Privacy policy

Effective September 1, 2026. Applies to the Gratlock iPhone app and this website, operated by QRACKED LLC.

The short version: your journal stays on your phone, we cannot read it, and we never see which apps you block. The app shares limited purchase and install data with the measurement and advertising providers described below.

Your journal

Everything you write in Gratlock is stored only on your device. There is no account, no cloud sync, and no server that receives your entries. We cannot read your journal, and neither can anyone else with access to our systems, because it never reaches our systems.

If you use the export feature, the app creates a text file on your device and hands it to the iOS share sheet. Where you send it from there is up to you.

Deleting the app deletes your journal. We have no copy and cannot recover it, so export first if you want to keep your entries.

Screen Time and blocked apps

App blocking runs on Apple's Screen Time (Family Controls) system. Your selection of blocked apps is stored on your device as opaque tokens that Apple designed so third parties, including us, cannot identify the apps behind them.

We never receive your app choices, your usage, or anything else from Screen Time. Screen Time data is never used for advertising and is never shared with data brokers or ad platforms. This is a binding condition of the Apple entitlement the app runs on, and it will not change.

Purchases (RevenueCat)

Subscriptions are processed by Apple. To manage your subscription state, the app uses RevenueCat, which receives a random app-specific identifier, your App Store receipt, and purchase events (trial started, subscribed, renewed, cancelled). RevenueCat does not receive your name, your journal, or your Screen Time data. See the RevenueCat privacy policy.

Private subscription offers

If you become eligible for a private subscription offer, the app checks a Gratlock service hosted by Vercel and sends a random install token created by the app. We use it only to assign at most one single-use Apple offer code to that installation and to return the same code if the request is retried. The service also receives standard server information such as IP address, which is converted to a short-lived one-way hash for abuse prevention. It does not receive your RevenueCat identifier, journal, or Screen Time data.

Code assignments are stored with Upstash only until the Apple code expires. Apple checks your subscription eligibility and displays the local price and renewal terms before you confirm. See the Vercel privacy policy and Upstash privacy policy.

Install attribution (AppsFlyer)

To learn which ad or link brought you to the app, we use AppsFlyer. If you allow tracking when iOS asks, AppsFlyer receives your device advertising identifier (IDFA), IP address, and app events such as install, trial start, and subscription. If you decline, the IDFA is not shared and attribution is limited to aggregate, non-identifying signals.

For Google Ads measurement, the app also includes Google's on-device conversion technology. It processes de-identified, temporary signals on the device to improve aggregate campaign measurement without receiving your journal or Screen Time data.

When we advertise Gratlock, AppsFlyer may send attribution and conversion information to the relevant advertising platform, currently Apple Ads and Meta, and potentially Google Ads and TikTok after those integrations are activated. This can include device and campaign identifiers, IP address, install, app open, trial start, subscription, purchase amount and currency, and related event parameters. For users who authorize tracking, we may enable an advertising platform's advanced data-sharing features to improve campaign measurement and optimization. We apply required regional data-use restrictions, and this data never includes your journal entries or Screen Time data.

You can change your choice anytime in iOS Settings under Privacy & Security, then Tracking. Your journal and your Screen Time data are never shared with AppsFlyer under any setting. See the AppsFlyer privacy policy.

Notifications

On iOS 26.5 and later, the block screen opens Gratlock directly. Earlier iOS versions use a local notification generated on your device. Nothing about notifications is sent to us.

This website

This site is hosted on Vercel, which processes standard server logs (IP address, browser type, pages requested) to serve the pages. We also use Fastlane traffic measurement to understand which social posts and campaigns bring visitors to the site and how visitors use its pages. The measurement script stores random visitor and session identifiers in your browser and sends Fastlane the page URL, referring page, campaign parameters, screen size, browser language, time on page, and scroll depth. It does not receive your Gratlock journal or Screen Time data.

Data retention and deletion

We hold no journal data at all. Private-offer assignments expire with their Apple codes, and the abuse-prevention hash expires after one day. Purchase records at RevenueCat, attribution records at AppsFlyer, and website traffic records at Fastlane are retained under those providers' policies. To request deletion of data held by our service providers, email support@journalparty.com from any address and include your rough install date; we will pass the request to the relevant providers and confirm when it is done.

Children

Gratlock is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes

If this policy changes, the new version will be posted here with a new effective date. Material changes will also be noted in the app's release notes.

Contact

QRACKED LLC
Email: support@journalparty.com