Upfront Privacy Policy

Last updated: set when this policy is published.

The short version

Upfront has no accounts, and we run no server that stores your data.

• Your activity stays on your iPhone and in your own iCloud. iCloud backup is on unless you turn it off, and Family and friends' circles sync through iCloud too. None of it comes to us.
• We never see your Screen Time. Apple gives Upfront anonymous tokens for the apps you pick, not their names, and what Upfront counts never reaches us.
• Camera video, sound and Apple Health numbers stay on your iPhone. Photos you choose to take or add stay on your phone, and in your own iCloud if you use backup or Family. None of it is sent to us.
• The only data that reaches us is anonymous usage statistics, which you can turn off in Upfront's Settings, and crash reports and statistics from Apple if you let it share them with app developers.
• Apple handles all payments. We never see your name, email address or card.
• We don't sell data, show ads or track you across other companies' apps and websites.

Who we are

Upfront: Earn Your Screen Time ("Upfront") is made by Profectus Plus LLC, an independent developer in the United States ("we", "us"). We decide how the data in this policy is handled.

Write to us at [email protected] with any question about your privacy.

What stays on your iPhone

Most of what Upfront knows never leaves your iPhone. Each feature below works only when you allow it or start it yourself, and you can turn permissions off in iOS Settings.

• Screen Time. You pick the apps to lock in Apple's own picker, and Upfront receives anonymous tokens for them, not their names. Apple's Screen Time report draws the usage numbers in Upfront's Week and Family views; Upfront itself learns only time totals for the apps you picked, such as time in an app you unlocked, and when you pass a limit you set. It never learns which apps they are.
• Camera. Upfront counts your reps, such as squats and push-ups, on the phone as you move, and the video is never recorded. It also scans the QR codes and barcodes you use as keys, and takes the photos you ask for: of your own habits, or of a finished chore for a parent (see Children and families). Habit photos stay on this iPhone, out of every backup, and are deleted after 7 days.
• Photos. If you add a photo to your lock screen, Apple's photo picker gives Upfront only the photo you choose.
• Microphone. While you practice music, Upfront judges the sound on the phone to count the minutes you play. Nothing is recorded.
• Apple Health. Upfront reads your steps, workouts, sleep and time in daylight to turn them into earned minutes, and saves breathing sessions as mindful minutes. Health data is never used for advertising and never sent to us.
• Face ID. Upfront asks Face ID to confirm it's you before sensitive family and circle actions. Apple does the check, and Upfront learns only whether it passed.
• NFC stickers. If you use an NFC sticker as a key, Upfront reads its built-in serial number to check it. Nothing on the sticker is changed.
• Your age range. Where a law requires it (some US states, such as Texas from 2026), Upfront asks Apple for your age range on Apple's own screen. The range stays on this iPhone and is used only to follow that law and to keep friends' circles for people 13 and older.

Your settings, lock hours, earned minutes and history are stored on your iPhone too.

iCloud backup, Family and friends' circles

These optional features sync through Apple's iCloud, in your account or the account that shares with you. We have no copy and can't read it.

• iCloud backup. Unless you turn it off in Upfront's Settings, Upfront saves your settings, your answers to the setup questions (such as your age), habits, earned minutes, history, Learn decks, and lock-screen words and photo to your private iCloud. Only your Apple Account can read it. A child's iPhone never backs up.
• Family. For each child, the parent's iCloud holds a shared space that the child's iPhone and any invited adults join through a one-time link or QR code. Adults write the rules, tasks and rewards; the child's iPhone writes what was done, requests and a daily summary. No Health numbers, usage minutes or free text from the child are synced.
• Friends' circles, for adults only. Members see each other's names in the circle and share numbers, never what they use their phone for: minutes earned this week by kind, days in a row and focus sessions. Nothing that comes from Screen Time is shared, such as days under their screen-time goal. They can send preset cheers, ask friends to let them back into protected settings and ask for a yes to a habit, which shows the habit's name. With "Tell my circle" on, a member's friends also see when their protection in Upfront was off, on which kind of device and why. A circle lives in its maker's iCloud and is joined through one-time links.

The content of these records is stored in encrypted fields. Shared spaces use the iCloud storage of the parent or the circle's maker.

Anonymous usage statistics

Upfront sends anonymous usage statistics to TelemetryDeck, a privacy-focused analytics service, so we can see which screens and plans work. They can't be tied to you.

• What is sent: events such as an onboarding screen shown, a plan tapped, a purchase started or cancelled, a free trial started, a purchase or a renewal (with the plan, its price and currency, and your App Store country), whether a permission was allowed, and how many days after installing you opened the app. Each event carries the test groups your install is in, the week you installed, the time (TelemetryDeck rounds it to the hour), and device details such as your iOS version, app version, device model, screen size, time zone, and language, region, display and accessibility settings, like text size or dark mode. TelemetryDeck also adds how often and how long you use Upfront: the number of sessions, their length, how many days you've used it and the day you first opened it.
• What is never sent: your name, email address or Apple Account, which apps you lock or use, screen-time numbers, Health data, photos, habit names or quiz answers. The one answer counted is "Where did you hear about us?", and its screen says so.
• The identifier: Apple's identifier for our apps on your device, hashed on your phone and again on TelemetryDeck's server. Deleting all of our apps from the device resets it.
• Never from a child's iPhone or a family board, whatever the setting.
• To turn it off: Upfront's Settings › Privacy › "Share anonymous usage data". It is on until you turn it off.

