1. Who we are
RestEyes is an iOS visual-wellbeing app provided by Samuel Rischebourg in France (“RestEyes”, “we”, “us”, or “our”). For privacy questions or requests, contact us at resteyes00@gmail.com.
This policy explains what information the current version of RestEyes handles, where it is stored, and the limited cases in which service providers receive information.
2. Data kept on your device
Most RestEyes data stays locally on your iPhone and, where needed for the app’s Screen Time extensions, in Apple’s App Group storage. This includes break and Screen Time statistics, app preferences, reminder settings, selections used by Screen Time, and customized break content.
Photos and videos
If you choose photos or videos for a customized break, RestEyes copies that media into the app’s local storage. We do not upload those files to our servers, PostHog, RevenueCat, WishKit, or Supabase. Removing the media in RestEyes or deleting the app may remove the local copy.
Information you choose to send
If you email support, we receive the address, message, attachments, and other details you choose to include. Please do not send passwords, authentication tokens, or unnecessary sensitive data.
3. Screen Time and notifications
RestEyes can use Apple’s Family Controls, Device Activity, and Managed Settings frameworks after you grant permission. Apple provides opaque tokens for the apps and categories you select. RestEyes stores the selection locally so its app and extensions can schedule monitoring, display reports, and apply the features you request.
The identities of selected apps or categories, detailed Screen Time usage, and report data are not sent to PostHog or our other service providers. RestEyes may record only the number of selected apps and categories and the authorization status as anonymous analytics.
Notification settings and scheduling information remain on the device. Notifications are delivered through Apple’s operating system and may not arrive if permission is denied or iOS restricts delivery.
4. Service providers
RestEyes does not sell personal data and does not use third-party advertising. It uses the following providers only for the purposes described below.
RevenueCat — purchases and subscriptions
RevenueCat processes identifiers and transaction information needed to offer, validate, manage, and restore in-app purchases and subscriptions. Apple processes the payment itself. Depending on the purchase flow, information may include an app user identifier, product and entitlement status, purchase and renewal events, device or app information, and diagnostic data.
PostHog — anonymous product analytics
RestEyes sends a limited set of manually defined onboarding events to PostHog’s EU service. These events can include onboarding steps, the goal you selected, Screen Time and notification authorization statuses, the number of apps and categories selected, the app version, build number, analytics schema version, and whether the app is running in a development or production environment.
PostHog does not receive the identity of selected apps or categories, imported photos or videos, or detailed Screen Time usage. RestEyes disables autocapture, session replay, identified user profiles, automatic screen tracking, automatic error tracking, and automatic lifecycle or push-notification event capture.
WishKit — voluntary feedback
If you choose to submit feedback through WishKit, WishKit processes the information you decide to provide, such as your suggestion, comments, or contact details. Do not include information you do not want shared with this provider.
International transfers
These providers may process information outside your country. When required, transfers are subject to the provider’s contractual and legal safeguards, such as adequacy decisions or standard contractual clauses. Their own privacy notices provide further details.
5. Legacy accounts and Supabase
New RestEyes users do not create an account, and account creation or sign-in is not part of the current onboarding flow. Earlier versions offered accounts using Supabase, including email/password and supported identity-provider sign-in. Supabase remains in the app only to handle a possible valid session belonging to an earlier user.
If a legacy session is still active, RestEyes may access the Supabase user identifier, email address, authentication provider metadata, and session information needed to show account controls. The legacy identifier may also be linked to RevenueCat so an earlier user’s subscription access can continue consistently.
A legacy user with an active session can delete the account from RestEyes Settings. A legacy user without access to that session can request deletion at resteyes00@gmail.com. We may need enough information to verify and locate the account. Deleting an account does not cancel an Apple subscription; that must be managed separately in Apple ID subscription settings.
6. Retention and security
Local data remains on your device until you remove it, reset the relevant feature, or delete the app, subject to iOS backup and system behavior. Service providers retain the limited data they process according to their settings, legal duties, and retention policies. Support correspondence is kept only as long as reasonably needed to answer the request, maintain necessary records, and meet legal duties.
We use reasonable technical and organizational safeguards and limit collection by design. No storage or transmission method is completely secure, so we cannot guarantee absolute security.
7. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of personal data, and to receive portable data or withdraw consent where consent applies. You may also complain to your local supervisory authority. In France, this is the CNIL.
Because most RestEyes information stays only on your device, we often cannot access or identify it remotely. You can manage much of it by changing settings, removing imported media, or deleting the app. For requests concerning information held by us or a legacy account, email resteyes00@gmail.com.
8. Children’s privacy
RestEyes is not directed to children under 13, and we do not knowingly collect personal data from a child under 13. If you believe a child has provided personal data to us, contact us so we can review and delete it where appropriate. A parent or guardian should supervise a minor’s use where required by local law.
9. Changes and contact
We may update this policy when RestEyes, its providers, or legal requirements change. We will publish the revised policy here and change the effective date. Material changes may also be communicated in the app when appropriate.
Questions or privacy requests: resteyes00@gmail.com.