PRIVACY POLICY

INFORMATION WE COLLECT

Account Information

When you create an account, we collect your email address through Apple Sign In or Google Sign In. We use this to identify your account and deliver tax receipts for your donations.

Screen Time Data

ScrollToll monitors your device screen time through Apple's Screen Time API (DeviceActivity framework). Your detailed, per-app screen time data stays on your device and is processed locally — we never collect or store which apps you use or the raw usage timeline. To power streaks, impact metrics, and the optional leaderboard, we do store a small set of aggregate figures on our servers: your total and weekly monitored minutes and a screen-time reduction percentage. If you opt out of the leaderboard, these aggregates are not published publicly.

Payment Information

When you add a payment method, your card details are collected and processed by Stripe, our payment processor. We do not store your full card number. We retain only the last four digits and card brand for display purposes in the app. All payment processing is handled by Stripe in compliance with PCI DSS standards.

Payment information is collected on our secure hosted payment page powered by Stripe. ScrollToll does not store, process, or have access to your full card number. Payment data is handled entirely by Stripe in compliance with PCI DSS standards. We store only a reference to your payment method (last four digits and card brand) for display purposes.

Donation Records

We record the date, amount, and recipient charity of each donation you make. This information is used to display your donation history, calculate impact metrics, and generate tax-related summaries.

Usage & Diagnostic Data

To understand how the app is used, find where people get stuck, and fix bugs, we collect product-analytics and diagnostic data through PostHog. This includes in-app events (such as screens viewed, features used, and donations completed), a pseudonymous account identifier after sign-in, and device and session identifiers. Session replay is disabled, so ScrollToll does not send screen recordings to PostHog. This data is used only to operate and improve ScrollToll — it is never used for advertising, and we do not track you across other companies' apps or websites.

HOW WE USE YOUR INFORMATION

• To process charitable donations on your behalf
• To deliver tax receipts via our nonprofit giving partner
• To display your donation history and impact in the app
• To send you notifications related to your screen time limits and donations
• To improve the app experience and fix bugs

WHO WE SHARE DATA WITH

Stripe:Payment processing. Stripe receives your card details to process charges. See Stripe's privacy policy at stripe.com/privacy.

Our Change Foundation: Charitable donation disbursement and tax receipts. They receive the donation amount, charity selection, and your email so they can process the donation and issue tax receipts for your full donation amount.

No UK Entity Sharing: ScrollToll does not share donation-level personal data with Scroll Toll Ltd (UK). Donation processing records needed for charity disbursement and tax receipts are shared only with Our Change Foundation and payment data is handled by Stripe.

Firebase (Google):Authentication and analytics. Google receives your authentication credentials and basic app usage analytics. See Firebase's privacy policy at firebase.google.com/support/privacy.

PostHog:Product analytics. PostHog processes in-app usage events, a pseudonymous account identifier after sign-in, and device and session identifiers so we can understand feature usage and improve the app. Session replay is disabled. See PostHog's privacy policy at posthog.com/privacy.

We do not sell your personal information to anyone. We do not share your data with advertisers.

DATA RETENTION

We retain your account information and donation history for as long as your account is active. You can permanently delete your account from Settings in the ScrollToll app. Deletion removes your ScrollToll profile, private app data, friend links, public leaderboard profile, saved Stripe customer, and sign-in account. Stripe, Our Change Foundation, recipient charities, and financial institutions may retain transaction, receipt, fraud-prevention, tax, or legal records for the periods they are required to keep them. These retained records are not used to reactivate your ScrollToll account. You can also contact hello@scrolltoll.me for help with deletion or retained-record questions.

YOUR RIGHTS

You may request access to, correction of, or deletion of your personal data at any time by contacting hello@scrolltoll.me. California residents have additional rights under the CCPA. EU residents have additional rights under the GDPR.

CHILDREN'S PRIVACY

ScrollToll is intended only for adults 18 and older, because it requires a payment card and processes real charitable donations. We do not knowingly collect personal information from anyone under 18.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

CONTACT US

If you have questions about this Privacy Policy, contact us at:
hello@scrolltoll.me

Rock Paper Reality, LLC
San Diego, CA