Privacy policy

Who is responsible

Beffore is an independent app, made and operated by one developer rather than a company. Questions about this policy go to marcel@beffore.app.

What the app stores, and where

Your tasks, limits, streaks and settings are written to a database on your device. They are not uploaded anywhere, and the app has no login and keeps no user profile.

We hold no copy of this content and cannot read it. Task titles in particular never leave your iPhone.

Screen Time data

Beffore uses Apple’s Screen Time frameworks (FamilyControls and DeviceActivity) to know how long your chosen apps have been used, and to shield them when a limit is spent. This is the same permission-gated system Apple uses for its own Screen Time features, and it is deliberately privacy-preserving:

• When you pick apps or categories to limit, the app receives opaque tokens, not app names. It genuinely cannot read which apps you selected in any human-readable form. It can only ask the system to act on them.
• Usage totals are calculated on the device by an Apple extension and stay there.
• None of this is transmitted off your iPhone: not to us, not to a third party.

You grant this access explicitly during setup, and you can withdraw it at any time in the iOS Settings app under Screen Time.

Usage analytics

To understand how Beffore is actually used (which features people reach, where setup gets abandoned, whether people keep using it), the app sends anonymous product-analytics events to PostHog. These record actions and settings, not content.

What the events describe:

• How you move through setup: which steps you reach, and your answers to its questions (for example, roughly how many hours a day you spend on your phone, and which kind of app takes the most time).
• The subscription screen: whether the plans loaded, which plan you picked, and whether a purchase or a restore went through.
• Everyday use: that a task was added, completed or deleted; how many limits you have, their daily minutes and mode; that you opened a limit early; your streak; whether the reminder is on; the theme and app icon you use; that you opened Support & feedback, Write a review or Manage subscription.
• Basic technical context: the app version, the iOS version, the kind of device, and the country and language your iPhone is set to.

What is never sent:

• Your task titles and your limit names. The app may record that a task was completed; it never records what the task said.
• Your Screen Time data: not the apps, categories or websites you chose to limit, not even how many, not how long you used them, and not what you tap on the screen that appears when a limit is spent. That data stays on the device, as described above.
• Your name, your email address, your Apple Account, an advertising identifier, or your IP address. We do not keep IP addresses with these events.

Events are tied to a random identifier generated on your device. Reinstalling the app starts a new one. So that we can see whether people who start a free trial keep their subscription, RevenueCat (below) reports subscription events such as a trial starting, a renewal or a cancellation to PostHog under the same random identifier. Nothing is used to track you across other apps or websites.

Analytics and crash reports are on by default, and you can switch them off at any time in the app: More, then “Share anonymous stats”. Off, the app sends no more events or crash reports, and RevenueCat’s subscription events are no longer joined to your random identifier. Those subscription events come from Apple’s purchase records rather than from the app itself, so RevenueCat still reports them, under its own anonymous identifier. Deleting the app also stops analytics, and you can object at any time by writing to marcel@beffore.app.

Crash reports and errors

When the app crashes, or something fails quietly in the background (for example, the database cannot save, or iOS refuses to schedule the reminder or to watch your limits), the app sends a report to PostHog so we can find and fix it. A crash report is sent the next time you open the app.

• A crash report holds the technical trace of where the app stopped in its own code, the app and iOS versions, and the kind of device.
• An error report names the part of the app that failed and the system’s own error code and message.
• Both go under the same random identifier as the usage analytics, and both leave out everything listed above as never sent: no task titles or limit names, no Screen Time data, nothing that identifies you.

Notifications

If you turn on the daily reminder, it is scheduled locally by your iPhone. No push server is involved.

Backups

If you have iPhone backups switched on, your Beffore data is included in your own backup, the same as any other app’s. Those backups belong to you and are encrypted by Apple. We have no access to them.

Subscriptions and payment

Beffore is a free download, and using it requires a subscription, which may begin with a free trial. All payment is handled by Apple through your Apple Account, and we never see or receive your card details.

To know whether your subscription is active, the app uses RevenueCat, a subscription-management service. RevenueCat receives the purchase receipt issued by Apple and an anonymous identifier that lets it match a purchase to an installation. It does not receive your name, your email address, your tasks, or your Screen Time data. It shares subscription events with PostHog under the app’s random analytics identifier, as described above. If you write to us from the app (More, then “Support & feedback”), the email starts with the app version, your iOS version, your iPhone model and this anonymous identifier, so we can find your subscription. They leave your iPhone only if you send that email.

How long we keep it

PostHog deletes analytics events and crash reports automatically after one year. RevenueCat keeps purchase records while a subscription exists and for as long afterwards as tax and accounting rules require. Everything on your iPhone stays until you erase it or delete the app.

Your data on the device

Your tasks, limits and streaks live only on your iPhone, so there is no server-side copy to request. The analytics events described above are anonymous and not linked to you, so they cannot be traced back to an individual and returned.

To stop analytics, switch off “Share anonymous usage stats” in More: nothing new is sent, and what was already sent is deleted on the schedule above. “Erase all data” in More deletes everything on your iPhone and starts a new anonymous identifier, so nothing sent afterwards is joined to what came before.

Deleting the app deletes its data from your iPhone. If you have a backup, the data remains in that backup until you delete it too.

This website

This site uses Rybbit, open-source analytics running on our own server rather than a third party’s. It counts page views and referrers so we know whether anyone is reading. It sets no cookies, does not fingerprint you, does not track you across other websites, and builds no profile of you. That is why there is no cookie banner.

The site also sends anonymous events to PostHog, the analytics service the app uses, so we can see how the site is used: which pages are read and which of their sections are reached, the number of hours you set on the homepage’s slider, clicks on the App Store buttons, and links that lead to a page that does not exist. Like Rybbit, it sets no cookies and stores nothing in your browser. Visitors are counted with a privacy-preserving hash that PostHog computes on its servers, and your IP address is not kept. Website visits are never linked to the app’s usage data, or to you.

Our web host records standard server logs, including IP addresses, for the ordinary purposes of serving the site securely and diagnosing faults.

Third-party services, in full

These are the only services that receive anything. We do not sell your data to anyone. PostHog and RevenueCat process it only to provide their service to us, and are bound to protect it at least as well as this policy does.

International transfers

Some of these services process data outside the country you live in, including in the United States. Where that involves personal data leaving the European Economic Area, the transfer relies on appropriate safeguards such as Standard Contractual Clauses.

Children

Beffore is not directed at children under 13, and we do not knowingly collect information from them.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, to object to or restrict its processing, and to complain to a supervisory authority.

Since your data lives on your device and we hold no account, these are mostly self-service: you can see everything in the app, erase it from More, switch analytics off in More, or delete the app, which also stops analytics.

If you are in the European Economic Area or the UK (GDPR)

We rely on legitimate interests to run anonymous product analytics and cookieless website analytics, and on the performance of our contract with you to operate subscriptions. You may object to the analytics at any time by switching them off in the app or by writing to us, and you have the right to lodge a complaint with your national data protection authority.

If you are in Brazil (LGPD)

You have the rights set out in Articles 17 to 22 of the LGPD, including confirmation of processing, access, correction, anonymisation or deletion, and portability. Requests go to marcel@beffore.app.

Changes to this policy

If this policy changes materially (for example, if the app ever gains accounts or sync), the date at the top of this page will change and the new version will be published here before the change takes effect in the app.

Contact

Questions, corrections, or requests: marcel@beffore.app.