Privacy Policy

This Privacy Policy explains how Fella collects, uses, stores, and shares information when you use the Fella iOS app, visit usefella.com, create an account, purchase a subscription, contact support, or participate in the affiliate program.

Last updated: September 7, 2026

1. Who This Policy Covers

This policy applies to the Fella iOS app, usefella.com, Fella account and onboarding services, customer support, and the Fella affiliate program. It does not govern third-party websites, services, or apps that have their own privacy policies, including Apple services you access independently.

For purposes of applicable data-protection law, Fella is the controller of personal information described in this policy unless another service is clearly acting as an independent controller. Questions and privacy requests may be sent to [email protected].

2. Information We Collect

Account and authentication information

If you create or use a Fella account, we process identifiers such as your Supabase user ID, email address, authentication provider, account status, and authentication records. Depending on the sign-in method you choose, Apple or Google may provide limited profile information authorized by you, such as your name or email address. Password-based credentials are handled through our authentication provider; we do not store readable account passwords in the app.

The app stores authentication session credentials in the iOS Keychain so you can remain signed in securely. Authentication systems may also process security information such as login timestamps, IP addresses, and device or browser details to operate accounts and detect abuse.

Onboarding answers and personalized-plan information

Fella may process answers you provide during onboarding, including selected distraction categories or apps, estimated daily screen time, the time of day you find most difficult, your stated intention, commitment level, whether you have tried other approaches, target screen time, obstacles, referral source, and referral code. Fella uses these answers to generate and display a personalized blocking plan.

Answers completed in the native app and the resulting schedule or plan are generally stored on your device. If you complete supported onboarding on the website while signed in, the answers and plan figures may be stored in Supabase so the app can retrieve your plan when you sign in. That server-side profile is tied to your account and is removed when the underlying account is deleted through the supported account-deletion process.

Screen Time, blocking, and emergency-access information

Fella uses Apple's Family Controls, Managed Settings, and Device Activity frameworks to let you authorize Screen Time access, select apps or categories, schedule blocking, and use emergency access. Apple may represent selected apps and categories with privacy-preserving tokens. The exact selections used by the native blocking system, schedules, block state, and emergency-access state are stored on your device or in the app's shared local container so the app and its extensions can enforce your choices.

Fella does not use your Screen Time selections for advertising. Product analytics may record limited operational information such as whether blocking is enabled, whether a schedule exists, session type, broad count ranges for selected targets or blocked attempts, Screen Time permission status, and whether an emergency pass was used. The privacy-preserving tokens returned by the native Screen Time picker are not sent as analytics properties. Separately, the distraction-app or category names you choose during onboarding may be included in account-linked product analytics.

App usage and product analytics

The production app uses PostHog to measure product use and improve reliability. Information may include app launches, screens or onboarding steps viewed, button and feature interactions, blocking setup and session events, permission-flow events, emergency-pass events, paywall and purchase-flow events, referral-code use, errors, and time spent completing certain flows.

Analytics events may include an app-generated or account-linked user identifier, session identifier, app version, build number, iOS version, device class, days since install, subscription and trial state, onboarding state and answers (including selected distraction-app or category names, estimated screen time, goals, obstacles, commitment, and referral source), blocking and schedule state, Screen Time authorization state, referral or campaign parameters, and whether the installation came from Apple Search Ads. PostHog is configured for European Union hosting.

The app may use privacy-masked session replay and automatic error capture to diagnose usability and reliability problems. Text inputs, images, and sandboxed views use the SDK's masking protections. Screen-view autocapture is disabled. We do not intend session replay to capture passwords, authentication tokens, payment details, or your exact Screen Time selections.

Crash and diagnostic information

Fella uses Sentry for crash and diagnostic reporting. Diagnostic data may include app release and build, environment, crash or error type, technical stack information, session health, and limited operational tags such as subscription state, onboarding completion, whether blocking or a schedule is active, and Screen Time permission status. Fella's Sentry integration is configured not to attach your email address, Supabase user ID, authentication tokens, receipts, or callback values.

Subscription and purchase information

Subscriptions are purchased through Apple's App Store and managed with RevenueCat. Apple and RevenueCat may provide us with an account or app-user identifier, product and plan identifier, entitlement status, trial status, purchase and expiration dates, renewal or cancellation state, transaction identifiers, and related subscription events. We use this information to unlock Fella+, restore purchases, provide account access across devices, support customers, prevent duplicate processing, and understand subscription performance.

Apple processes the payment itself. Fella does not receive your full payment-card number, bank-account number, Apple ID password, or complete App Store payment credentials. Managing or cancelling an App Store subscription does not by itself delete your Fella account.

Attribution and campaign information

If you open Fella through a campaign or referral link, the app may store referral and UTM parameters such as source, medium, campaign, content, and term. For eligible installs, the app may request an Apple Search Ads attribution token and send it to Apple's AdServices endpoint to determine whether the install is associated with an Apple Search Ads campaign. We use this information to measure acquisition and referral performance, not to build a third-party advertising profile.

