Privacy Policy

Last updated: 2 October 2026

ScrollGoal ("we", "us") is a screen-time app published by Cyril Bruijn, trading as ScrollGoal, Bloemendaal, Netherlands. Contact: privacy@scrollgoal.app.

On your phone

Your app history stays on your device

Which apps you used, your monitored-apps list, and the websites the accessibility service sees stay on your phone. We cannot read them. There are no accounts and no login. Subscribers send one daily total so we can keep ScrollGoal free for light users.

Only if you opt in

Sharing is off by default

We only receive anonymous, aggregated statistics if you switch sharing on. Nothing in the app requires it.

How we stay free

We sell anonymous group statistics

For example, "average daily social-media minutes of men aged 25–34 in this timezone" — sold to research and industry partners. Never anything about you as an individual, and never the names of individual apps.

Your control

Withdraw or erase any time

Turn sharing off in Settings whenever you like, and erase everything on your device with one tap (Settings → Reset all data).

1.Data that never leaves your device

The following is stored only on your phone and is never transmitted anywhere:

Accessibility data — including every website address the service sees — is never stored beyond the moment and never sent off the device. The single exception is one yes/no answer for subscribers, described in section 5: whether the minutes you spent on monitored websites take your monthly average over 2 hours a day. No website addresses, names or minute counts are sent.

Deleting the app, or using Settings → Reset all data, permanently erases all of this.

2.Anonymous research statistics (only if you opt in)

During onboarding you are asked whether ScrollGoal may use anonymised, aggregated usage statistics. The default is no. If — and only if — you switch this on, the app sends our server one summary per day containing: the date, your age range and birth year, gender, self-assessed severity tier, notification tone, timezone, platform, whether you went over your daily goal, the number of reminders shown, and your total daily minutes in monitored app categories (social, video, messaging, other). Web-browsing minutes measured by the accessibility service are excluded from these summaries.

These summaries carry no name, no email, no account, no device identifier, and no advertising ID. On our server they are combined into group statistics, and any group smaller than 50 people is discarded. Raw daily summaries are deleted after 180 days; only the group statistics remain.

We sell access to these group statistics to digital-wellness researchers and industry analysts. What buyers receive is category-level only — for example, average social-media minutes per day for a demographic group. Buyers never receive individual records, device identifiers, or per-app data, and are contractually prohibited from attempting re-identification.

You can withdraw consent at any time in Settings → "Allow anonymised research data". Withdrawal stops all future submissions immediately. Because past submissions are anonymous, we cannot locate and delete yours specifically; they leave the raw store automatically within 180 days.

3.Product analytics (only if you opt in)

The same opt-in also covers our product-analytics tool (PostHog, EU servers), which receives app events (for example "onboarding completed"), your settings choices (severity, tone, age range, gender), and device metadata (model, OS version, language, timezone). It never receives app-usage amounts, browser data, or anything from the accessibility service. If you do not opt in, no analytics events are sent.

4.Social groups (only if you join one)

If you create or join a group, we sync: a randomly generated pseudonymous ID, your chosen display name, and your daily/weekly/monthly total scrolling minutes (a single number — no per-app breakdown), so your group can see a leaderboard. This is core functionality of the feature you joined, visible only to your group. Leave the group and syncing stops; ask us at privacy@scrollgoal.app with your group code to have historical group rows deleted.

5.Subscription: staying free

ScrollGoal is a monthly Google Play subscription. Average 2 hours a day or less on social media and ScrollGoal stays free: at the end of each billing month in which you stayed within that, we ask Google Play to move your next payment back by a month. Go over, and your next payment goes ahead. To decide this, the app sends our server, once a day:

Our server asks Google Play for the subscription's status and renewal date and, shortly before each renewal, works out your average and, if you qualify, asks Google Play to defer the next payment. Days we could not measure (for example, if ScrollGoal was stopped or usage access was switched off) count as 2 hours.

These records are deleted 120 days after the day they describe, and all records for a subscription are deleted 120 days after it ends. Payment details are handled by Google Play; we never receive them.

6.Android permissions

8.California users (CCPA/CPRA)

We do not sell or share personal information as defined by the CCPA — the only data sold is anonymised, aggregated statistics that cannot reasonably be linked to you. Sharing is additionally off unless you opt in, which exceeds the CCPA's opt-out requirement. To exercise CCPA rights, contact privacy@scrollgoal.app.

9.Children

ScrollGoal is not directed at children. Users under 18 can use the app, but their data is never included in research statistics or product analytics, regardless of the consent toggle. We do not knowingly collect personal information from children under 13.

10.Security and retention

All transmission uses HTTPS. Raw daily summaries: deleted after 180 days. Aggregated statistics: retained indefinitely (anonymous). Group rows: retained while the group exists. Subscription records: deleted after 120 days (section 5). On-device data: under your control, erased by reset or uninstall.

11.Changes

We will post any material changes here and, where the change expands data use, ask for your consent again in the app.