ZoneIn Privacy Policy

Privacy at a glance

This summary is written in plain language. The detailed sections below are the full Privacy Policy.

• ZoneIn is a self-control app. ZoneIn: App Blocker for ADHD helps you block apps, app categories, websites, and website categories that you choose, using Apple Screen Time-related APIs.
• ADHD references are not health-data collection. References to ADHD describe the app’s audience and product positioning. ZoneIn does not ask whether you have ADHD, does not collect ADHD diagnosis information, and is not a medical or mental-health service.
• Most core app data stays on your device. Your block schedules, focus sessions, selected blocking targets, override state, dashboard summaries, and app-extension coordination state are stored locally on your device. ZoneIn does not operate a first-party backend server for this core app data.
• Your selected apps and websites are represented by Apple tokens. ZoneIn stores opaque Apple Screen Time selection tokens. The developers do not receive readable app names, website domains, URLs, messages, passwords, or content from those tokens.
• Screen Time usage reports are processed on-device. ZoneIn uses Apple DeviceActivity reporting to show screen-time metrics on your device. Raw Screen Time reports are not uploaded to a first-party server.
• Sign in with Apple is required in production builds. ZoneIn requests the full name and email scopes from Apple during authentication, but the current app stores only Apple’s stable user identifier on-device. That identifier is also used with RevenueCat for purchase attribution.
• Paid overrides are processed by Apple and RevenueCat. Apple handles App Store in-app purchases. RevenueCat provides the paywall and purchase infrastructure. ZoneIn does not receive or store your payment card number.
• Firebase is used for coarse analytics and app functionality services. ZoneIn may use Firebase / Google services for app instance identifiers, coarse product interaction, notification, purchase-flow, and app-health/funnel analytics. ZoneIn does not intentionally send raw selected app names, website domains, Apple user IDs, transaction IDs, raw purchase amounts, or raw Screen Time reports to Firebase.
• Notifications are used for focus reminders and setup reminders. If you allow notifications, ZoneIn may send a 5-minute warning before a scheduled block begins and a one-time reminder if you launch the app but have not created a focus session or scheduled block.
• No ads. No subscriptions. No cross-app tracking. The current app uses optional paid overrides rather than ads or subscriptions. ZoneIn does not use IDFA, does not use App Tracking Transparency because it does not track you across other companies’ apps and websites, and does not sell or share personal information for cross-context behavioral advertising.
• Hard Mode is device-wide when active. Hard Mode is the in-app name for ZoneIn’s app-removal restriction feature. If enabled during an active block, Apple’s ManagedSettings app removal restriction can prevent removal of apps on the device generally, not just ZoneIn.

1. Scope of this policy

This Privacy Policy explains how Tash-had Saqif and Elijah Kajinic collect, use, store, disclose, and protect personal information in connection with ZoneIn: App Blocker for ADHD (“ZoneIn”), the iOS app available under bundle identifier com.tryzonein.app.

This policy covers the ZoneIn iOS app and the app extensions that support its Screen Time functionality. It also includes a short section for tryzonein.com, because the companion website has its own analytics and logging practices that are separate from the app.

This policy describes both data that may be transmitted to third-party service providers and data that is processed or stored locally on your device. We describe important local processing because it can affect your privacy and your device experience.

2. Who we are

ZoneIn is released on the Apple App Store under the personal developer name Tash-had Saqif. Tash-had Saqif and Elijah Kajinic are joint co-developers and joint data controllers for ZoneIn.

3. About ZoneIn

ZoneIn is an iOS self-control and screen-time management app. It is listed as ZoneIn: App Blocker for ADHD in the App Store. References to ADHD, ADHD brains, or ADHD-friendly design describe product positioning and are not medical claims. ZoneIn is not a medical device, mental-health service, ADHD diagnosis tool, ADHD treatment, addiction treatment, therapy, or professional healthcare service. ZoneIn is designed for users who want to restrict their own device usage, not as a parental-control service for supervising someone else.