Website usage information

When you visit usefella.com, PostHog may process pages viewed, searches performed, search results clicked, navigation and footer interactions, FAQ opens, form submissions, download and other calls-to-action clicked, engagement duration, referring URL, campaign parameters, language, page type, and technical or runtime errors. Technical context may include browser, operating system, device type, screen size, approximate location derived from IP address, and visit or device identifiers stored in cookies or local storage.

Website analytics runs on usefella.com and is configured with automatic pageview capture and general autocapture disabled; the site sends defined events for the interactions described above. We use this information to understand site performance, improve pages and search, diagnose errors, and measure visits to Fella's App Store listing. We do not use it for third-party targeted advertising.

You can opt out of website analytics on this browser at any time. The choice is stored in your browser and takes effect immediately. Clearing browser data may remove the preference, after which you can opt out again.

Support and communications

If you contact us, we may collect your name, email address, message, attachments, and any technical or account details you choose to provide. We use that information to respond, investigate issues, keep support records, and protect the service. Please do not send passwords, full payment-card details, or other information that is not needed for your request.

Affiliate-program information

If you join or use the Fella affiliate program, we may process your name, email address, Supabase account identifier, campaign code and link, acceptance of affiliate terms, program status, verified installs, payout amount and history, payout method and payout details, administrative notes, dashboard access token for legacy accounts, signup IP address, and timestamps. We use this information to operate the program, attribute installs, calculate and send payouts, prevent fraud, provide the affiliate dashboard, and maintain financial and compliance records.

Server, security, and network information

When the app or website communicates with our systems and service providers, servers may process IP address, request time, URL or endpoint, response status, device or browser details, and security logs. We use these records to deliver the service, maintain availability, investigate incidents, enforce access controls, and prevent abuse. Cloudflare may process network and security information when hosting and protecting the website.

3. Information Stored on Your Device

Fella stores information locally through mechanisms such as UserDefaults, the iOS Keychain, and an App Group shared by the main app and blocking extensions. Local information may include settings, routines, schedules, Screen Time tokens, blocking and emergency-access state, personalized-plan data, analytics deduplication state, install date, attribution parameters, onboarding progress, and authentication session credentials.

Deleting the app generally removes app-local information, subject to how iOS manages Keychain and shared-container data. Deleting the app does not automatically cancel an App Store subscription or necessarily delete server-side account, analytics, support, subscription, or affiliate records.

4. How We Use Information

• Provide app blocking, schedules, Screen Time authorization, emergency access, onboarding, and personalized plans.
• Create, authenticate, secure, synchronize, support, and delete accounts.
• Process subscription status, trials, entitlements, restorations, and customer support.
• Remember settings and maintain continuity across app sessions and supported devices.
• Measure app and website use, understand feature performance, and improve Fella.
• Detect, investigate, and resolve crashes, errors, fraud, misuse, and security incidents.
• Attribute campaigns, referrals, and affiliate installs and administer affiliate payouts.
• Respond to questions, rights requests, disputes, and legal process.
• Comply with law, accounting requirements, App Store obligations, and our agreements.

5. Legal Bases for Processing

Where the GDPR, UK GDPR, or similar law applies, we rely on one or more of the following legal bases, depending on the context:

• Contract. Processing needed to create and operate your account, provide requested app features, verify subscription access, and administer an affiliate relationship.
• Legitimate interests. Processing needed to secure, maintain, analyze, and improve Fella; prevent abuse; understand product performance; provide support; and protect our users and business, balanced against your rights.
• Consent. Processing based on a permission or choice you provide where consent is required. You may withdraw consent for future processing, although prior lawful processing remains valid.
• Legal obligation. Processing needed for tax, accounting, consumer-protection, law-enforcement, or other legal requirements.

You are generally not required by law to provide personal information. Certain information is required to create an account, restore account-linked access, purchase through Apple, or participate in the affiliate program. If you do not provide it, the corresponding feature may be unavailable.

6. When We Share Information

We disclose information only as needed for the purposes described in this policy. Categories of recipients include:

• Apple for App Store purchases, subscriptions, Screen Time frameworks, Sign in with Apple, and Apple Search Ads attribution.
• Supabase for authentication, account records, supported web-onboarding profiles, affiliate records, and related database services.
• RevenueCat for subscription entitlement management and subscription-event processing.
• PostHog for app and website analytics, privacy-masked replay, and error analytics, using its European Union infrastructure for our configured project.
• Sentry for crash reporting and identity-free diagnostic monitoring.
• Cloudflare for website hosting, delivery, network security, and serverless functions.
• Google if you choose Google authentication.
• Support, email, professional, and payment-service providers where needed to answer requests, operate payouts, obtain legal or accounting advice, or run the service.

We may also disclose information when reasonably necessary to comply with law or valid legal process; protect the rights, safety, and security of Fella, users, or others; investigate fraud or abuse; or complete a merger, financing, acquisition, reorganization, or sale of assets. If ownership changes, this policy or a materially equivalent notice will continue to govern personal information unless you are notified otherwise.

