ZoneIn Privacy Policy

Privacy at a glance

This summary is written in plain language. The detailed sections below are the full Privacy Policy.

• ZoneIn is a self-control app. ZoneIn: App Blocker for ADHD helps you block apps, app categories, websites, and website categories that you choose, using Apple Screen Time-related APIs.
• ADHD references are not health-data collection. References to ADHD describe the app’s audience and product positioning. ZoneIn does not ask whether you have ADHD, does not collect ADHD diagnosis information, and is not a medical or mental-health service.
• Most core app data stays on your device. Your block schedules, focus sessions, selected blocking targets, override state, dashboard summaries, and app-extension coordination state are stored locally on your device. ZoneIn does not operate a first-party backend server for this core app data.
• Your selected apps and websites are represented by Apple tokens. ZoneIn stores opaque Apple Screen Time selection tokens. Nagi Labs LLC does not receive readable app names, website domains, URLs, messages, passwords, or content from those tokens.
• Screen Time usage reports are processed on-device. ZoneIn uses Apple DeviceActivity reporting to show screen-time metrics on your device. Raw Screen Time reports are not uploaded to a first-party server.
• Sign in with Apple is required in production builds. ZoneIn requests the full name and email scopes from Apple during authentication, but the current app stores only Apple’s stable user identifier on-device. That identifier is also used with RevenueCat for purchase attribution.
• ZoneIn’s core features are free and tip-supported. You get 3 free Emergency Passes each week to pause your blocks. After those passes are used, an additional Zone Out break before the weekly reset requires a successful one-time tip purchase. No payment is required to continue using the rest of the app or wait for the weekly reset. Apple and RevenueCat process purchases; ZoneIn does not receive or store your payment card number.
• Shield designs stay on your device. Custom shield text, colors, icon choices, emoji, and any photo you explicitly select are stored locally for the app and its extensions. ZoneIn does not upload the shield design or selected image to a first-party server.
• Firebase is used for coarse analytics and app functionality services. ZoneIn may use Firebase / Google services for app instance identifiers, coarse product interaction, notification, purchase-flow, and app-health/funnel analytics. ZoneIn does not intentionally send raw selected app names, website domains, Apple user IDs, transaction IDs, raw purchase amounts, or raw Screen Time reports to Firebase.
• Notifications are used for focus reminders and setup reminders. If you allow notifications, ZoneIn may send a 5-minute warning before a scheduled block begins and a one-time reminder if you launch the app but have not created a focus session or scheduled block.
• No ads. No subscriptions. No cross-app tracking. The current app is supported by optional tips rather than ads or subscriptions. ZoneIn does not use IDFA, does not use App Tracking Transparency because it does not track you across other companies’ apps and websites, and does not sell or share personal information for cross-context behavioral advertising.
• Strict Mode is device-wide when active. Strict Mode is the in-app name for ZoneIn’s commitment feature. If enabled during an active block, Apple’s ManagedSettings app removal restriction can prevent removal of apps on the device generally, not just ZoneIn, and schedules can't be changed while an Emergency Pass is active.

1. Scope of this policy

This Privacy Policy explains how Nagi Labs LLC (“Nagi Labs,” “we,” “us,” or “our”) collects, uses, stores, discloses, and protects personal information in connection with ZoneIn: App Blocker for ADHD (“ZoneIn”), the iOS app available under bundle identifier com.tryzonein.app.

This policy covers the ZoneIn iOS app and the app extensions that support its Screen Time functionality. It also includes a short section for tryzonein.com, because website hosting and request processing are separate from the app.

This policy describes both data that may be transmitted to third-party service providers and data that is processed or stored locally on your device. We describe important local processing because it can affect your privacy and your device experience.

2. Who we are

ZoneIn is operated and provided by Nagi Labs LLC, a limited liability company organized in the State of New York. Nagi Labs LLC is the data controller for the personal information described in this policy.

3. About ZoneIn

ZoneIn is an iOS self-control and screen-time management app. It is listed as ZoneIn: App Blocker for ADHD in the App Store. References to ADHD, ADHD brains, or ADHD-friendly design describe product positioning and are not medical claims. ZoneIn is not a medical device, mental-health service, ADHD diagnosis tool, ADHD treatment, addiction treatment, therapy, or professional healthcare service. ZoneIn is designed for users who want to restrict their own device usage, not as a parental-control service for supervising someone else.