TelemetryDeck keeps this data on servers in Germany and the Netherlands and doesn't store IP addresses (TelemetryDeck's privacy FAQ).

Purchases and subscriptions

Apple sells Upfront's subscriptions and handles every payment, so we never see your name, email address, card or Apple Account.

• What Upfront sees: from Apple, on your iPhone, which plan you have, when it renews or ends, and whether you've used a free trial. It uses this only to unlock what you paid for.
• Which plans you see: Upfront picks at random, on your iPhone, which plans and prices your install is offered. Nothing about you decides it.
• Family plan: Apple's Family Sharing passes it to your family members.
• Cancelling and refunds: manage or cancel in iOS Settings › your name › Subscriptions. Refunds go through Apple at reportaproblem.apple.com.

Apple's own privacy policy covers payments (apple.com/legal/privacy).

Children and families

Kid mode's data never comes to us, and we can't read it. A parent can set up kid mode on their child's iPhone, and what that iPhone shares goes only to the family's adults, through the parent's iCloud.

• Setup: the parent links the child's iPhone to their own with a one-time link or QR code and confirms with Face ID or the parent PIN. Where a law asks for it, Apple's own screen shares the child's age range, which stays on that iPhone.
• What the family's adults see: the nickname and age band the parent chose, the rules, tasks and rewards, and what the child did, asked for and earned. They also see when the child's app time passed a mark the parent chose, such as 1 hour. They also see what keeps kid mode working: whether the locks are on, when the parent PIN was used on the child's device and when that device last checked in, offline codes typed wrong there, and the device's kind, app version, iOS version and time zone. Never Health numbers, screen-time minutes or free text from the child.
• Chore photos: only when a parent asks for one. The photo is taken in Upfront, refused if it shows a person, and deleted once an adult answers or after 48 hours.
• Never on a child's iPhone: analytics, iCloud backup or friends' circles.
• The family board: a child without a phone can check off chores on a shared iPad or an adult's iPhone. The adults' devices save each tick in the child's shared space, and the board takes no photos or recordings of the child. A device set up only as a board sends no usage statistics and makes no iCloud backup.
• The parent stays in control: removing a child in Family deletes that child's shared space from iCloud.

Who else receives data

Two companies receive data from Upfront, each only to run what you use. We don't sell or rent data, show ads, use an advertising identifier or track you across other companies' apps and websites.

If you allow it in iOS Settings › Privacy & Security › Analytics & Improvements, Apple also shares crash reports and usage statistics with us. If authorities ask us for data, the anonymous statistics are all we hold.

On a parent's iPhone, Siri and Shortcuts also get the children's nicknames, so you can ask Siri to pause a child's apps by name. Apple handles those requests under its own privacy policy.

Keeping, protecting and deleting data

You can delete what Upfront keeps yourself, and we hold nothing that identifies you.

• On your iPhone: kept until you change or delete it. Deleting Upfront removes its data from your iPhone, except a few small items that iOS keeps in this iPhone's keychain, such as your friend code and PINs (stored only in scrambled form) and a random ID that lets Upfront recognize this iPhone after a reinstall.
• iCloud backup: turning it off in Upfront's Settings deletes this iPhone's backup from iCloud, and Settings › Other backups deletes another device's. You can also delete all of Upfront's iCloud data in iOS Settings › your name › iCloud, under storage.
• Family: tasks done, requests, answers and daily summaries are deleted after 60 days, and removing a child deletes their shared space. Chore photos are deleted once an adult answers or after 48 hours.
• Usage statistics: TelemetryDeck keeps them with no fixed end date. They can't be tied to you, so we can't find or delete yours, but turning sharing off stops new ones.
• Protection: iOS encrypts Upfront's data on your iPhone, connections are encrypted, and the content of iCloud records is stored in encrypted fields.

Your rights and choices

Wherever you live, you can see, change and delete your data in Upfront and in iOS Settings, and turn off each permission and the usage statistics.

• In the EU, the UK and similar places: you can ask to access, correct, delete, restrict or move your personal data, and object to how it's used. We rely on our legitimate interest for the anonymous statistics, which you can turn off at any time, and on providing the app you chose for everything else. You can also complain to your local data protection authority.
• In California and other US states with privacy laws: you can ask to know, delete and correct your personal information. We don't sell it or share it for cross-context behavioral advertising.
• To use a right or ask a question, write to the address under Who we are. We answer within one month.

Changes to this policy

This policy covers the Upfront app on iPhone and iPad. When we change it, we update the date at the top, and if a change affects what Upfront collects, the app's release notes say so first. Questions go to the address under Who we are.