Privacy Policy

Last Updated: October 2026

Your privacy is important to us. It is Rulesimple's policy to respect your privacy regarding any information we may collect from you across our application, Furl, and other sites we own and operate.

1. Information We Collect

We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent. We also let you know why we’re collecting it and how it will be used.

  • Account Data: Email address and basic profile information if you choose to create an account for cloud backup.
  • Usage Data: Anonymous telemetry, session durations, and crash reports to help us improve the app and debug issues.
  • Android Waitlist: If you join the Android waitlist on our website, we store your email address and the date you signed up. We use it only to tell you when Furl for Android is available, and you can ask us to remove it at any time.
  • Device Permissions: We request Accessibility/Screen Time permissions strictly for the purpose of the App Blocking functionality. We DO NOT track, store, or transmit your activity on other apps.

2. How We Use Information

The information we collect is used in the following ways:

  • To provide, operate, and maintain Furl.
  • To improve, personalize, and expand our application.
  • To understand and analyze how you use Furl.
  • To communicate with you, for customer service, and updates.

3. Security of Data

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable.

4. Third-Party Services

We may employ third-party companies and individuals due to the following reasons:

  • To facilitate our Service (e.g., Supabase, RevenueCat).
  • To provide the Service on our behalf.
  • To assist us in analyzing how our Service is used (e.g., PostHog).

5. Account Deletion

You may delete your account at any time from within the app (Profile → App Settings → Delete Account). When you request account deletion:

  • Your account is immediately deactivated and no longer visible to other users.
  • All operational data (sessions, statistics, plans) is removed from active systems.
  • A complete copy of your data is retained securely for 12 months to allow account recovery and to fulfil our legal obligations (see Section 6).
  • You may log back in at any time within 12 months to restore your account and all data, or to permanently delete it immediately.
  • After 12 months, all retained data is permanently and irreversibly purged from our systems.

If you have an active Pro subscription, deleting your account does not automatically cancel your subscription. You must cancel billing separately through Apple (App Store → Your Account → Subscriptions).

6. Data Retention

We retain your personal data only for as long as necessary to provide the service and to comply with our legal obligations:

  • Active accounts: Data is retained while your account is active.
  • Deleted accounts: A secure archive is retained for 12 months following account deletion. Legal basis: Article 17(3)(b) GDPR (compliance with legal obligations including financial record-keeping) and Article 17(3)(e) GDPR (establishment, exercise, or defence of legal claims).
  • Audit logs: Security and deletion audit logs are retained for 7 years for legal and compliance purposes.
  • Anonymous analytics: Aggregated, non-identifying usage statistics may be retained indefinitely.

7. Marketing Communications

We send marketing emails only with your explicit consent. You may be asked for consent after your first session. You can withdraw consent at any time from within the app (Profile → App Settings → Email Updates). Withdrawing consent takes effect on the next communication cycle.

Transactional communications (e.g. streak notifications, session confirmations) are not subject to marketing consent and may be sent regardless of your preference.

8. Your Rights (GDPR)

If you are located in the European Economic Area or United Kingdom, you have the following rights under applicable data protection law:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to erasure: Request deletion of your personal data. This can be exercised directly in-app (see Section 5). Note that our 12-month retention period applies pursuant to Article 17(3) GDPR.
  • Right to rectification: Request correction of inaccurate personal data.
  • Right to portability: Request your data in a machine-readable format.
  • Right to object: Object to processing of your personal data for marketing purposes.
  • Right to restrict processing: Request that we limit the processing of your personal data.

To exercise any of these rights, contact us at info@rulesimple.com. We will respond within 30 days.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page.

Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at info@rulesimple.com.