ZoneIn asks you to sign in with Apple and grant Apple Screen Time / FamilyControls authorization. You can then create immediate focus sessions or recurring schedules that block selected apps, app categories, websites, and website categories. Blocking is enforced through Apple Screen Time-related APIs and may continue while the main ZoneIn app is closed.

ZoneIn supports paid temporary overrides. An override temporarily lifts active blocks after an Apple in-app purchase processed through RevenueCat. The current paid override products are listed in the Payments section below. Available override durations, prices, taxes, currency, product names, product identifiers, availability, and paywall wording may vary based on App Store configuration, RevenueCat offerings, taxes, currency, and regional availability. The Apple purchase sheet controls the final price and transaction terms at the time of purchase.

ZoneIn also includes Hard Mode, an optional app-removal restriction setting. When active, Hard Mode can prevent app removal across the device during an active block. This is an Apple ManagedSettings behavior and is not limited to the ZoneIn app icon.

4. Data we collect and process

The table below summarizes the main categories of data processed by ZoneIn. “Local only” means the data is stored on your device and is not uploaded to a first-party ZoneIn server based on the current app design.

5. Sources of data

ZoneIn receives or processes data from the following sources:

• You. You create schedules, focus sessions, block selections, override purchases, settings, and support messages.
• Your device and iOS. iOS provides permission status, local storage, Screen Time authorization, DeviceActivity events, usage reports, notification settings, and ManagedSettings enforcement.
• Apple. Apple provides Sign in with Apple authentication data, App Store purchase and transaction information, Screen Time APIs, and system-level permission and purchase flows.
• RevenueCat. RevenueCat provides paywall, offering, purchase, receipt, and customer-info infrastructure.
• Firebase / Google. Firebase provides analytics and app functionality services.
• Companion website systems. The website tryzonein.com has analytics logging that is separate from the app.

6. How we use data

ZoneIn uses data for these purposes:

• Authenticate you with Sign in with Apple.
• Store your local ZoneIn configuration and preferences.
• Let you create, edit, run, pause, resume, and end focus sessions and schedules.
• Apply blocks to apps, categories, websites, and website categories you select.
• Coordinate enforcement between the main app and iOS extensions.
• Show your on-device Screen Time dashboard.
• Process paid override purchases through Apple and RevenueCat.
• Temporarily lift active blocks during an override and re-engage them when the override expires.
• Apply or remove Hard Mode app-removal restriction behavior when enabled and applicable.
• Analyze app flows and broad product usage if Firebase Analytics is enabled.
• Respond to support, feedback, privacy, deletion, and legal requests.
• Maintain security, prevent fraud, support reliable local operation, and comply with legal obligations.

ZoneIn does not use your data to build advertising profiles. ZoneIn does not sell your personal information. ZoneIn does not share your personal information for cross-context behavioral advertising.

7. Screen Time, FamilyControls, and on-device processing

ZoneIn depends on Apple’s Screen Time-related frameworks, including FamilyControls, ManagedSettings, DeviceActivity, DeviceActivityReport, and related app extensions.

ZoneIn requests Screen Time authorization for .individual use. This means the app is designed for self-imposed device restrictions by the device owner, not for parental supervision of a child account.

What Screen Time permission allows ZoneIn to do

• Let you pick apps, app categories, websites, and web-domain categories to block.
• Store those selections as Apple-provided opaque tokens.
• Apply shields to selected apps, categories, websites, or domains during active blocks.
• Monitor start and end times for schedules, focus sessions, and override expiration.
• Process Screen Time activity reports on-device for the dashboard.

What ZoneIn does not do with Screen Time data

• ZoneIn does not upload raw Screen Time report histories to a first-party server.
• ZoneIn does not send selected app names or website domains to Firebase Analytics.
• ZoneIn does not send raw app usage histories to RevenueCat.
• ZoneIn does not use Screen Time selections or Screen Time usage reports for advertising.
• ZoneIn does not attempt to reverse-engineer Apple’s opaque tokens into readable app names, website URLs, or domains.

