Privacy Policy
App Hush is provided by Moutaz Baaj, based in Berlin, Germany (“we”, “us”, or “our”). Moutaz Baaj is the data controller for the processing for which we determine the purposes and means, as described below. Contact us at moutazbaaj@gmail.com; see contact details below.
This policy covers the App Hush iPhone and iPad app, its companion Apple Watch app, and this policy website.
The short version
App Hush helps you manage focus blocks, usage limits, scheduled app lists, and blocked websites using Apple’s Screen Time features. No App Hush account is required, and the app does not display advertising.
Your focus settings and Screen Time reports are not sent to us or Firebase as an activity history. Remote notifications do use technical identifiers processed by Apple and Google Firebase. The release covered by this policy does not use Firebase Analytics or Firebase Crashlytics.
“No Screen Time data sent to us” does not mean that no personal data is processed: notification services, website hosting, and emails you send us involve the limited information explained below.
1. Screen Time and information on your device
With your authorization, App Hush uses Apple’s Family Controls, Device Activity, and Managed Settings frameworks to select apps, display usage reports, and apply restrictions.
Information processed for these features includes:
- Apple-provided app identifiers or tokens, app names and icons, and usage durations available through Screen Time.
- Your selected apps, focus-block end times, usage allowances, and block durations.
- Schedule names, selected apps, weekdays, time windows, and enabled status.
- Website domains you choose to block and your app preferences.
App Hush stores the settings needed for these features in local app storage, including storage shared with its own Apple-authorized extensions. Usage reports are rendered using Apple’s Device Activity report framework. We do not operate a server that stores these Screen Time reports, app selections, or blocked-domain lists.
Adding a domain to a block list does not mean App Hush collects your browsing history. App Hush does not read messages, passwords, or the contents you view inside other apps.
Apple’s own processing, Screen Time synchronization, device backups, and system settings are governed separately by Apple. Local app data may be included in backups according to your device settings.
2. Local and remote notifications
Local reminders
App Hush uses Apple’s notification framework for reminders such as a schedule starting or ending, or a block period finishing. These reminders are created on your device. Their text may include an app or schedule name, which may appear on your Lock Screen depending on your notification-preview settings.
Remote messages through Firebase
App Hush uses Firebase Cloud Messaging and Apple Push Notification service (APNs) for app news, update announcements, and service messages. This involves notification tokens, a Firebase installation identifier, and technical details such as device model, app and operating-system versions, language, and time zone. These allow the services to route messages to the appropriate app installation or announcement topic. See Firebase’s Apple-platform data disclosures.
Google may also process connection and operational information, including IP addresses, to run and secure its services. A notification identifier is not your name, but it can distinguish an app installation and may be personal data.
Notification permission controls visible alerts, sounds, and badges. It does not necessarily prevent Firebase from initializing or processing an installation identifier, and turning alerts off does not itself erase previously processed identifiers. See Firebase’s auto-initialization documentation.
We do not send your Screen Time totals, per-app usage report, selected app lists, schedules, or blocked domains to Firebase to deliver these announcements. Remote notifications do not install new versions of the app; software updates are handled through Apple’s distribution system.
3. Apple Watch and device authentication
If you use the companion Apple Watch app, App Hush uses Apple’s WatchConnectivity framework to share protection information with your paired watch. This can include blocked app names and end times, usage-limit rules and status, scheduled lists and their selected apps, and blocked website domains. The watch may retain the last received information so it can display it when the phone is unavailable.
When Face ID, Touch ID, or your device passcode is used to open App Hush, Apple handles authentication. App Hush receives the authentication result, not your biometric templates or passcode.
4. Service providers and disclosures
Apple provides the operating-system features, device authentication, notifications, and paired-device communication described above. Google Firebase provides remote notification infrastructure. If you email us, we receive your address, message, and any information you choose to include; our email provider processes that correspondence.
We do not sell your personal information or use your Screen Time activity for advertising. We may disclose information we actually hold when necessary to comply with a valid legal obligation, protect legal rights, or respond to security issues. We cannot provide device-only records that we do not possess.
