Legal

Privacy Policy

Last updated: 8 October 2026

Attuno is an iPhone app that helps you understand your screen time and limit the apps you choose to limit. This policy explains what Attuno collects, why, who it is shared with, how long it is kept, and what you can do about it.

Attuno is operated by Ruslan Zhyhit, based in Spain (“we”), who is the controller of your personal data. You can reach us at support@attuno-app.com.

Your Screen Time stays on your iPhone

Attuno reads Screen Time through Apple’s Screen Time frameworks, across the apps installed on your iPhone. The names of apps and websites never leave your iPhone: Apple gives Attuno an opaque token for each one, and Attuno shows names on the device only. What reaches our servers is described below.

What we collect

Your account

• Email address and password. The password is stored only as a salted hash.
• Whether your email address is confirmed, and one-time codes we email you. Codes are stored hashed and expire after 15 minutes (password reset) or 24 hours (email confirmation).
• Language, time zone and an optional nickname.
• The parental PIN, if you set one. It is stored so that it can be emailed to the account’s address when forgotten.

Usage totals

• For each day: your total screen time in minutes, the minutes per app, and the minutes per activity category. Each app or category is identified by a one-way hash of Apple’s token, which we cannot turn back into a name.
• What Attuno works out from those totals: your daily attention score and state, your archetype, insights, streaks, achievements and league standing.
• Challenges you place: the date, the stake, the category drawn (as the same one-way hash) and the result.

Your device

• An identifier Attuno creates on your iPhone, used to keep one device signed in to an account at a time, and your sign-in sessions (stored only as hashes).
• A push notification token and language, used to send the notifications you allow, and a record of the notifications sent to you.

Purchases

• Your subscription’s plan, status, expiry date and App Store transaction identifier, received from our subscription provider when you buy, renew, cancel or restore. We never receive your payment details — Apple handles payment.

Security and reliability

• The IP address you registered from and the one you last signed in from, used to protect accounts against abuse. Request counts are also kept briefly in memory to limit repeated attempts.
• Records of server errors, which may include your account identifier.
• Server logs and performance figures: which part of the service was called, when, how long it took and whether it failed, with your account identifier for signed-in requests. They never contain your IP address, your password, codes, your minutes or anything about your apps.

When you write to us

• Your email address and whatever your message contains, so that we can answer.

Why we use it, and on what basis

• To provide Attuno — your account, score, history, league, achievements, Challenges, limits and subscription, and the emails the service needs (confirmation codes, password reset, PIN reminders): necessary to perform our contract with you.
• Push notifications: your consent, given in iOS when Attuno asks. You can withdraw it at any time in iOS Settings.
• Security, preventing abuse and fixing errors, including IP addresses, request limits, error records, server logs and the record of purchase events: our legitimate interest in keeping Attuno and its users’ accounts safe and working.
• Answering your messages: our legitimate interest in helping you, or the contract when the message is about your account.

We do not use your data for advertising, do not profile you for anyone else, and do not make decisions about you that have legal or similarly significant effects by automated means. The score and archetype are a calculation from your minutes, shown to you; they decide nothing about you.

What other people see

Attuno places you in a weekly league with other users. Members of your league see your nickname (or an automatic name such as “User_AB12”), your total and weekly score, your rank, whether you synced on fewer than three days that week, and a random internal identifier of your account. They do not see your email address, your minutes or anything about the apps you use.

Who we share data with

We do not sell your personal information, and we do not share it for advertising or to track you across other companies’ apps or websites. We share it only with providers that run parts of Attuno for us, each limited to what it needs:

• Apple — App Store purchases and push notifications.
• RevenueCat — subscription management. It receives your account identifier and purchase records.
• OVHcloud — the servers and database that run Attuno, in the United States (Virginia).
• Resend — sending email (confirmation codes, password reset, PIN reminders).
• Grafana Labs — monitoring: it stores our server logs and performance figures, in the United States (Virginia), and checks from outside that the servers and this website are up.
• Cloudflare — hosting this website and forwarding mail sent to support@attuno-app.com. It handles the IP address of anyone who visits the site.
• Google — the mailbox (Gmail) where messages to support@attuno-app.com arrive.

We may also disclose data where the law requires it.

Where your data is stored

Attuno’s servers and database are in the United States, and several of the providers above are based there. Because we are based in the European Union, transfers outside it rely on the safeguards the GDPR provides: the EU–U.S. Data Privacy Framework where the provider takes part in it, and otherwise the European Commission’s standard contractual clauses.

This website

attuno-app.com sets no cookies and runs no analytics or advertising. If you choose a language or a theme, that choice is saved in your own browser and never sent to us. Cloudflare, which hosts the site, processes your IP address to deliver the pages.

How long we keep it

• Account, usage, Challenge and subscription data: while your account exists.
• Email codes: until they expire, as described above.
• Records of notifications sent, purchase events received and server errors: 30 days.
• Server logs and performance figures: 14 days.
• Messages to support: as long as needed to deal with your request, and no longer than two years after the conversation ends.

Deleting your account

You can delete your account from inside the app: Settings → Delete account. You will be asked for your password, because the action cannot be undone.

Deletion is immediate and permanent. There is no grace period and no recovery: your account, your sign-in sessions, your daily totals and per-app and per-category minutes, your score history, insights, achievements, streaks, Challenges, league membership, devices registered for notifications, the record of notifications sent to you, subscription records and any unused email codes are removed at once. Your email address becomes free to register again.

Two things are deliberately kept, and neither identifies you afterwards:

• Records of server errors keep their technical details but stop pointing at any account. They are deleted after 30 days.
• The ledger of purchase events received from our subscription provider keeps the provider’s own event identifiers and your former account identifier, which no longer leads to any account. It is what stops an old payment event being replayed against an address that registers later. It is deleted after 30 days.

Apple and RevenueCat keep their own records of your purchases under their own policies; deleting your Attuno account does not remove them. If you want RevenueCat’s records about you deleted, write to us and we will ask RevenueCat to delete them.

Deleting your account does not cancel an App Store subscription. Apple bills it and only you can stop it: iOS Settings → your name → Subscriptions. Cancel there before or after deleting the account, otherwise it renews.

Children

Attuno accounts are for adults: you must be 18 or older, or the age of majority where you live, to create one. A parent or guardian may install Attuno on a child’s iPhone, using an account the parent creates and holds, to set limits and a parental PIN. Each iPhone needs its own account, because an account stays signed in on one device at a time. The child does not create an account or give us any information; the usage totals measured on that iPhone are stored under the parent’s account, as described above.

Attuno is not directed to children, and we do not knowingly collect personal information from children under 13, or under the age set by the law of their country. If you believe a child has created an account, write to support@attuno-app.com and we will delete it.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. Write to support@attuno-app.com from the address on your account; we answer within one month.

If you are unhappy with how we handle your data, you can complain to a data protection authority — in Spain, the Agencia Española de Protección de Datos (aepd.es) — or to the authority where you live. Residents of California and other U.S. states with privacy laws have similar rights, and we honour them in the same way.

Your choices

• You can revoke Attuno’s Screen Time access at any time in iOS Settings, which stops all measurement.
• You choose which apps and categories Attuno may limit or block, and can change or remove those limits at any time in the app.
• You can turn off notifications at any time in iOS Settings.

Changes

If we change this policy, we update the date above. Before a material change takes effect, we tell you by email at the address on your account.

Contact

Ruslan Zhyhit, Spain — support@attuno-app.com