Privacy Policy

The short version

• Rinkler filters traffic locally on your device using a private VPN configuration. Your traffic is not routed through our servers.
• We do not read the contents of your messages, posts, photos, or the pages you visit.
• If you sign in, we store account details and connection metadata (destination hostnames, byte counts, timestamps, and block status) to build your private traffic summaries.
• We use Supabase (database + auth) and Apple / Google sign-in. We do not sell your data or use it for ads.
• If you turn on Automatic Mode, Rinkler reads a few Apple Health metrics on your device only — they're never sent to us or anyone else.

How the on-device filter works

Rinkler installs a local VPN configuration (an Apple Network Extension). iOS requires your explicit permission to add it. Although it uses the VPN permission, Rinkler is not a traditional VPN — it does not send your traffic to a remote server or hide your IP address.

The filter only inspects connection metadata (such as the destination hostname and the size of a stream) to decide whether to interrupt short-video traffic. It does not decrypt, read, or store the contents of your connections.

What we collect

Account information — your email address and a user ID when you sign in (email code, Apple, or Google). If you use Apple's Hide My Email, we only ever see the relay address.

Usage metadata — when protection is on, tied to your account:

• Destination hostnames and a coarse category (e.g. "short-video")
• Block/allow status and byte counts
• Timestamps of blocked/allowed connections
• Aggregate summaries (counts and estimated time saved)

Focus settings — your rules, schedules, strictness, streaks, and session history are stored locally on your device. The current build does not sync these settings across devices.

Health data (only if you turn on Automatic Mode) — with your permission, Rinkler reads Apple Health metrics like heart-rate variability, resting heart rate, and activity (steps, exercise, Move) to spot stressed or low-movement moments and tighten your limits on their own. This is processed entirely on your device; raw health data is never uploaded, never sent to our servers, and never leaves your phone. Only a derived baseline is kept locally. You can turn it off any time in Settings or revoke access in the Health app.

We do NOT collect the contents of your traffic, messages, posts, photos, browsing, full URLs, request bodies, packet contents, your location, contacts, microphone, or camera.

Who we share it with

Supabase — hosts our database and handles authentication. Apple — Sign in with Apple and the App Store. Google — only if you choose "Continue with Google". We do not share data with advertisers or data brokers, and we do not sell it.

Optional AI insights (off by default): Rinkler can generate written insights from your aggregate dashboard stats using a third-party AI provider. This is disabled by default and only runs if you explicitly opt in; only aggregate numbers, never raw events or content, are sent.

Retention & deletion

Usage metadata is retained to show your history and is bounded over time. You can permanently delete your account and its server-side data in the app — Settings → Account → Request account deletion (we email you a code to confirm) — or by emailing us. Deleting the app removes its local rules and history; iOS controls removal of the installed VPN configuration.

Security

Auth tokens are stored in the iOS Keychain. Connections to our backend use HTTPS/TLS. Database access is restricted per-user with row-level security, so you can only read your own data.

Children

Rinkler is not directed to children under 13 (or the minimum age in your country). If you believe a child under that age has provided us personal information, contact us and we will delete it.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Email us to exercise any of these. We don't discriminate against you for doing so.

Changes

If we make material changes, we'll update the effective date and, where appropriate, notify you in the app. Continued use after changes means you accept the updated policy.