Fuzzzy Pledge — Privacy Policy

What stays on your phone

• Your reasons. The app never stores them in full: it keeps a random salt, a one-way fingerprint (SHA-256 hash) of each reason and a short hint (the first word of each reason, at most 16 letters), in the phone's secure storage.
• Which kinds of websites you block (adult, gambling) and the apps you chose. On iPhone the app list is an opaque Screen Time token that even the app cannot read as names.
• The pledge's state: when it started and any waiting time after a wrong unlock attempt.
• Your settings: skin and language.

We never receive these. The app keeps no browsing history and no record of which apps you open. Website blocking works on the phone itself: on Android through a local DNS filter on the phone, on iPhone through Apple's Screen Time. Your browsing does not pass through our server. Deleting the app deletes this data (unlock first: the protection is designed to be hard to remove).

What leaves your phone, and why

• A random ID. On first launch the app opens a session with our server (pledge-api.fuzzzycore.com) under a random ID. It carries no name, email or phone number. We also note whether the phone is an iPhone or Android. It lets the server know which phone has a plan.
• Your plan status. When you subscribe or restore on iPhone, the app sends Apple's signed proof of purchase to our server. We keep whether the plan is active, which plan it is, its trial and period dates, and Apple's transaction reference, all tied to the random ID. If a purchase moves to a new phone through Restore, we keep a note of that move.
• Web payments (Android). When you buy a pass on our website, we keep the pass (which pass, when it starts and ends), the amount, PayPal's order reference and its status, tied to the random ID. The checkout link expires after 10 minutes and we store only a fingerprint of it.
• A recovery code (only if you ask for one). We keep only a keyed fingerprint of your current code, never the code itself, so we cannot show it again; showing a new one voids the old. When a code is entered we count tries per random ID and per network address (kept only as a keyed fingerprint, for an hour) to stop guessing, and we note which passes moved to which random ID.
• A plan check. The app asks our server for a short-lived signed note that the plan is active, so it can check your plan offline for up to 7 days. The note says only the random ID, the plan's end date and its source.
• Limits against abuse. We count how many new phones sign in from one network address each day. The address is kept only as a keyed fingerprint, never as the address itself. Our web server's logs record the network address, the time and the page asked for (no form contents), for security, for a short time.

Payments

On iPhone, Apple handles every payment: we never see your card, your Apple ID or your name. On Android, payment happens on our website through PayPal: PayPal handles your PayPal account and card details under its own privacy policy, and we receive only the order's amount, reference and status. Card payment is shown as temporarily unavailable.

What we do not do

• No ads, no tracking across apps or websites, no selling or sharing data for advertising.
• No analytics or crash tools that send your data to third parties.
• No account, email or sign-up.
• We never receive your reasons, your browsing or your app use.

Who processes data for us

• Apple — payments and subscriptions on iPhone, and Screen Time protection.
• PayPal — web payments on Android.
• Cloudflare — carries traffic to our server.
• Our hosting provider — runs our server in a data centre.

How long we keep it

• Random ID and session records: while the app is in use.
• Plan, pass and payment records: while the app is in use, and for as long as tax and accounting law requires for purchase records.
• Daily new-phone counts and server logs: a short time, for security.

Your choices

• You can use the app without a plan to unlock an existing pledge; unlocking never needs a plan or a connection.
• To ask us to delete what our server holds about your phone, email contact@fuzzzycore.com. Because the ID is random we may not be able to tell which records are yours; we will help as far as we can. Cancel an Apple subscription in your App Store account settings.

Children

Fuzzzy Pledge is not made for children under 13 and we do not knowingly collect anything from them.

Not treatment

Fuzzzy Pledge is a self-commitment tool. It is not a medical or psychological treatment. If gambling or pornography is hurting you or people close to you, please also talk to a professional or a support service.

Changes and contact

We will update this page when the app changes what it does with data, and change the date above. Questions: contact@fuzzzycore.com. Fuzzy Core LLC, Georgia.