Privacy Policy

Effective Date: April 2, 2026

Scroll Less ("we", "us", or "the App"), developed by Paper Weight Apps, is committed to helping users ("you") improve their digital wellbeing. We value your privacy and believe that your data belongs to you. This Privacy Policy explains how we collect, use, and protect your information when you use the Scroll Less mobile application.

Overview

Unlike many digital products, Scroll Less is designed to be "Local-First". The vast majority of your personal usage data is processed and stored entirely on your device. We do not upload your usage history to our servers. The only data that leaves your device is described clearly in this policy.

Personal Information We Collect

1. Local Data (Processed On-Device)

To provide you with insights into your digital habits, the App collects and stores the following data locally on your device:

• App Usage Data: Time spent in apps, app open counts, and timestamps. Collected using Android's Usage Stats API.
• Scroll Data: Estimated distance scrolled, calculated using pixel density and scroll events detected through the Android Accessibility Service.
• Notification Data: Number of notifications received, timestamps, the app that sent them, impact level, and type. Notification title and body text are also stored for the Post Box batching feature. Notification content is never transmitted off your device.
• Unlock Data: Frequency and timing of device unlocks, session duration, first app opened, and whether the unlock was triggered by a notification.
• Limits, Nudges, and Preferences: Your configured time limits, limit groups, nudge settings, snooze history, streaks, badges, theme, calibration, and other in-app settings.
• Insights and Journeys: Computed behavioral patterns (morning routines, late night activity, focus quality, app switching) and a session-by-session timeline of your daily phone usage.
• AI-Generated Insights: Daily goals, weekly reviews, and pattern analysis from the optional AI feature. Stored locally after generation.
• Pledge Data: If you sign the optional in-app pledge, you may enter a name or alias. This is stored on your device only, never transmitted, and we do nothing with it.

Note: This data is stored in a secure database on your device, protected by Android's application sandboxing. It is not transmitted to us or any third party, except where you explicitly choose to export it (e.g., creating a backup file). You can also import your data on a new device using the Import feature in Settings.

2. Transmitted Data (Sent to Servers)

We transmit minimal data to ensure the App functions correctly and to improve its performance:

• App Package Names: We send the package names of your installed apps (e.g., com.instagram.android) to our category gateway on Google Cloud solely to retrieve app categories (e.g., "Social", "Entertainment"). No usage data, notification content, or personal information is included. Package names are processed in real time and not stored on our servers.
• Diagnostics & Analytics: We use PostHog and Google Firebase Analytics and Firebase Crashlytics to collect anonymous usage statistics, crash reports, and performance metrics. This includes feature interaction events (e.g., "limit created", "nudge shown"), screen navigation, app lifecycle events, device model, OS version, app version, and IP address. PostHog creates an anonymous profile per installation using a randomly generated ID. PostHog processes data in the United States. Some analytics events include the package name of the app involved. Your screen time history, notification content, scroll measurements, and journey data are never sent to analytics.
• AI Pattern Analysis (Optional): If you enable AI insights by adding your own Google Gemini API key or subscribing to Scroll Less Pro, an aggregated summary of your recent usage data is sent to Google's Gemini API. This includes daily screen time totals, unlock patterns, scroll distance, your top app names with usage averages, notification patterns, and behavioral signals. Notification content, message text, passwords, and content from within your apps are never sent. Your API key is encrypted on your device using AES-256 backed by the Android Keystore. With free-tier Gemini keys, Google may use the data to improve their products. With paid-tier keys, Google retains data for up to 55 days for abuse detection only. https://ai.google.dev/terms
• Technical Data: IP address, device model, OS version, and app version may be collected automatically by our service providers (Google, PostHog) as part of standard network requests.

3. Payment Information

If you purchase Scroll Less Pro, your transaction is processed by Google Play. We do not collect or store your credit card information or financial details. We only receive a confirmation that a purchase was completed to unlock premium features.

Permissions

The App requests sensitive Android permissions to function. Here is why we need them:

• Accessibility Service: To detect which app is in the foreground, measure scroll distance by observing scroll gestures, and enforce app limits. We do not use this permission to read your messages, passwords, or any text content on your screen.
• Usage Access: To track how much time you spend in each app.
• Notification Access: To count incoming notifications, identify which apps send them, and power the Post Box batching feature.
• Display Over Other Apps: To show "Nudge" reminders and blocking screens when you exceed your limits.
• Battery Optimization: To keep the background service running reliably.
• Exact Alarms: To schedule limit resets, Post Box deliveries, and nudge timers.
• Boot Completed: To restart services after your device reboots.
• Notifications: To send nudge reminders, limit alerts, and AI insight notifications.

How We Use Your Information

• To Provide Features: Calculating your daily screen time, scroll distance, unlock frequency, notification volume, and behavioral insights.
• To Enforce Limits: Running the boundaries and nudges you configure.
• To Generate AI Insights: When you opt in, providing personalized daily goals and weekly reviews.
• To Improve the App: Analyzing crash reports and anonymous feature usage to fix bugs and prioritize improvements.
• To Categorize Apps: Grouping your apps into categories (Social, Games, etc.) using our remote service.

Data Sharing and Disclosure

We do not sell your personal information to data brokers or advertising platforms. We do not serve advertisements. We may share data with third-party service providers who help us operate the App:

• PostHog: Product analytics (United States). https://posthog.com/privacy
• Google (Firebase & Crashlytics): Analytics, crash reporting, and performance monitoring. https://firebase.google.com/support/privacy
• Google Gemini API: AI pattern analysis (optional, user-initiated). https://ai.google.dev/terms
• Google Play: Payment processing. https://policies.google.com/privacy
• Scroll Less Category Service: App categorization (package names only).

We may also disclose information if required by law, such as to comply with a subpoena or similar legal process.

Data Retention and Deletion

• Local Data: Your usage history is retained on your device as long as the App is installed. You can delete this data at any time by clearing the App's data in your device settings or by uninstalling the App. We have no access to it.
• Backups: If you use the "Export Data" feature, a file containing your data is created. This file is managed by you and stored where you choose (e.g., local storage, Google Drive). We do not have access to these backups. You can restore your data on a new device using the "Import Data" feature.
• Analytics: All analytics data collected by PostHog and Firebase is anonymous and contains no personally identifiable information. This data is retained per their respective policies and is used solely to improve the App.

Security

We take reasonable measures to protect your information. Your local data is stored in a structured database on your device, protected by Android's application sandboxing. The App disables Android backup to prevent data extraction. All data transmission is encrypted using TLS/SSL. Your Gemini API key is encrypted at rest using AES-256 backed by the Android Keystore. However, no method of transmission over the internet or electronic storage is 100% secure.

Children's Privacy

The App is not intended for use by children under the age of 13 (or 16 where applicable, or 18 in India under the DPDPA). We do not knowingly collect personal information from children below the applicable age. If we become aware that we have collected such information, we will take steps to delete it.

International Data Transfers

Analytics data is processed by PostHog in the United States. Firebase and Gemini API data is processed by Google globally. By using the App, you acknowledge that this limited data may be transferred to countries outside your country of residence.

Changes to This Policy

We may update this Privacy Policy from time to time. All changes are enforceable from the "Effective Date" shown at the top. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Continued use of the App after changes constitutes acceptance.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact Paper Weight Apps at: tharun@scrollless.in