses or adequacy decisions, and our providers' own certified transfer mechanisms.

Data Retention

  • Account and social data: kept while your account is active. When you delete your account, associated data — including profile pictures, proof images, and messages — is deleted immediately from our production systems. Residual copies may persist in our database provider's encrypted point-in-time backups for up to 30 days before expiring automatically.
  • Crash and diagnostic data: retained by Firebase for up to 90 days.
  • Subscription records: retained as long as required for accounting, tax, and legal compliance.

Your Rights

Depending on where you live (for example under the GDPR, LGPD, or CCPA/CPRA), you have the right to:

  • Access a copy of the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your data ("right to be forgotten").
  • Restrict or object to certain processing.
  • Data portability — receive your data in a machine-readable format.
  • Withdraw consent at any time for processing based on consent, without affecting prior processing.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@friends67.com. We respond to verified requests within 30 days. We will never discriminate against you for exercising your privacy rights.

Children's Privacy

Friends67 is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13 (or the higher minimum age required in your country). If we learn that an account belongs to a child below the minimum age, we will terminate the account and delete its associated data, including any uploaded images. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@friends67.com so we can remove it.

Data Control

You can delete your account and all associated data — including any uploaded profile pictures, proof images, and exit selfies — at any time through the app settings or by contacting us.

Account Deletion Info

Changes to This Policy

We may update this policy as the app evolves or as laws change. If we make material changes, we will notify you in the app or by email before they take effect, and update the "Last updated" date at the top of this page. Continued use of Friends67 after changes take effect means you accept the updated policy.

Questions about our policy? Contact us at
support@friends67.com

FAQ | Terms of Service | Back to Home