Privacy Policy

Last updated: July 21, 2026

Detox is a self-control app and website for iPhone and Android operated by EpowerX Labs Private Limited ("EpowerX", "we", "us") that helps you block distracting apps for a period you choose. This policy explains what each version and detoxapp.app handle. The short version: we require no account, and the identities of the apps you select and the enforcement state needed to block them stay on your device. Both app versions and the website can use limited product analytics. On iPhone, app analytics and crash reporting remain off unless you explicitly choose to share them. Purchase infrastructure is used only in versions and platforms where a purchase is offered.

Data we do not collect

If you contact support, we receive the email address and information you choose to include in your message so that we can respond.

Website analytics

When you visit detoxapp.app, the site records one website_page_viewed event for the page load. When you select one of its App Store links, it records a website_app_store_clicked event. These events include the page path and title, the App Store link location, the referring domain (not the full referring URL), and any utm_source, utm_medium, utm_campaign, utm_content, or utm_term campaign values in the landing URL. We use them to report daily page-load visits, App Store clicks, the page-view-to-click funnel, and campaign conversion. We do not treat this count as a count of unique people. Public website traffic can include automated traffic, so obvious crawler and monitoring user agents are excluded from these reports.

The site creates a random pseudonymous identifier in memory for each page load so that an App Store click can be associated with the page view that immediately preceded it. The identifier is discarded when that document closes or reloads, is not an account or advertising identifier, and is not shared across other apps or websites. We do not use website analytics cookies, local storage, or session storage. The public endpoint accepts only the two events and properties listed above, and our server forwards them to our self-hosted Jitsu/OpenPanel analytics. The server necessarily receives your IP address while handling the request; it uses only a temporary, process-specific one-way hash of that address for abuse rate limiting and does not include the raw address or browser user agent in the analytics event. Global Privacy Control and browser Do Not Track signals disable this website collection.

iPhone: Screen Time data stays on your device

Detox uses Apple's Screen Time technology (the Family Controls, Managed Settings, and Device Activity frameworks) to block the apps you select. Which apps you choose and how you use your device is processed entirely on your iPhone by Apple's frameworks. Before permission is granted, Detox can locally check a limited list of supported app URL schemes to suggest apps that appear to be installed. Those results, your final selections, and Screen Time activity never leave your device and are never transmitted to us or to anyone else.

iPhone: Purchases

Fixed-duration challenges can be non-renewing in-app purchases processed by Apple through the App Store. The price and duration are shown before confirmation, and the purchase does not renew automatically. Temporary breaks during a challenge are currently provided without a separate purchase. We do not receive payment-card or bank details.

RevenueCat processes purchase history, product and store information, purchase status, price and currency, country, transaction identifiers, and a pseudonymous RevenueCat App User ID to deliver, validate, and restore an active challenge purchase. See RevenueCat's privacy policy.

iPhone: Analytics

If you choose “Share optional analytics,” Detox records product-usage events — for example, which onboarding steps you complete, which features you use, and when a challenge or temporary unlock starts. These events are tagged with a randomly generated, pseudonymous app-scoped identifier stored by Detox (not your name, email, Apple ID, hardware identifier, or advertising ID), and sent over HTTPS to two self-hosted Jitsu/OpenPanel environments that we operate: an operational/staging environment and a production environment. Like any network request, the request exposes its IP address; our analytics infrastructure can use it to derive approximate city, region, and country. Detox does not request location permission or collect precise GPS location. The events and approximate location can be linked to that pseudonymous identifier for our own product analytics, but not to your real-world name or account; they are never used to track you across other apps or websites, are not used for advertising, and are never sold or shared with data brokers. You can enable or disable this collection at any time from Privacy in the app. We do not present the App Tracking Transparency prompt because we do not track you in the sense Apple defines.

iPhone: Optional crash reports and diagnostics

The same optional sharing choice controls Firebase Crashlytics. If you opt in, Crashlytics can process crash stack traces, relevant app state, device and operating-system metadata, crash and session timestamps, a Crashlytics installation UUID, and a Firebase installation ID. If you opt out, automatic Crashlytics collection stays disabled and unsent reports are deleted from the app. Google processes this information as our service provider. See Firebase privacy and security information.