7. What We Do Not Do

• We do not sell personal information.
• We do not share personal information for cross-context behavioral advertising.
• We do not use the native Screen Time picker's exact blocked-app list to target advertising.
• We do not receive your full App Store payment-card number or Apple ID password.
• We do not attach your email, Supabase user ID, authentication tokens, or receipts to Sentry.
• We do not make decisions that produce legal or similarly significant effects based solely on automated processing.

8. Retention

We retain information for as long as reasonably necessary to provide Fella, fulfill the purposes described above, comply with law, resolve disputes, enforce agreements, and maintain security and financial records. Retention depends on the type of information and why it is processed.

• Account and web-onboarding profile information is generally retained while the account exists and is deleted or de-identified after a valid deletion request, subject to backups, fraud prevention, and legal obligations.
• Local app data remains on your device until removed through the app, iOS, account-deletion flow, or app deletion, depending on the data type.
• Subscription and transaction records may be retained for the subscription lifecycle and longer where needed for support, fraud prevention, accounting, tax, or legal claims.
• Analytics and diagnostic information is retained according to our configured provider settings and may be aggregated or de-identified for longer-term product analysis.
• Support records are retained for a reasonable period after resolution so we can follow up, identify recurring problems, and establish a record of the request.
• Affiliate and payout records may be retained after program participation ends where required for accounting, tax, fraud prevention, contracts, or legal compliance.

Deletion from active systems may not immediately remove information from encrypted backups. Backup copies are isolated from ordinary use and removed according to backup-rotation schedules unless retention is legally required.

9. Your Choices and Controls

• Screen Time permissions: change or revoke Fella's Screen Time authorization through iOS settings, subject to Apple's available controls.
• Blocking data: edit selected apps, routines, schedules, and related settings in Fella.
• Subscriptions: manage or cancel through your Apple ID subscription settings. Deleting your Fella account or the app does not cancel an Apple subscription.
• Website analytics: use the opt-out control in the Website Usage Information section above.
• Account deletion: use the Delete Account control in Fella's settings. This requests deletion of the Fella account and account-linked Supabase data; records may be retained where law or legitimate security needs require.
• Support and privacy requests: email [email protected]. We may need to verify your identity before completing a request.

10. Privacy Rights

Depending on where you live, you may have rights to request access to personal information, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also have the right to know the categories and sources of information collected, the purposes for collection and disclosure, and the categories of recipients.

Residents of the European Economic Area and United Kingdom may object to processing based on legitimate interests and may lodge a complaint with the data-protection authority where they live, work, or believe an infringement occurred. Withdrawing consent does not affect processing already carried out lawfully.

Residents of California and other U.S. states with applicable privacy laws may have rights to know, correct, delete, or obtain a copy of covered personal information and to opt out of certain sale, sharing, targeted advertising, or profiling. Fella does not sell personal information or share it for cross-context behavioral advertising. We will not discriminate against you for exercising applicable privacy rights.

Rights are not absolute. We may deny or limit a request where permitted by law, including when we cannot verify the requester, must retain information to comply with law, or need it to protect security, prevent fraud, complete a transaction, or establish legal claims. You may appeal a denied request where local law provides that right by replying to our decision.

11. International Data Transfers

Fella and its providers may process information in countries other than the one where you live. Those countries may have different data-protection laws. Where required, providers and transfers rely on recognized safeguards such as adequacy decisions, standard contractual clauses, or another lawful transfer mechanism. PostHog is configured to use European Union infrastructure, but other providers or support operations may process information elsewhere.

12. Security

We use reasonable technical and organizational safeguards designed to protect information. These include iOS Keychain storage for app authentication sessions, platform access controls, encrypted network transport, Supabase row-level security for supported user profiles, restricted service credentials, and data-minimizing analytics and diagnostic configurations.

No service can guarantee perfect security. You are responsible for protecting your device, email account, Apple or Google account, and Fella login credentials. Contact us promptly if you believe your Fella account or information has been compromised.

13. Children

Fella is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If local law requires a higher age for a child to consent to data processing, a parent or guardian should provide any legally required authorization. If you believe a child provided personal information without appropriate authorization, contact us so we can investigate and take appropriate action.

14. Third-Party Services and Links

Fella may link to the App Store, Apple settings, authentication providers, support resources, or other third-party services. Their handling of information is governed by their own terms and privacy policies. Fella is not responsible for third-party practices outside the services we direct them to perform for us.

15. Changes to This Policy

We may update this policy when Fella's features, providers, data practices, or legal obligations change. We will update the date at the top. If a change is material, we may provide additional notice in the app, on the website, or through account contact information where appropriate.

16. Contact Us

Questions, privacy requests, and complaints may be sent to [email protected]. Please describe the request and the Fella account or email involved. Do not send your password, authentication token, or full payment-card information.