Privacy Policy

Your privacy is important to us. This Privacy Policy explains how Pactful ("we," "us," or "our") collects, uses, discloses, and protects your information when you use our mobile application and services.

By using Pactful, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

1. Information We Collect

1.1 Information You Provide

• Phone Number: Used for account authentication via SMS verification
• Name: Your display name shown to friends
• Profile Photo: Optional avatar image
• Contacts: When you grant permission, we access your device contacts to help you find friends already using Pactful

1.2 Screen Time Data

With your explicit permission through iOS Family Controls, we collect:

• App Selections: Which apps you choose to restrict in your pacts
• Time Limits: Daily time limits you set for restricted apps
• App Tokens: Encoded identifiers provided by Apple's Screen Time API (these are opaque and cannot be decoded to identify specific apps)

Important: We do NOT track your real-time app usage. iOS Screen Time API only provides usage statistics at midnight. Our app enforces limits but cannot monitor actual usage during the day.

1.3 Social & Pact Data

• Pacts you create: Type, duration, restricted apps, time limits
• Endorsements: Your responses to friend pact requests
• Friendships: Your connections with other Pactful users
• Pact outcomes: Success, failure, or cancellation status

1.4 Device & Technical Data

• Device tokens for push notifications (APNs)
• iOS version and device model
• App version and usage metadata
• IP address and general location (for fraud prevention)

2. How We Use Your Information

We use collected information to:

• Create and manage your account
• Authenticate your identity via phone verification
• Enable pact creation and enforcement of app restrictions
• Connect you with friends and enable free endorsements
• Send push notifications about pact updates
• Improve our services and develop new features
• Prevent fraud and ensure platform security
• Comply with legal obligations

3. How We Share Your Information

3.1 With Your Friends

When you create pacts or endorse friends:

• Your name and profile photo are visible to pact participants
• Pact details are shared with endorsers
• Endorsement status (accepted/declined) is visible to pact creators

3.2 With Service Providers

Supabase (Backend Infrastructure)

We use Supabase to host our database, authentication, storage, and serverless functions. Supabase has access to all data stored in our systems. Supabase Privacy Policy: https://supabase.com/privacy

Apple (Push Notifications & Screen Time)

Device tokens are shared with Apple Push Notification Service (APNs). Screen Time data is processed through Apple's Family Controls framework. Apple Privacy Policy: https://www.apple.com/legal/privacy

3.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

3.4 Business Transfers

If Pactful is acquired or merged with another company, your information may be transferred to the new owners.

4. Your Privacy Rights

4.1 Access & Correction

You can view and edit your profile information within the app at any time.

4.2 Account Deletion

You can request account deletion by emailing support@pactful.com. We will delete your personal information within 30 days, except:

• Anonymized usage data for service improvement
• Data we are legally required to retain

Note: Account deletion functionality is currently being developed for self-service within the app.

4.3 Data Portability

You can request a copy of your data by emailing support@pactful.com. We will provide your information in a portable format. (Self-service data export is coming soon.)

4.4 Contact Permission

You granted contact access during onboarding. To revoke: iOS Settings → Pactful → Contacts → Disable.

4.5 Push Notifications

To disable push notifications: iOS Settings → Pactful → Notifications → Disable.

5. Data Security

We implement industry-standard security measures:

• Encrypted data transmission (TLS/SSL)
• Secure authentication (Supabase Auth)
• Row-level security on database access
• Regular security audits

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

6. Data Retention

We retain your information for:

• Active accounts: Duration of account existence
• Deleted accounts: 30 days (except legal requirements)
• Usage logs: 90 days rolling window
• Backup retention: 30 days

7. Children's Privacy

Pactful is not intended for users under 13 years of age. We do not knowingly collect information from children. If you believe a child has provided us information, please email support@pactful.com and we will promptly delete it.

8. International Users

Pactful is based in the United States. If you access our services from outside the U.S., your information will be transferred to, stored, and processed in the United States. By using Pactful, you consent to this transfer.

9. California Privacy Rights

California residents have additional rights under CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information (We do not sell your data)
• Right to delete personal information
• Right to non-discrimination for exercising privacy rights

To exercise these rights, email support@pactful.com

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Updating the "Last updated" date at the top
• Sending a push notification for significant changes
• Displaying a notice in the app

Your continued use of Pactful after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices:

General inquiries & support: support@pactful.com

Legal questions: legal@pactful.com