Some local data is shared between the main app and extensions using the App Group group.com.tryzonein.app. This allows enforcement to continue when the main app is closed.

8. Sign in with Apple

Sign in with Apple is required in ZoneIn production builds. ZoneIn requests the following scopes during authentication:

• Full name
• Email address

Apple may provide those fields during the authentication flow. Based on the current app design, ZoneIn retains only Apple’s stable user identifier on-device. ZoneIn does not currently retain the full name or email address returned by Apple during authentication.

ZoneIn uses the Apple user identifier as the app user ID for RevenueCat. This lets RevenueCat attribute purchases, restore purchases, and associate customer information with your ZoneIn account state.

Apple’s processing of Sign in with Apple and Apple Account data is governed by Apple’s own privacy terms and policies.

9. Payments and paid overrides

ZoneIn offers paid temporary overrides through Apple in-app purchases. A paid override temporarily lifts active blocks for the purchased duration. These products are optional consumable in-app purchases, not subscriptions.

Prices, taxes, currency, and availability may vary, and the Apple purchase sheet controls the final price and transaction terms at the time of purchase. After the override ends, blocking can automatically re-engage.

Apple processes the App Store purchase. ZoneIn does not receive or store your payment card number, bank account number, or full billing credentials.

RevenueCat provides paywall, offering, purchase-processing, receipt-validation, and customer-info infrastructure. RevenueCat receives purchase metadata and the app user ID used by ZoneIn, which is currently the Apple user identifier. RevenueCat may also process product identifiers, offering identifiers, entitlement/customer status, transaction-related metadata, device/app metadata, and receipt information needed to provide its service.

ZoneIn stores limited override records locally, including timing, duration, and limited purchase metadata if available. This local record is used to apply and end overrides correctly.

Refunds, chargebacks, failed purchases, taxes, billing issues, and App Store purchase history may be handled by Apple. RevenueCat and Apple may retain transaction information according to their own policies and legal obligations.

10. Analytics and app functionality services

ZoneIn may use Firebase / Google services to understand whether major app flows are working, improve the product, diagnose broad issues, and support app functionality.

Firebase Analytics is enabled in production. ZoneIn may log coarse product interaction, notification, purchase-flow, and app-health/funnel events. Analytics parameters are intended to be broad categories or buckets, not exact apps, websites, URLs, raw Screen Time reports, Apple user identifiers, transaction identifiers, or raw purchase amounts associated with an individual user.

ZoneIn does not intentionally send the following to Firebase Analytics:

• Selected app names.
• Selected website domains or URLs.
• Apple user ID.
• Transaction ID.
• Raw purchase amount.
• Raw Screen Time report data.
• IDFA or advertising identifiers.

ZoneIn uses the FirebaseAnalyticsWithoutAdIdSupport variant and does not use Firebase Analytics for targeted advertising or cross-app tracking.

11. Notifications

ZoneIn asks for permission to send alerts, badges, and sounds so it can deliver focus-related reminders and account for notification interactions in product analytics where analytics is enabled.

ZoneIn may send a scheduled-block warning 5 minutes before a recurring scheduled block begins. The notification title may include the schedule/session name you entered, and the body may include the count of selected apps and websites that will be blocked. If you edit the schedule, ZoneIn is designed to update or replace the corresponding scheduled notification so that the timing, title, and body reflect the edited schedule.

ZoneIn may also send a one-time setup reminder if you download and launch the app but have not created a focus session or scheduled block. If you create a focus session or scheduled block before the reminder is delivered, ZoneIn is designed not to show that reminder. This reminder is designed to be sent only once. Tapping it may open ZoneIn, present the Create Schedule sheet, and log a coarse analytics event so we can understand whether the reminder helps users complete setup.

Notifications can appear on your lock screen, Notification Center, banners, Apple Watch, or other Apple notification surfaces depending on your iOS settings. Avoid using sensitive information in schedule names if you do not want it to appear in a notification.

