Privacy Policy

Effective September 4, 2026 · Applies to the 28 Hour Day iOS app and this website.

28 Hour Day is local-first: app blocking happens on your phone without an account. If you turn on optional Cloud Backup, your account keeps a backup of the profile and progress data described below. This policy explains what we handle, why, and what never leaves your device.

What stays on your device

• Your blocked-app choices. App blocking uses Apple's Screen Time (Family Controls) technology. Your selections are represented by device-bound tokens and remain on your device. They are not included in your account backup or sent to our servers or third parties.
• Your local Screen Time report. Apple's Device Activity report extension processes Screen Time activity on your device to display total usage and up to five app names and durations for the reporting period. These report details are not passed to the main app, sent to our servers or third parties, retained by the report, or synchronized with your account.
• Your local shield and activity records. To provide unlock-pattern and nightly-progress features, the Screen Time extensions may retain app or category names, interaction times and counts, and aggregate usage-threshold crossings (5, 15, 30, or 60 minutes) in the app's shared on-device storage. These records do not contain per-app duration histories and are not uploaded, backed up to your account, or synchronized off your device.
• Your Apple Health sleep samples. If you choose to connect Apple Health, 28 Hour Day reads sleep-analysis samples to compare measured sleep on protected and unlocked nights. Those samples are processed and displayed on your device only; they are not included in your account backup or sent to us or any third party.
• Your local interaction logs. Limited onboarding and check-in events are stored on your device to support the experience and local troubleshooting. Those event logs are not uploaded. If you enable Cloud Backup, only the profile and aggregate progress fields listed below are backed up.

What we collect, and why

• Account information — your email address, Supabase account identifier, and optional first name are used to sign you in and identify your backup. Authentication is provided by Supabase. If you sign in with Apple or Google, we receive the email address (or Apple's private relay address) those services share.
• Profile and progress backup — your bedtime schedule, goals, personal setup statements (including your vision, anti-vision, identity statement, and promises), appearance preference, night history, streaks, aggregate unlock count, and morning check-ins (including your rested rating) are backed up to your account so they survive a reinstall. This backup is stored with Supabase and protected by row-level security so only your account can access it. Your blocked-app choices are not part of this backup and cannot leave the device.
• Feedback you choose to send — when you use Send Feedback, we store the message, whether it is a bug report or idea, and your app version, iOS version, and device model with Supabase so we can understand and improve the app. We do not attach your goals, sleep schedule, blocked-app choices, Screen Time activity, or other progress data. Feedback sent while signed in is associated with your account identifier; feedback sent while signed out is stored without an account identifier.
• Website waitlist email — if you join the waitlist on this website, the email address you enter is sent to and retained by Formspree as our form processor so we can send the launch email you requested. It is not used for advertising or tracking, sold, or added to an in-app account unless you separately create one.

What we don't do

• No advertising, and no advertising SDKs.
• No tracking across other companies' apps or websites, and no sale of data.
• No collection of your browsing history, and no upload or account synchronization of Screen Time report details, blocked-app selections, or local shield/activity records.

Retention, deletion, and service providers

• Account and backup data is kept while your optional Cloud Backup account exists. Using Delete Account removes the account, its backup, and feedback linked to that account.
• Anonymous feedback is kept for no more than 24 months so we can investigate reported issues and plan improvements, then deleted. Because feedback sent while signed out contains no account or contact identifier, it cannot be located through account deletion.
• Waitlist email is kept until the requested launch email is sent, then deleted, or removed sooner if you email us from that address. We process removal requests within 30 days.
• On-device data remains until you remove it using the app's account-deletion controls where applicable or delete the app.

Supabase processes optional account, backup, and app-feedback data; Formspree processes website waitlist submissions. We require service providers that receive user data to use it only to provide their contracted service and to maintain protections equivalent to those described in this policy. We do not authorize either provider to use this data for advertising or cross-service tracking.

Price

Version 1.0 is free and has no subscriptions or in-app purchases.

Deleting your data

• Delete your account from inside the app (Settings → Account → Delete Account). This permanently deletes your sign-in and cloud backup, along with account-scoped profile and progress data, feedback associated with your account, Screen Time selections, and local shield/activity records on that device. Feedback sent while signed out has no account identifier and therefore cannot be found or removed through account deletion. When applicable, the app also asks Apple to revoke Sign in with Apple access; if automatic revocation cannot be confirmed, it shows the steps for removing access in Apple Account settings.
• Delete the app to remove any remaining on-device data.
• Leave the website waitlist by emailing the contact address below from the address you submitted and asking us to remove it.

Children

28 Hour Day is designed for adults managing their own sleep and is not directed at children. It is not a parental-control product and provides no monitoring of anyone else's device.

Changes

If this policy changes materially, we'll update this page and its effective date. Significant changes will be noted in the app's release notes.

Contact

Questions about privacy or your data: support@28hourday.com