ZoneIn asks you to sign in with Apple and grant Apple Screen Time / FamilyControls authorization. You can then create immediate focus sessions or recurring schedules that block selected apps, app categories, websites, and website categories. Blocking is enforced through Apple Screen Time-related APIs and may continue while the main ZoneIn app is closed.

ZoneIn provides 3 free Emergency Passes each calendar week that temporarily lift active blocks for a duration configured in Settings, currently from 5 minutes to 24 hours. After the weekly passes are used, another Zone Out break before the reset requires a successful one-time Apple in-app purchase processed through RevenueCat. The same consumable tip products may also be offered in the Settings tip jar, where they are contributions and do not unlock a break. The current tip products are listed in the Payments section below. Available durations, prices, taxes, currency, product names, product identifiers, availability, and paywall wording may vary based on App Store configuration, RevenueCat offerings, taxes, currency, and regional availability. The Apple purchase sheet controls the final price and transaction terms at the time of purchase.

ZoneIn also includes Strict Mode, an optional commitment setting. When active, Strict Mode can prevent app removal across the device during an active block (an Apple ManagedSettings behavior not limited to the ZoneIn app icon) and locks schedule changes while an Emergency Pass or other override is active. ZoneIn also includes a Shield Designer that stores custom text, colors, button text, icon or emoji choices, and any photo you explicitly select locally on your device.

4. Data we collect and process

The table below summarizes the main categories of data processed by ZoneIn. “Local only” means the data is stored on your device and is not uploaded to a first-party ZoneIn server based on the current app design.

5. Sources of data

ZoneIn receives or processes data from the following sources:

• You. You create schedules, focus sessions, block selections, Emergency Pass usage, optional tips, shield designs, optionally select a shield image, choose settings, and send support messages.
• Your device and iOS. iOS provides permission status, local storage, Screen Time authorization, DeviceActivity events, usage reports, notification settings, and ManagedSettings enforcement.
• Apple. Apple provides Sign in with Apple authentication data, App Store purchase and transaction information, Screen Time APIs, and system-level permission and purchase flows.
• RevenueCat. RevenueCat provides paywall, offering, purchase, receipt, and customer-info infrastructure.
• Firebase / Google. Firebase provides analytics and app functionality services.
• Companion website systems. The website tryzonein.com has analytics logging that is separate from the app.

6. How we use data

ZoneIn uses data for these purposes:

• Authenticate you with Sign in with Apple.
• Store your local ZoneIn configuration and preferences.
• Let you create, edit, run, pause, resume, and end focus sessions and schedules.
• Apply blocks to apps, categories, websites, and website categories you select.
• Coordinate enforcement between the main app and iOS extensions.
• Show your on-device Screen Time dashboard.
• Process optional tip purchases through Apple and RevenueCat.
• Temporarily lift active blocks during an Emergency Pass or tip-unlocked override and re-engage them when it expires.
• Apply or remove Strict Mode app-removal restriction behavior when enabled and applicable.
• Store and display the shield design and optional shield image you choose.
• Analyze app flows and broad product usage if Firebase Analytics is enabled.
• Respond to support, feedback, privacy, deletion, and legal requests.
• Maintain security, prevent fraud, support reliable local operation, and comply with legal obligations.

ZoneIn does not use your data to build advertising profiles. ZoneIn does not sell your personal information. ZoneIn does not share your personal information for cross-context behavioral advertising.

7. Screen Time, FamilyControls, and on-device processing

ZoneIn depends on Apple’s Screen Time-related frameworks, including FamilyControls, ManagedSettings, DeviceActivity, DeviceActivityReport, and related app extensions.

ZoneIn requests Screen Time authorization for .individual use. This means the app is designed for self-imposed device restrictions by the device owner, not for parental supervision of a child account.

What Screen Time permission allows ZoneIn to do

• Let you pick apps, app categories, websites, and web-domain categories to block.
• Store those selections as Apple-provided opaque tokens.
• Apply shields to selected apps, categories, websites, or domains during active blocks.
• Monitor start and end times for schedules, focus sessions, and override expiration.
• Process Screen Time activity reports on-device for the dashboard.

What ZoneIn does not do with Screen Time data

• ZoneIn does not upload raw Screen Time report histories to a first-party server.
• ZoneIn does not send selected app names or website domains to Firebase Analytics.
• ZoneIn does not send raw app usage histories to RevenueCat.
• ZoneIn does not use Screen Time selections or Screen Time usage reports for advertising.
• ZoneIn does not attempt to reverse-engineer Apple’s opaque tokens into readable app names, website URLs, or domains.