You can change notification permissions at any time in iOS Settings. iOS and Apple notification services control delivery, and ZoneIn cannot guarantee that any notification will be delivered on time or at all. ZoneIn does not use notifications for advertising or cross-app tracking.

12. Companion website

The website tryzonein.com is operated by the same joint data controllers. Visiting the website and using the ZoneIn iOS app are separate data-processing contexts.

The website may use analytics logging for basic visit signals such as page views, timestamps, browser and device information, referral information, and similar usage signals. Website analytics data is separate from your on-device ZoneIn Screen Time data.

The website does not currently use website analytics for advertising, retargeting, or cross-context behavioral advertising.

13. Third-party services

ZoneIn uses the following third-party services. These services may process data under their own privacy policies and contractual terms.

ZoneIn does not currently use a custom first-party server, Firebase Authentication, Firestore, Firebase Cloud Messaging, Firebase Storage, Crashlytics, advertising SDKs, AppTrackingTransparency prompts, or IDFA.

14. Legal bases for processing

Where GDPR, UK GDPR, or similar laws apply, the legal bases for processing may include:

• Contract or steps before contract. To provide the app, authenticate you, run focus sessions and schedules, process paid overrides, and provide support.
• Consent. For permissions such as Screen Time / FamilyControls, notifications, and analytics where consent is required by law or platform policy.
• Legitimate interests. To secure the app, prevent fraud, support reliable operation, improve product flows, and understand aggregate usage, where those interests are not overridden by your rights.
• Legal obligations. To comply with tax, accounting, consumer protection, App Store, dispute, and legal requirements.

You may withdraw consent where processing is based on consent. Withdrawal does not affect processing that occurred before withdrawal.

15. Data retention

ZoneIn does not currently maintain first-party server storage for core app models.

16. Data security

ZoneIn uses technical and organizational measures designed to protect personal information, including:

• iOS app sandboxing.
• Device-level encryption provided by iOS and the user’s device settings.
• Local storage rather than a first-party backend for core app models.
• HTTPS/TLS network traffic to Apple, RevenueCat, and Firebase.
• Limited local operational diagnostics retention.
• Use of opaque Apple tokens for Screen Time selections.

No security system is perfect. We cannot guarantee that data will never be accessed, disclosed, altered, or destroyed. You should protect your device with a passcode, Face ID, Touch ID, and up-to-date iOS software.

17. Your choices and controls

• Screen Time permission. You can grant or revoke Screen Time / FamilyControls authorization through iOS system settings. If you revoke it, ZoneIn may not be able to block apps or show the dashboard as designed.
• Notification permission. You can grant or revoke notification permission in iOS Settings.
• Sign in with Apple. You can manage apps using Sign in with Apple in your Apple Account settings. Revoking Sign in with Apple may affect ZoneIn account functionality.
• Hard Mode. If Hard Mode is enabled during an active block, app removal may be restricted device-wide until the block ends, an override is active, or ZoneIn otherwise clears the restriction.
• Paid override control. You may purchase an override to temporarily lift active blocks. You may also use “Lock Back In” to end an override early and re-engage blocking.
• Delete local data. Deleting the app generally removes app-local data from your device, subject to iOS behavior and any active Hard Mode app-removal restriction.

18. Privacy rights

To exercise privacy rights, email contact@tryzonein.com. We may need to verify your identity before fulfilling a request. Because ZoneIn stores most core app data locally and does not operate a first-party backend, some requests may require action on your device or may be limited to data held by third-party providers such as RevenueCat, Firebase, Apple, or support email systems.

Applicable laws may provide deadlines and exceptions for privacy requests. For example, GDPR, UK GDPR, CCPA/CPRA, and other privacy laws can provide access, deletion, correction, portability, objection, opt-out, complaint, or appeal rights depending on where you live and the context of the request.

Account deletion

You may request account deletion by emailing contact@tryzonein.com. Deleting your ZoneIn account may require deleting local app data on your device and requesting deletion or de-identification from applicable processors where feasible. Apple, RevenueCat, Firebase, and email providers may retain certain records under their own legal, fraud-prevention, tax, security, and operational requirements.