Android: Product analytics

Detox sends limited product-usage events to analytics infrastructure that we operate. These events can include onboarding steps, the number of apps selected (not their names or package names), challenge duration and estimated daily screen time, permission setup status, challenge completion, and temporary-unlock actions or purchase outcomes. Each event can include the app version and build, Android version, device model and manufacturer, locale, timestamp, and a pseudonymous identifier based on Android's ANDROID_ID, which Android scopes to the app-signing key, Android user, and device. If Android does not provide that identifier, Detox generates a random fallback identifier.

Release builds send the same events over HTTPS to the two self-hosted Jitsu/OpenPanel environments described above. The network request exposes its IP address, which our analytics infrastructure uses to derive approximate city, region, and country. Detox does not request Android location permission or obtain precise GPS location. The current version sends these analytics automatically and does not offer an in-app opt-out. We use them for product analysis and improvement, not advertising or cross-app tracking.

Android: Crash reports and diagnostics

Detox uses Google Firebase Crashlytics for crash and Android "Application Not Responding" diagnostics. Crashlytics can process crash stack traces, relevant app state, device and operating-system metadata, crash and session timestamps, a Crashlytics installation UUID, and a Firebase installation ID. Detox does not include Firebase Analytics or Firebase Performance Monitoring. Google processes Crashlytics data as our service provider and states that crash stack traces and associated identifiers are retained for 90 days before removal begins. See Firebase privacy and security information.

Android: Purchases

Fixed-duration challenges can be one-time digital purchases processed by Google Play. Temporary breaks during a challenge are currently provided without a separate purchase. We do not receive payment-card or bank details. RevenueCat processes purchase history, product and store information, purchase status, price and currency, country, transaction identifiers, and a pseudonymous RevenueCat App User ID to deliver and validate purchases. See RevenueCat's privacy policy.

When RevenueCat sends a purchase event to our server, we store the event and its purchase and pseudonymous customer identifiers in our purchase-event database. For purchase operations and support, limited notifications containing the customer identifier, product, amount and currency, and country are sent to internal Slack channels.

Android: Permissions and app visibility

Android requires system permissions for Detox to detect and block selected apps. Detox uses them as follows:

How we use and disclose information

We use the information described above to operate Detox, deliver and validate purchases where offered, understand feature usage, troubleshoot problems, maintain security, and improve reliability. Firebase processes crash data as described above. RevenueCat processes purchases where they are offered, and Slack processes limited purchase notifications for our internal operations. Apple and Google separately process App Store and Google Play transactions under their own terms. We may disclose information when required by law or to protect users, our rights, or the service. We do not sell personal data or disclose it for third-party advertising.

Security

Data sent by Detox is encrypted in transit using HTTPS. No system is completely secure, but we limit the information collected and restrict access to systems that process it.

Data retention and deletion

Your challenge progress, settings, and selected apps are stored locally and are deleted when you delete the app or, on Android, clear its data. On Android, you can revoke Detox permissions in system settings; if you enabled the optional device-administrator protection, deactivate it there before uninstalling.

Firebase states that Crashlytics crash data and associated identifiers are retained for 90 days before removal begins. Our self-hosted analytics and purchase-event records currently have no fixed automatic expiration period; we retain them for product analysis, troubleshooting, purchase support, security, accounting, and legal obligations. RevenueCat, Apple, Google, Google Play, Slack, and email providers retain data under their own policies and applicable obligations.

On iPhone, open Privacy in Detox to copy your current pseudonymous analytics ID and, when shown after an identifier upgrade, the previous ID. To request deletion of self-hosted product analytics, email help@detoxapp.app and include every ID shown. Because Detox has no account, we need those IDs to locate the relevant records. An analytics ID is not joined to Firebase's separate crash identifiers, so it cannot identify a previously sent Crashlytics report. Turning sharing off stops product analytics immediately, deletes unsent crash reports from the app, and keeps automatic Crashlytics uploads disabled on subsequent launches; previously sent crash data remains subject to Firebase's retention and deletion processes described above. For Android analytics, or for purchase-record requests on either platform, contact the same address and include any identifier you have, such as an App Store transaction identifier or Google Play order number. Because Detox has no account, we may be unable to locate records that are not associated with an identifier you can provide.

Children

Detox is intended for adults aged 18 and over and is not directed to children or minors.

Changes to this policy

If we change this policy, we will post the updated version on this page and update the date above.

Contact

EpowerX Labs Private Limited
Plot No. 77, JBR Tech Park, 6th Rd
Whitefield, EPIP Zone
Bangalore, Karnataka 560066
India

Privacy questions and support: help@detoxapp.app