Some local data is shared between the main app and extensions using the App Group group.com.tryzonein.app. This allows enforcement to continue when the main app is closed.

8. Sign in with Apple

Sign in with Apple is required in ZoneIn production builds. ZoneIn requests the following scopes during authentication:

• Full name
• Email address

Apple may provide those fields during the authentication flow. Based on the current app design, ZoneIn retains only Apple’s stable user identifier on-device. ZoneIn does not currently retain the full name or email address returned by Apple during authentication.

RevenueCat may initially assign an anonymous app-user identifier when its SDK starts. After ZoneIn synchronizes a stored Sign in with Apple identifier, ZoneIn uses that identifier as the RevenueCat app user ID. This lets RevenueCat attribute purchases, provide customer and receipt information, and associate purchase records with your ZoneIn account state. The current tip products are consumable purchases and are not represented as a restorable balance or entitlement.

Apple’s processing of Sign in with Apple and Apple Account data is governed by Apple’s own privacy terms and policies.

9. Tips, Emergency Passes, and payments

ZoneIn’s core blocking, scheduling, dashboard, and customization features are free to use. ZoneIn provides 3 free Emergency Passes each calendar week; a pass temporarily lifts active blocks for the duration configured in Settings, currently from 5 minutes to 24 hours. Emergency Passes involve no payment. The weekly pass count, selected duration, and calendar-week anchor are stored locally on your device.

After all 3 weekly passes are used, an additional Zone Out break before the weekly reset requires a successful one-time consumable Apple in-app purchase. The purchase products are branded as tips, are not subscriptions, and do not renew. Payment is not required to continue using the rest of ZoneIn or to wait for the free passes to reset.

The same consumable product identifiers may appear in two contexts. A purchase started from the Settings tip jar is a contribution and does not suspend blocks. A purchase started from the Zone Out override flow, available after the free passes are exhausted, also unlocks one temporary break of the corresponding duration.

Prices, taxes, currency, and availability may vary, and the Apple purchase sheet controls the final price and transaction terms at the time of purchase. After an Emergency Pass or tip-unlocked break ends, blocking can automatically re-engage.

Apple processes the App Store purchase. ZoneIn does not receive or store your payment card number, bank account number, or full billing credentials.

RevenueCat provides paywall, offering, purchase-processing, receipt-validation, and customer-info infrastructure. RevenueCat may assign an anonymous app-user identifier and later receive the Apple user identifier used by ZoneIn after sign-in synchronization. RevenueCat may also process product identifiers, offering identifiers, entitlement/customer status, transaction-related metadata, device/app metadata, and receipt information needed to provide its service.

ZoneIn stores limited override and Emergency Pass records locally, including timing, duration, weekly pass usage, and limited purchase metadata if available. This local record is used to apply and end overrides correctly.

Refunds, chargebacks, failed purchases, taxes, billing issues, and App Store purchase history may be handled by Apple. RevenueCat and Apple may retain transaction information according to their own policies and legal obligations.

10. Analytics and app functionality services

ZoneIn may use Firebase / Google services to understand whether major app flows are working, improve the product, diagnose broad issues, and support app functionality.

ZoneIn includes a Firebase Analytics integration and may log coarse product interaction, notification, purchase-flow, and app-health/funnel events when analytics is enabled. Analytics parameters are intended to be broad categories or buckets, not exact apps, websites, URLs, raw Screen Time reports, Apple user identifiers, transaction identifiers, or raw purchase amounts associated with an individual user.

ZoneIn does not intentionally send the following to Firebase Analytics:

• Selected app names.
• Selected website domains or URLs.
• Apple user ID.
• Transaction ID.
• Raw purchase amount.
• Raw Screen Time report data.
• IDFA or advertising identifiers.

ZoneIn uses the FirebaseAnalyticsWithoutAdIdSupport variant and does not use Firebase Analytics for targeted advertising or cross-app tracking.

11. Notifications

ZoneIn asks for permission to send alerts, badges, and sounds so it can deliver focus-related reminders and account for notification interactions in product analytics where analytics is enabled.

ZoneIn may send a scheduled-block warning 5 minutes before a recurring scheduled block begins. The notification title may include the schedule/session name you entered, and the body may include the count of selected apps and websites that will be blocked. If you edit the schedule, ZoneIn is designed to update or replace the corresponding scheduled notification so that the timing, title, and body reflect the edited schedule.

