Privacy Policy

The short version

• Rinkler filters traffic locally on your device using a private VPN configuration. Your traffic is not routed through our servers.
• We do not read the contents of your messages, posts, photos, or the pages you visit.
• To show your dashboard and sync settings, we store a small amount of metadata about blocked connections (destination hostnames, byte counts, timestamps, block status), tied to your account.
• We use Supabase (database + auth) and Apple / Google sign-in. We do not sell your data or use it for ads.
• If you turn on Automatic Mode, Rinkler reads a few Apple Health metrics on your device only — they're never sent to us or anyone else.

How the on-device filter works

Rinkler installs a local VPN configuration (an Apple Network Extension). iOS requires your explicit permission to add it. Although it uses the VPN permission, Rinkler is not a traditional VPN — it does not send your traffic to a remote server or hide your IP address.

The filter only inspects connection metadata (such as the destination hostname and the size of a stream) to decide whether to interrupt short-video traffic. It does not decrypt, read, or store the contents of your connections.

What we collect

Account information — your email address and a user ID when you sign in (email code, Apple, or Google). If you use Apple's Hide My Email, we only ever see the relay address.

Usage metadata — when protection is on, tied to your account:

• Destination hostnames and a coarse category (e.g. "short-video")
• Block/allow status and byte counts
• Timestamps of blocked/allowed connections
• Aggregate summaries (counts and time saved)

Focus settings — your rules, schedules, strictness, streaks, and session history (stored on your device and, if signed in, synced to your account).

Health data (only if you turn on Automatic Mode) — with your permission, Rinkler reads Apple Health metrics like heart-rate variability, resting heart rate, and activity (steps, exercise, Move) to spot stressed or low-movement moments and tighten your limits on their own. This is processed entirely on your device; raw health data is never uploaded, never sent to our servers, and never leaves your phone. Only a derived baseline is kept locally. You can turn it off any time in Settings or revoke access in the Health app.

We do NOT collect the contents of your traffic, messages, posts, photos, browsing, full URLs, request bodies, packet contents, your location, contacts, microphone, or camera.

Who we share it with

Supabase — hosts our database and handles authentication. Apple — Sign in with Apple and the App Store. Google — only if you choose "Continue with Google". We do not share data with advertisers or data brokers, and we do not sell it.

Optional AI insights (off by default): Rinkler can generate written insights from your aggregate dashboard stats using a third-party AI provider. This is disabled by default and only runs if you explicitly opt in; only aggregate numbers, never raw events or content, are sent.

Retention & deletion

Usage metadata is retained to show your history and is bounded over time. You can permanently delete your account and all its data right in the app — Settings → Account → Request account deletion (we email you a code to confirm) — or by emailing us. Deleting the app removes on-device data (rules, history, the VPN configuration).

Security

Auth tokens are stored in the iOS Keychain. Connections to our backend use HTTPS/TLS. Database access is restricted per-user with row-level security, so you can only read your own data.

Children

Rinkler is not directed to children under 13 (or the minimum age in your country). If you believe a child under that age has provided us personal information, contact us and we will delete it.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Email us to exercise any of these. We don't discriminate against you for doing so.

Changes

If we make material changes, we'll update the effective date and, where appropriate, notify you in the app. Continued use after changes means you accept the updated policy.