Privacy Policy

ScrollWager runs on things most apps would happily upload: your step count, your camera, and how much you use your phone. Almost none of it leaves the device. Here is the exact line.

Last updated 19 August 2026

01Who is responsible

The controller for the processing described here is:

Maurice Wolf, Switzerland

You can reach us at support@scrollwager.app for anything in this document.

02Your account

If you create an account, we receive and store an email address. There are two ways this happens:

• Sign in with Apple. Apple tells us an email address and, if you allow it, your name. If you choose Apple's Hide My Email, we only ever see a relay address and never your real one.
• Email and password. You give us the address directly. The password is handled by our authentication provider and we never see it.

Accounts exist so your streak and history survive a lost or replaced phone. We do not use your address for marketing and we do not sell it.

03Screen Time

ScrollWager uses Apple's Screen Time framework to lock the apps you pick and to show you your own usage. This data cannot leave your device, by Apple's design rather than by our promise. Usage figures are only readable inside a sealed system extension that has no way to send anything anywhere, and the apps you select are represented to us as opaque tokens rather than names. We could not upload your Screen Time data if we wanted to.

04Steps and motion

Walking earns you screen time, so the app needs to know how far you walked. It reads your step count from the iPhone's motion sensor and, if you allow it, from Apple Health.

Access to Apple Health is read-only and limited to step count. The app never writes anything into Health, and it requests no other health data type. Your step and pushup counts are never written to your account record: the copy we sync carries only the minute total you earned from them. The counts themselves do reach our analytics, tied to a random identifier, so that we can see how much physical work the app actually asks of people. See section 7.

05Camera

Pushups are counted by watching you do them. When a pushup session is running, the camera feed is analysed on the device to track body position.

No image or video is recorded, saved, or transmitted. Frames are processed as they arrive and discarded. The app has no access to your photo library, does not use the microphone, and performs no network requests during a session. The only thing that survives a pushup session is a number.

06What we sync

If you are signed in, the app sends a copy of a narrow slice of your daily record to our server. The device stays the source of truth; the copy only ever moves in one direction, and nothing is read back.

Per day, we store: the date, how many wagers you placed and won, minutes staked, minutes unlocked, how many times you opened a locked app, minutes earned from tasks, and whether your streak broke. Separately we store your current streak and the date it was last settled.

Deliberately not included: your step count, your pushup count, which games you played, and your daily goal. Which games you played and your daily goal exist only on your phone; the step and pushup counts are not part of this record either, but they do appear in analytics, which is a separate path and a separate purpose (section 7).

07Analytics

We measure how the app is used so we can tell which parts work: screens opened, wagers placed, tasks completed, and similar events, tied to a random identifier rather than to your name. We use PostHog for this.

One of those events carries a fitness figure: when a task pays out, we record how many steps you had walked or how many pushups you had done. We use it for one question only, which is how much physical work people really do for their screen time. It is never used for advertising, it is never passed to our attribution provider, and it is not sold or shared with anyone else. Declining the Health permission does not switch it off, because the app can still count your steps with the phone's own motion sensor; what it does switch off is our reading of Apple Health.

PostHog also derives an approximate location from the IP address your requests arrive with: country, region, city and time zone. This is region-level only, accurate to roughly 50 km. We have switched off the coordinates PostHog would otherwise store, so no latitude or longitude is kept. We use this to see which countries the app is used in, nothing else.

We also measure which marketing channel an install came from, using AppsFlyer. On iOS, this only involves tracking across other companies' apps and websites if you say yes to the App Tracking Transparency prompt. If you decline, attribution runs without that identifier, and declining changes nothing about how the app works.

08Purchases

Subscriptions are sold and billed by Apple. We never see your payment details. To know whether your subscription is active and to show you the right offer, we use RevenueCat and Superwall, which receive a purchase identifier and subscription status.

RevenueCat also passes the fact that a subscription started on to AppsFlyer, so we can tell which marketing channel it came from. As above, this only involves tracking across other companies' apps and websites if you said yes to the App Tracking Transparency prompt.

09Legal bases

• Performing our contract with you (GDPR Art. 6(1)(b)): running your account, syncing your history, providing the subscription.
• Our legitimate interests (Art. 6(1)(f)): product analytics, keeping the service secure and working.
• Your consent (Art. 6(1)(a)): access to Apple Health, the camera, and cross-app tracking. Each is asked for separately, each can be refused, and each can be withdrawn later in iOS Settings.

10How long we keep things

On your phone, the day-by-day history is capped at 365 days; older days fall off automatically. On our server, your account data is kept until you delete your account, at which point it is removed. Analytics events are kept in aggregate.

Uninstalling the app deletes everything held on the device. It does not delete a server-side account, so if you have one, delete the account first.

11Your rights

You can ask us for a copy of your data, correction of it, deletion of it, restriction of processing, or portability, and you can object to processing based on legitimate interests. Write to support@scrollwager.app.

Deleting your account does not need us. It is in the app: Settings, then Delete Account. It removes your account and its data on the server. You also have the right to complain to your data protection authority.

12Children

ScrollWager is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has given us data, write to us and we will delete it.

13Changes

If this policy changes, the date at the top changes with it. Changes that meaningfully affect you will be announced in the app rather than quietly published here.

14Contact