ZoneIn may also send a one-time setup reminder if you download and launch the app but have not created a focus session or scheduled block. If you create a focus session or scheduled block before the reminder is delivered, ZoneIn is designed not to show that reminder. This reminder is designed to be sent only once. Tapping it may open ZoneIn, present the Create Schedule sheet, and log a coarse analytics event so we can understand whether the reminder helps users complete setup.

Notifications can appear on your lock screen, Notification Center, banners, Apple Watch, or other Apple notification surfaces depending on your iOS settings. Avoid using sensitive information in schedule names if you do not want it to appear in a notification.

You can change notification permissions at any time in iOS Settings. iOS and Apple notification services control delivery, and ZoneIn cannot guarantee that any notification will be delivered on time or at all. ZoneIn does not use notifications for advertising or cross-app tracking.

12. Companion website

The website tryzonein.com is operated by Nagi Labs LLC. Visiting the website and using the ZoneIn iOS app are separate data-processing contexts.

The website is served through Firebase Hosting. The current website does not load a client-side analytics or advertising script and does not set a first-party analytics cookie. Hosting and security infrastructure may still process ordinary request data such as IP address, requested page, timestamp, browser or device information, referrer, and diagnostic or security logs.

Website request data is separate from your on-device ZoneIn Screen Time data and is not used by Nagi Labs LLC for advertising, retargeting, or cross-context behavioral advertising.

13. Third-party services

ZoneIn uses the following third-party services. These services may process data under their own privacy policies and contractual terms.

ZoneIn does not currently use a custom first-party server, Firebase Authentication, Firestore, Firebase Cloud Messaging, Firebase Storage, Crashlytics, advertising SDKs, AppTrackingTransparency prompts, or IDFA.

14. Legal bases for processing

Where GDPR, UK GDPR, or similar laws apply, the legal bases for processing may include:

• Contract or steps before contract. To provide the app, authenticate you, run focus sessions and schedules, provide Emergency Passes, process optional tips, and provide support.
• Consent. For permissions such as Screen Time / FamilyControls, notifications, and analytics where consent is required by law or platform policy.
• Legitimate interests. To secure the app, prevent fraud, support reliable operation, improve product flows, and understand aggregate usage, where those interests are not overridden by your rights.
• Legal obligations. To comply with tax, accounting, consumer protection, App Store, dispute, and legal requirements.

You may withdraw consent where processing is based on consent. Withdrawal does not affect processing that occurred before withdrawal.

15. Data retention

ZoneIn does not currently maintain first-party server storage for core app models.

16. Data security

ZoneIn uses technical and organizational measures designed to protect personal information, including:

• iOS app sandboxing.
• Device-level encryption provided by iOS and the user’s device settings.
• Local storage rather than a first-party backend for core app models.
• HTTPS/TLS network traffic to Apple, RevenueCat, and Firebase.
• Limited local operational diagnostics retention.
• Use of opaque Apple tokens for Screen Time selections.

No security system is perfect. We cannot guarantee that data will never be accessed, disclosed, altered, or destroyed. You should protect your device with a passcode, Face ID, Touch ID, and up-to-date iOS software.

17. Your choices and controls

• Screen Time permission. You can grant or revoke Screen Time / FamilyControls authorization through iOS system settings. If you revoke it, ZoneIn may not be able to block apps or show the dashboard as designed.
• Notification permission. You can grant or revoke notification permission in iOS Settings.
• Sign in with Apple. You can manage apps using Sign in with Apple in your Apple Account settings. Revoking Sign in with Apple may affect ZoneIn account functionality.
• Strict Mode. If Strict Mode is enabled during an active block, app removal may be restricted device-wide until the block ends, an Emergency Pass or other override is active, or ZoneIn otherwise clears the restriction. Strict Mode also locks schedule changes while a pass or override is active.
• Emergency Pass and override control. You may use a free weekly Emergency Pass (or a tip-unlocked override) to temporarily lift active blocks. You may also use “Lock Back In” to end it early and re-engage blocking.
• Delete local data. Deleting the app generally removes app-local data from your device, subject to iOS behavior and any active Strict Mode app-removal restriction.

18. Privacy rights

To exercise privacy rights, email contact@tryzonein.com. We may need to verify your identity before fulfilling a request. Because ZoneIn stores most core app data locally and does not operate a first-party backend, some requests may require action on your device or may be limited to data held by third-party providers such as RevenueCat, Firebase, Apple, or support email systems.

Applicable laws may provide deadlines and exceptions for privacy requests. For example, GDPR, UK GDPR, CCPA/CPRA, and other privacy laws can provide access, deletion, correction, portability, objection, opt-out, complaint, or appeal rights depending on where you live and the context of the request.

