Privacy Policy

ScrollWager runs on things most apps would happily upload: your step count, your camera, and how much you use your phone. Almost none of it leaves the device. Here is the exact line.

Last updated 22 September 2026

01Who is responsible

The controller for the processing described here is:

Maurice Wolf, Switzerland

You can reach us at support@scrollwager.app for anything in this document.

02Your account

If you create an account, we receive and store an email address. The only way to sign in is Sign in with Apple: Apple tells us an email address and, if you allow it, your name. If you choose Apple's Hide My Email, we only ever see a relay address and never your real one.

Accounts exist so your streak and history survive a lost or replaced phone. We do not use your address for marketing and we do not sell it.

03Screen Time

ScrollWager uses Apple's Screen Time framework to lock the apps you pick and to show you your own usage. This data cannot leave your device, by Apple's design rather than by our promise. Usage figures are only readable inside a sealed system extension that has no way to send anything anywhere, and the apps you select are represented to us as opaque tokens rather than names. We could not upload your Screen Time data if we wanted to.

04Steps and motion

Walking earns you screen time, so the app needs to know how far you walked. It reads your step count from the iPhone's motion sensor, using Apple's Core Motion framework. This needs the Motion & Fitness permission, which you can refuse or withdraw at any time in iOS Settings.

The app does not connect to Apple Health and reads no health data of any kind. Your step and pushup counts stay on the device. They are not written to your account record and they are not sent to our analytics; the only thing that leaves the phone is the minute total you earned from them.

05Camera

Pushups are counted by watching you do them. When a pushup session is running, the camera feed is analysed on the device to track body position.

No image or video is recorded, saved, or transmitted. Frames are processed as they arrive and discarded. The app has no access to your photo library, does not use the microphone, and performs no network requests during a session. The only thing that survives a pushup session is a number.

06What we sync

If you are signed in, the app sends a copy of a narrow slice of your daily record to our server. The device stays the source of truth. The copy is read back only when you sign in on a new or wiped phone, to restore your record.

Per day, we store: the date, how many wagers you placed and won, minutes staked, minutes unlocked, how many times you opened a locked app, minutes earned from tasks, and whether your streak broke. Separately we store your current streak and the date it was last settled.

Deliberately not included: your step count, your pushup count, and which games you played. Those exist only on your phone. Your first name and your daily goal are included, so they survive a lost or replaced phone like the rest of your record.

07Analytics

We measure how the app is used so we can tell which parts work: screens opened, wagers placed, tasks completed, and similar events, tied to a random identifier rather than to your name. We use PostHog for this.

When a task pays out, the event records which kind of task it was and how many minutes it paid. The step and pushup counts behind it are deliberately left out. They come from the phone's motion sensor, they belong to you, and they stay on the device.

Five of the questions we ask during setup are recorded as well: which age group you picked, where you heard about us, roughly how many hours a day you spend on your phone, when you use it most, and what you have tried before. They are picked from a list, never typed. One answer is deliberately left out: what you told us screen time does to you, such as sleep, focus or how you feel. That answer does not reach PostHog. Neither does your name. Both, along with when you use your phone most, do reach Superwall; see the next section.

If the app crashes, PostHog collects a crash report: what kind of crash it was, the code path it happened in, and basic device details such as the iOS version. It is sent the next time you open the app, and it carries the same random identifier as everything else here. We use it to find and fix the crash. It contains nothing you typed and nothing about what you were doing beyond where in the code the app stopped.

PostHog also derives an approximate location from the IP address your requests arrive with: country, region, city and time zone. This is region-level only, accurate to roughly 50 km. We have switched off the coordinates PostHog would otherwise store, so no latitude or longitude is kept. We use this to see which countries the app is used in, nothing else.

We also measure which marketing channel an install came from, using AppsFlyer. On iOS, this only involves tracking across other companies' apps and websites if you say yes to the App Tracking Transparency prompt. If you decline, attribution runs without that identifier, and declining changes nothing about how the app works.

If you found us through an ad we run on the App Store, Apple tells us which campaign, ad group and search term brought you, through its AdServices framework. RevenueCat handles this on our behalf. It tells us which of our ads worked; it says nothing about what you do inside the app. This one runs whether or not you accept the App Tracking Transparency prompt: if you decline, Apple withholds the click and impression timestamps and we receive the coarser version.

08Purchases

Subscriptions are sold and billed by Apple. We never see your payment details. To know whether your subscription is active and to show you the right offer, we use RevenueCat and Superwall, which receive a purchase identifier and subscription status. Superwall also receives the first name you typed during setup and the daily limit you chose, so the offer screen can address you by name and show your own numbers. It also receives when you use your phone most, what you told us screentime does to you the most, and the age group you picked, so the offer screen speaks to your situation.

RevenueCat also passes the fact that a subscription started on to AppsFlyer, so we can tell which marketing channel it came from. As above, this only involves tracking across other companies' apps and websites if you said yes to the App Tracking Transparency prompt.

If you ask Apple for a refund, Apple asks us whether the purchase was delivered and how long the subscription has been in use. RevenueCat answers on our behalf with exactly that: delivery status and subscription duration, nothing about what you did inside the app. We state no preference about the outcome; Apple decides.

09Legal bases

• Performing our contract with you (GDPR Art. 6(1)(b)): running your account, syncing your history, providing the subscription.
• Our legitimate interests (Art. 6(1)(f)): product analytics, keeping the service secure and working.
• Your consent (Art. 6(1)(a)): access to Motion & Fitness, the camera, and cross-app tracking. Each is asked for separately, each can be refused, and each can be withdrawn later in iOS Settings.

10How long we keep things

On your phone, the day-by-day history is capped at 365 days; older days fall off automatically. On our server, your account data is kept until you delete your account, at which point it is removed. Analytics events are kept in aggregate.

Uninstalling the app deletes everything held on the device. It does not delete a server-side account, so if you have one, delete the account first.

11Your rights

You can ask us for a copy of your data, correction of it, deletion of it, restriction of processing, or portability, and you can object to processing based on legitimate interests. Write to support@scrollwager.app.

Deleting your account does not need us. It is in the app: Settings, then Delete Account. It removes your account and its data on the server. You also have the right to complain to your data protection authority.

12Children

ScrollWager is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has given us data, write to us and we will delete it.

13Changes

If this policy changes, the date at the top changes with it. Changes that meaningfully affect you will be announced in the app rather than quietly published here.

14Contact