Firebase services can process information outside your country, including in the United States. Where transfer safeguards are required, the applicable provider agreements and lawful transfer mechanisms must govern that processing. Details are available in Firebase’s privacy information and Firebase’s data-processing terms.
See also Apple’s Privacy Policy and Google’s Privacy Policy.
5. Why information is processed
We use the information described here to provide the focus features you request, synchronize protection status with your watch, deliver notifications, respond to your messages, and meet applicable legal obligations.
Where the GDPR or UK GDPR applies, processing necessary to provide the service you request is based on performance of a contract; handling support and security issues may be based on legitimate interests, subject to your rights; and legally required processing is based on the relevant legal obligation. Where consent is required, it must be obtained and can be withdrawn.
6. Retention and deletion
- Local settings: kept while needed for your saved rules and preferences. You can remove rules or lists using the app’s controls. Deleting the app generally removes its local app container; offloading the app is different and may retain data. Paired-watch data and device backups may require separate removal.
- Screen Time: Apple manages its system records separately. Removing App Hush does not delete Apple’s Screen Time history.
- Firebase identifiers: Google states that FCM installation IDs are retained until a deletion request is made through the relevant API; removal from live and backup systems can then take up to 180 days. Uninstalling the app or disabling alerts is not a promise of immediate server-side deletion. See Firebase’s retention information.
- Support correspondence: retained only for as long as needed to handle your inquiry and reasonably necessary follow-up. Where a legal retention duty or a specific legal claim requires longer storage, the relevant correspondence is kept for that purpose and removed when that need ends.
Contact us to ask about information held by us or our processors. Because there is no App Hush account, we may need limited additional information to identify a relevant installation or request. We will explain what we can identify and delete; do not send passwords or an unnecessary full Screen Time report.
7. Your choices and privacy rights
- Screen Time access: review or revoke App Hush’s permission in your device’s Screen Time settings. Blocking and reporting features may stop working when permission is removed.
- Notifications: use iOS Settings → Notifications → App Hush to change alerts and Lock Screen previews. Remote alerts are optional and not required to configure focus rules.
- Saved rules: edit or remove blocks, usage limits, schedules, and website entries in the app.
- Watch data: remove the companion app if you no longer want its cached protection information on the watch.
Depending on where you live and the applicable law, you may have rights to access, correct, delete, or receive a copy of personal data, restrict or object to processing, withdraw consent, and complain to your local data-protection authority. These rights have legal conditions and exceptions. Contact us using the details below; we will respond within the applicable legal time limit.
You can also contact the Berlin Commissioner for Data Protection and Freedom of Information, or another competent supervisory authority. You do not have to contact us first before making a complaint.
We do not use your information to make automated decisions that produce legal or similarly significant effects. App blocking follows the rules you choose.
8. Children’s privacy
App Hush’s minimum age for use follows the age rating shown on its App Store listing in your country, subject to applicable law and any required parental or guardian authorization. Check that listing for the applicable rating; a rating is not a substitute for legal permission to enter a contract or consent to personal-data processing.
Where a child’s use requires parental authorization under applicable law, that authorization must be provided before the relevant processing takes place. Apple’s Screen Time authorization does not replace every legal requirement for children’s privacy. If you believe personal information has been processed without required authorization, please contact us so we can investigate and take appropriate action.
9. Security
App Hush relies on Apple’s app isolation, authorization controls, and device security for its local features. Provider communications use their supported secure transport mechanisms. No app, device, or online service can guarantee absolute security. Keep your devices updated and protect access to them.
10. This website
This page contains no advertising, analytics scripts, forms, or tracking cookies added by us. Fonts and page assets are served with the page, rather than loaded from an advertising or analytics service.
When hosted on GitHub Pages, GitHub processes request information, such as your IP address and browser details, to serve and protect the site. See the GitHub Privacy Statement. Following an external link is subject to that provider’s policy.
11. Changes to this policy
We will update this page and its effective date if our practices change. Material changes will be communicated as required by law. If analytics, crash reporting, advertising, or new cloud features are introduced, the policy and any required permissions or consent will be updated before the new processing begins. A policy update is not a substitute for consent where consent is required.