Account deletion

You may request account deletion by emailing contact@tryzonein.com. Deleting your ZoneIn account may require deleting local app data on your device and requesting deletion or de-identification from applicable processors where feasible. Apple, RevenueCat, Firebase, and email providers may retain certain records under their own legal, fraud-prevention, tax, security, and operational requirements.

California rights under CCPA / CPRA

To the extent the CCPA/CPRA applies, California residents may have the right to know, access, delete, correct, opt out of sale or sharing, limit certain sensitive-information uses, and not be discriminated against for exercising privacy rights.

ZoneIn does not sell personal information. ZoneIn does not share personal information for cross-context behavioral advertising. ZoneIn does not use sensitive personal information for purposes that require a right to limit under CCPA/CPRA, unless this policy says otherwise.

Authorized agents

Where applicable law allows, you may use an authorized agent to submit a request. We may require proof of authorization and may ask you to verify your identity directly.

19. Children’s privacy

ZoneIn is a general-audience app. It is not designed for or marketed to children under 13, and Nagi Labs LLC does not knowingly collect personal information from children under 13. ZoneIn is designed as a self-control tool for the device owner, not as a child-directed service or parental-control service.

If you are a parent or guardian and believe a child under 13 has provided personal information to ZoneIn, contact contact@tryzonein.com.

Minimum age / App Store availability for ZoneIn: 4+.

20. International data transfers

ZoneIn may be made available worldwide, including in the European Union, European Economic Area, and United Kingdom. Nagi Labs LLC is organized in New York, United States. Apple, RevenueCat, and Google/Firebase are based in the United States and may process data in the United States and other countries where they or their service providers operate.

International transfers may be subject to vendor transfer mechanisms, data processing agreements, Data Privacy Framework certifications where applicable, Standard Contractual Clauses, UK transfer safeguards, or other legally recognized transfer mechanisms.

21. Apple-specific disclosures

App Tracking Transparency

ZoneIn does not use App Tracking Transparency because ZoneIn does not track you across apps or websites owned by other companies for advertising or data-broker purposes. ZoneIn does not collect IDFA.

FamilyControls, Screen Time, and opaque tokens

ZoneIn uses Apple Screen Time and FamilyControls APIs. App and website selections are represented by opaque Apple tokens. ZoneIn does not receive readable names or URLs from these tokens and does not attempt to identify selected apps or websites for analytics or advertising.

Device-wide Strict Mode app-removal restriction

ZoneIn can use Apple ManagedSettings denyAppRemoval as part of Strict Mode. When active, this restriction can prevent app removal across the device. It is not limited to removal of ZoneIn. This behavior is part of how iOS ManagedSettings works.

22. Data ZoneIn does not collect

Except for an image you explicitly choose through Apple’s system photo picker for a custom shield icon, ZoneIn does not collect or access the following categories through the app:

• Precise location or coarse location.
• Contacts.
• Your broader photo library or photos you do not select.
• Camera.
• Microphone.
• Calendar.
• HealthKit or health data.
• ADHD diagnosis, ADHD treatment, or other medical/mental-health diagnosis information.
• Bluetooth.
• IDFA or advertising identifiers.
• Advertising SDKs.
• Subscription purchase products in the current app version.
• Crash reports through Crashlytics or another third-party crash-reporting SDK.
• Cloud sync of local ZoneIn models.
• Messaging, social sharing, or user-generated public content.
• Raw Screen Time report uploads to a first-party ZoneIn server.

If you choose a custom shield image, ZoneIn receives only the selected image from the system picker, prepares a small cropped copy on-device, and stores that copy locally for the shield extension. It is not uploaded to a first-party ZoneIn server.

Apple may collect diagnostics, crash information, App Store purchase history, or other data under Apple’s own settings and policies. That is separate from ZoneIn’s collection.

23. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of tryzonein.com/privacy identifies the current version.

Continued use of ZoneIn after the effective date of an updated policy means you accept the updated policy, unless applicable law requires a different form of notice or consent.

24. Contact

For privacy questions, data rights requests, account deletion requests, and support relating to this policy, contact:

Email: contact@tryzonein.com
Company email: contact@nagilabs.dev
Company: Nagi Labs LLC
Company website: nagilabs.dev
Mailing address: Email either address above to request the mailing address for legal or privacy notices.

25. Governing law

This Privacy Policy is governed by the laws of the State of New York, United States, without regard to conflict-of-law rules.

This governing-law clause does not limit privacy rights that cannot be waived under applicable law.