California rights under CCPA / CPRA

To the extent the CCPA/CPRA applies, California residents may have the right to know, access, delete, correct, opt out of sale or sharing, limit certain sensitive-information uses, and not be discriminated against for exercising privacy rights.

ZoneIn does not sell personal information. ZoneIn does not share personal information for cross-context behavioral advertising. ZoneIn does not use sensitive personal information for purposes that require a right to limit under CCPA/CPRA, unless this policy says otherwise.

Authorized agents

Where applicable law allows, you may use an authorized agent to submit a request. We may require proof of authorization and may ask you to verify your identity directly.

19. Children’s privacy

ZoneIn is a general-audience app. It is not designed for or marketed to children under 13, and the developers do not knowingly collect personal information from children under 13. ZoneIn is designed as a self-control tool for the device owner, not as a child-directed service or parental-control service.

If you are a parent or guardian and believe a child under 13 has provided personal information to ZoneIn, contact contact@tryzonein.com.

Minimum age / App Store availability for ZoneIn: 4+.

20. International data transfers

ZoneIn may be made available worldwide, including in the European Union, European Economic Area, and United Kingdom. The controllers are located in New York, United States. Apple, RevenueCat, and Google/Firebase are based in the United States and may process data in the United States and other countries where they or their service providers operate.

International transfers may be subject to vendor transfer mechanisms, data processing agreements, Data Privacy Framework certifications where applicable, Standard Contractual Clauses, UK transfer safeguards, or other legally recognized transfer mechanisms.

21. Apple-specific disclosures

App Tracking Transparency

ZoneIn does not use App Tracking Transparency because ZoneIn does not track you across apps or websites owned by other companies for advertising or data-broker purposes. ZoneIn does not collect IDFA.

FamilyControls, Screen Time, and opaque tokens

ZoneIn uses Apple Screen Time and FamilyControls APIs. App and website selections are represented by opaque Apple tokens. ZoneIn does not receive readable names or URLs from these tokens and does not attempt to identify selected apps or websites for analytics or advertising.

Device-wide Hard Mode app-removal restriction

ZoneIn can use Apple ManagedSettings denyAppRemoval as part of Hard Mode. When active, this restriction can prevent app removal across the device. It is not limited to removal of ZoneIn. This behavior is part of how iOS ManagedSettings works.

22. Data ZoneIn does not collect

Based on the current app design, ZoneIn does not collect or access the following categories through the app:

• Precise location or coarse location.
• Contacts.
• Photos or photo library.
• Camera.
• Microphone.
• Calendar.
• HealthKit or health data.
• ADHD diagnosis, ADHD treatment, or other medical/mental-health diagnosis information.
• Bluetooth.
• IDFA or advertising identifiers.
• Advertising SDKs.
• Subscription purchase products in the current app version.
• Crash reports through Crashlytics or another third-party crash-reporting SDK.
• Cloud sync of local ZoneIn models.
• Messaging, social sharing, or user-generated public content.
• Raw Screen Time report uploads to a first-party ZoneIn server.

Apple may collect diagnostics, crash information, App Store purchase history, or other data under Apple’s own settings and policies. That is separate from ZoneIn’s collection.

23. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of tryzonein.com/privacy identifies the current version.

Continued use of ZoneIn after the effective date of an updated policy means you accept the updated policy, unless applicable law requires a different form of notice or consent.

24. Contact

For privacy questions, data rights requests, account deletion requests, and support relating to this policy, contact:

Email: contact@tryzonein.com
Mailing address: Email contact@tryzonein.com to request the mailing address for legal or privacy notices.
Joint data controllers: Tash-had Saqif and Elijah Kajinic

25. Governing law

This Privacy Policy is governed by the laws of the State of New York, United States, without regard to conflict-of-law rules.

This governing-law clause does not limit privacy rights that cannot be waived under applicable law.