Privacy Policy

Last updated: 14 August 2026 · ScrollRat is made by LuxaLounge

ScrollRat is an app that helps you spend less time doomscrolling. To do that it needs to look closely at how you use your phone, so we took privacy seriously from the first line of code. The short answer is that your screen-time data lives on your phone and nowhere else. This policy explains that in full: what stays on your device, the small amount that leaves it, why, and what you can do about it.

1. Who we are

ScrollRat is built and run by LuxaLounge, based in Belgium. For the limited personal data described below, LuxaLounge is the data controller under the EU General Data Protection Regulation (GDPR). You can reach us any time at berni@luxalounge.com. We are a small operation and are not required to appoint a Data Protection Officer, so that email reaches the person who actually handles these questions.

2. Your screen time stays on your device

ScrollRat uses Apple's Screen Time technology (Family Controls, Device Activity and Managed Settings) to measure how you use your phone and to block the apps you ask it to block. Everything this produces, which apps you open, for how long, what you have blocked, your missions, focus sessions and daily tasks, is processed and stored on your device.

• It is never uploaded, synced or sent to us or anyone else. We do not run a server that could receive it.
• We could not read it even if we wanted to. Apple's framework refers to your apps with sealed tokens that mean nothing outside your phone, and we never see the names behind them.
• Deleting the app deletes all of it.

The legal basis for this on-device processing is your consent: it only happens after you grant the Screen Time permission, which you can withdraw at any time in iOS Settings.

3. Notifications

If you allow notifications, ScrollRat uses them to nudge you, for example when you are close to your daily screen-time goal or when a blocked app is asking for your attention. These are generated on your device. A notification never names the app you were using or blocked from; that detail stays inside the app. You can turn notifications off in iOS Settings whenever you like.

4. The small amount of data that leaves your device

Two things travel off your phone, both because you chose to trigger them.

4.1 Waitlist and contact emails

If you type your email into the waitlist or contact form on this website, that email (and any message you write) is handled by Formspree, the form service we use, and delivered to our inbox. We use it only to reply to you or to let you know when ScrollRat is available. We do not add you to marketing lists and we do not sell or share it. The legal basis is your consent, and you can ask us to delete your email at any point.

4.2 Subscriptions and your profile

ScrollRat Pro is sold through Apple's App Store, so Apple handles the payment and keeps your payment details. We never see your card. To confirm whether your subscription is active, we use RevenueCat. RevenueCat receives an app-generated identifier, your purchase history for this app, and the first name, last name and age you enter during onboarding, which lets us recognise you if you contact us for support. The legal basis for verifying your purchase is performance of our contract with you (giving you the Pro features you paid for); the legal basis for the name and age is our legitimate interest in handling support properly. You can ask us to remove that profile at any time.

5. This website

The site is static. It sets no tracking cookies and runs no analytics. The one thing worth naming is fonts: they are currently loaded from Google Fonts, which means your browser fetches the font files from Google's servers and Google sees your IP address in the process. We rely on our legitimate interest in presenting the site properly for this, and we plan to move to self-hosted fonts to remove even that. The waitlist and contact forms behave as described in section 4.1.

6. Sending data outside the EU

Formspree, RevenueCat and Google are based in the United States, so the limited data in sections 4 and 5 is transferred there. Those transfers rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU-US Data Privacy Framework. In plain terms, the providers are contractually held to European-level protection for that data.

7. How long we keep things

• On-device app data: kept until you delete it or delete the app. It is on your phone, so it is genuinely under your control.
• Waitlist and contact emails: kept until you ask us to remove them, or until they are no longer needed for the reason you sent them.
• Subscription data at RevenueCat: kept while your subscription is active and for a short period afterwards, then removed on request. Apple keeps billing records on its own side under its own rules.

8. Your rights

Because we are based in the EU, GDPR applies to us regardless of where you live. You have the right to access the personal data we hold about you, to correct it, to have it erased, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on your consent, you can withdraw it at any time without affecting what came before. In practice the only data we hold off your device is your email and, if you subscribe, your name and age at RevenueCat, so exercising any of these is usually one email to berni@luxalounge.com.

If you think we have handled your data badly, you can complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), dataprotectionauthority.be, or to the authority in your own EU country. We would rather you email us first and give us the chance to fix it.

If you are in California, we do not sell or share your personal information as those terms are defined under California law, and we will not discriminate against you for exercising your privacy rights. The same email above covers requests to know or delete.

9. Automated decisions

ScrollRat does not make any legal or similarly significant decision about you automatically. The app reacts to your own usage and the limits you set; there is no profiling of you for our benefit.

10. Children

ScrollRat is not aimed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has sent us their email, contact us and we will delete it.

11. Changes to this policy

If we change how data is handled, for example if a future version adds an optional sync feature, we will update this page and flag it clearly in the app before anything actually changes. The date at the top always reflects the current version.

12. Contact

Anything about privacy, or a request about your data, goes to berni@luxalounge.com or through the contact form. A real person reads it.