Privacy Policy

This privacy policy explains how the UUTA app for iPhone and iPad, the website at uuta.io, and support email handle information. They are provided by Srutva Labs LLC, a limited liability company registered in the State of Texas, United States ("Srutva," "we," "us"). Srutva is the controller of the support email and website information described below. The policy is written with the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by CPRA (CCPA/CPRA), and similar laws elsewhere in mind.

How your information is handled

Your app records

UUTA does not send your moments, lines, focus name or Shield choices to Srutva. The app includes no advertising, analytics or tracking code, and its App Store privacy label reads "Data Not Collected." Support email, website requests and reports shared through Apple are separate from your records, as described below.

Apple App Tracking Transparency (ATT)

UUTA does not track you as defined by Apple's App Tracking Transparency framework. We do not link your activity in UUTA to your activity in apps or websites owned by other companies, and we do not share data with data brokers. Because we do not track, no ATT permission prompt is shown.

Data stored on your device

UUTA stores the following on your iPhone or iPad, in storage used only by the app, its widgets and its extensions:

• Moments and lines. A moment holds its time and time zone, whether it passed, you went with it, or no outcome was chosen, and any optional context you add: where, with whom and how it felt. It can hold a line you write. The app also keeps where a moment was recorded from (the app, a widget, the control, a shortcut or the pause screen) and when it was created, changed or deleted.
• Settings. The name you give your focus, the lock, the evening check-in, the iCloud choice, first-launch progress, the age confirmation and its date, Shield's switches and hours.
• Shield choices. Apple gives UUTA opaque tokens for the apps, groups and websites you choose. UUTA stores those tokens and their count. It does not receive their names or your browsing history.
• Daily copies. On each day you open UUTA, it makes a copy on the device and keeps the last seven. Deleted moments stay in Recently deleted for 30 days, unless removed sooner. Removal runs when the app and its sync are able to complete it.
• Free days and purchase. The device's Keychain keeps the date the free days began and whether a purchase was seen. The app also reads Apple's verified records of the free-days item, of the purchase, and of your first download of UUTA (to recognise an earlier 1.x purchase).

Settings and Shield choices are not synced through UUTA's iCloud database. Any of this may be included in an iPhone or iPad system backup, which UUTA cannot see or remove. We never see this data and have no way to retrieve it.

iCloud (optional)

First launch offers "Keep in my iCloud" before anything is sent; you can change it later under Settings › My data. With it on, moments and lines are kept in the private iCloud database of your own Apple Account, and appear on your other devices with the same account. This means:

• The lines you write are stored as an encrypted CloudKit field. Other details have iCloud's standard protection, which also depends on your Apple Account settings. See Apple's iCloud security overview.
• Srutva cannot view that database, your Apple Account or a list of its users. Apple provides the storage under Apple's privacy policy, and may store it in data centers in other countries.
• You can remove UUTA's iCloud data with Erase everything in the app, or in your device's Settings › [your name] › iCloud › Storage › UUTA.

A change to the switch applies when UUTA next opens. Once the change takes effect, turning it off stops new moments from being sent; what is already in your iCloud stays there until you remove it. Turning it off does not turn off iPhone or iPad system backups.

Screen Time and Shield (optional)

Shield uses Screen Time access that you grant for your own device. Declining it does not stop the rest of the app from working. The apps and websites are chosen in Apple's own list, and UUTA receives only opaque tokens. The pause screen, the notice after 15 minutes in chosen apps and Apple's filter for adult websites all run on the device; UUTA does not read which websites you visit or what you do in an app. A choice on the pause screen can record a moment with its time and outcome, without naming the app or website. Shield selections, schedules and settings stay on this device and are not synced by UUTA. A moment recorded from the pause screen joins your other moments and can sync to your private iCloud if you enabled it. Neither those moments nor Shield selections are sent to Srutva.

Outside the app

Widgets can show which days had a moment and a count of days. A running pause can show its time left and its two buttons as a Live Activity. Notices can show "How are things?". None of these, nor Siri, Shortcuts or the pause screen over apps, shows the name you gave your focus or the lines you wrote. They can still reveal limited activity to someone who can see your screen.

Notifications

UUTA can show an evening check-in and a notice after 15 minutes in chosen apps, each only if you turn it on. Both are scheduled on your device. Srutva sends no push notifications. Apple may use its push service to sync your private iCloud database; that is separate from any notice.

App lock

UUTA locks with Face ID, Touch ID or the device passcode through Apple's standard authentication, and covers its screen in the app switcher. UUTA receives only whether the check succeeded, never biometric data or the passcode.

Copies you choose to share

"Save a copy" makes a .uutabackup file for "Bring back from a file". It includes current records and selected preferences, not every device setting or purchase record. The shared copy omits the content of deleted records. "My report" makes readable text or a PDF; it is not a file for bringing records back. Earlier UUTA records has a separate export.

These files can include your focus name and lines. UUTA does not encrypt the exported file or protect it with your app lock. The share sheet lets you choose where it goes; the destination then handles the file under its own terms. Copies you saved or sent elsewhere are outside UUTA's control.

Erasing, and deleting the app

When it completes, Erase everything (Settings › My data) removes current moments and lines, local app copies, the Earlier UUTA records archive and resettable settings, switches Shield off, and starts UUTA again at first launch. It makes no new copy of what is erased. With iCloud on, what is in your iCloud is removed when iCloud next syncs; if iCloud is off but was on before, it is removed the next time iCloud is turned on in UUTA. The Keychain records of the free days and the purchase remain, so erasing does not start the free days again. My data shows when cloud removal is still waiting. Screen Time authorization is held by the operating system separately from Shield being switched off. If an error interrupts the operation, some earlier steps may already have completed; it is not a promise that every change was undone.

