What leaves your phone, and what doesn't.

When you choose apps to shut, iOS shows you Apple's own picker. Sale Armor is not shown what you selected. iOS returns a sealed token, and the token is meaningless to anything but iOS itself.

This is not a promise about how carefully the app handles your choices. It is a limit of the system: Sale Armor is not technically able to know which apps you picked, or how long you spent in them, or whether you tried to open one.

Everything below stays on your device, in the app's own container:

• Your armed window — its name, its schedule, and the sealed app tokens.
• Your wishlist — what you added, any link you pasted, the price you typed, and whether you later marked it bought or skipped.
• Whether your subscription is currently valid.

None of it is uploaded, backed up to us, or readable by us. Deleting the app deletes all of it.

Payment is handled by Apple, and subscription status by RevenueCat, which is the service that tells the app whether your purchase is valid. For that to work, RevenueCat receives:

• A random anonymous identifier, generated on your device. It is not your name, email, Apple Account, or advertising identifier.
• Your purchase receipt from Apple — which product, when, and whether it is still active.
• Basic technical details of the request, such as app version, device model and country.

Apple never gives the app your payment card, and neither we nor RevenueCat ever see it. RevenueCat's own policy is at revenuecat.com/privacy.

• No analytics. No Firebase, no Amplitude, no crash SDK, no session recording.
• No advertising, and no advertising identifier.
• No account — nothing to sign up for, so nothing to leak.
• Nothing sold or shared with data brokers, ever. There is no business model here other than the subscription.

Sale Armor is for adults shielding their own phone. It uses Screen Time in individual mode, not parent-and-child mode, and is not directed at children under 13.

Because there is no account, there is no profile to request or correct. To erase everything, delete the app. To have your RevenueCat record deleted, email the address below with the date and product of your purchase and it will be removed within 30 days.

If this policy changes in a way that affects what leaves your device, the change will be described here with a new date rather than quietly edited in.

natalieleong.appdev@gmail.com