The original version 1.x local store stays until the app is deleted. Importing earlier records, or erasing the version 2.0 records, does not remove the original version 1.x cloud records. An erase also cannot remove copies you saved elsewhere.

Deleting the app removes its data on the device. Keychain records, data already in your iCloud, earlier system backups and files you saved elsewhere can remain; use Apple's storage controls to manage them. Srutva has no copy of your entries to delete on your behalf.

Local error messages

The app can write operational events and errors to the operating system's logs. This is separate from a developer analytics service and does not send your entries to a UUTA server. Reports you choose to share through Apple's Analytics & Improvements settings are described below.

Purchases

The 21 free days and the one purchase are handled by Apple through the App Store. We never see your payment details, billing address or Apple Account. Apple gives developers aggregate download and sales figures, and crash reports only if you share them with developers in your device's settings. To ask for a refund, contact Apple at reportaproblem.apple.com.

Help lines

"Someone to talk to" lists help lines run by other organisations. Calling or texting one connects you to that organisation through your phone plan; UUTA does not learn whether you did.

Support email

If you email [email protected], we receive your address, message, attachments and ordinary email metadata. We use them only to answer you. Please do not send anything you wrote in the app; support never needs it. We delete support conversations within 12 months of the last message, or sooner on request, unless the law requires a specific record to be kept. We do not add correspondents to any mailing list.

This website

uuta.io is a static site hosted on Cloudflare Pages. It loads no third-party scripts or fonts, has no analytics, advertising or sign-up form, and sets no cookies of its own. Serving and protecting the pages involves technical request information such as IP address, browser, requested address and time; Cloudflare processes it to deliver the site and address abuse, and depending on its security features may set a security cookie. We do not use it to track visitors or link visits to anything in the app. The lawful basis is our legitimate interest (GDPR Art. 6(1)(f)) in operating a secure website. See cloudflare.com/privacypolicy.

Adults only

UUTA is for people aged 18 and over and is not directed to children. Where the law requires it, Apple's Declared Age Range service tells the app whether you are 18 or over; the app keeps the confirmation that you are eligible and its date on your device, not a date of birth or the returned age range, and does not send it to Srutva. We do not knowingly collect personal information from anyone under 18; if support correspondence turns out to come from someone under 18, we delete it, subject to any legal duty to keep a record.

Automated decision-making

We make no automated decisions about you and build no profiles. The sentence on Patterns is made on your device from your own moments and is never sent to us. We do not use any information we hold to draw conclusions about your health.

Data retention

We hold no copy of the records kept in your app or private iCloud. The sections above explain Recently deleted, daily copies, erasing and exported files. Support email is kept as described above; website request information is kept according to Cloudflare's settings.

Your rights

Your choices in the app

Editing, Recently deleted, Save a copy, My report and Erase everything are yours to use at any time, with or without the purchase. Notices, iCloud and Screen Time access each turn off in the app or in the device's Settings.

EEA, United Kingdom, and Switzerland (GDPR / UK GDPR / FADP)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the rights to:

• Access any personal data we hold about you (Art. 15 GDPR).
• Request correction of inaccurate data (Art. 16).
• Request deletion of your data (Art. 17).
• Restrict or object to processing (Art. 18, 21).
• Receive your data in a portable format (Art. 20).
• Withdraw consent, where consent was the lawful basis.
• Lodge a complaint with a data protection authority — for the UK, the Information Commissioner's Office at ico.org.uk; for the EU, your national supervisory authority (a directory is at edpb.europa.eu); for Switzerland, the FDPIC at edoeb.admin.ch.

For information handled through support or this website, contact us at [email protected]. For records kept in the app or your private iCloud, use the choices in the app; we have no copy. We respond within one month of a request.

California (CCPA / CPRA)

If you are a California resident, you have the rights to know, delete, correct, and opt out of the sale or sharing of your personal information. We do not sell personal information or share it for cross-context behavioral advertising. We have not done so in the previous 12 months and have no plans to. Providers process information for the support and website purposes described above. Submit any request to [email protected].

CCPA categories of personal information

The app does not send your records to us. Outside the app, the information handled for support and this website includes:

• Identifiers. Your name or email address when included in a support message, and the IP address processed by Cloudflare when you visit this website.
• Internet or network activity. Technical request details used to serve and protect this website, such as the requested address, browser and time.
• Information you send to support. Your message, attachments and email metadata. These can contain other categories of information, including sensitive information, depending on what you send. We do not ask for private entries or data exports.

The support-email and website sections explain the purposes and retention of this information. Apple handles payments; we do not receive your payment details or Apple Account.

Other jurisdictions

If you reside in Brazil (LGPD), Canada (PIPEDA), Australia (Privacy Act 1988), South Korea (PIPA), India (DPDP Act 2023), or another jurisdiction with similar laws, you have similar rights. Contact us to exercise them.

EU representative

No EU or UK representative is currently designated, as we do not process personal data of EU or UK residents in a manner that triggers Article 27 GDPR. EU and UK residents may contact us directly at [email protected].

International transfers

Srutva Labs LLC is based in the United States. Cloudflare and our email provider operate internationally, and Apple operates iCloud globally. Where information we or our providers handle is transferred between jurisdictions, the transfer relies on adequacy decisions, standard contractual clauses or other lawful safeguards.

Operations

Security

We have no central database of your app entries. Data on your device is protected by the operating system's sandboxing and file protection, and by the app lock if you keep it on. iCloud data is protected by Apple. No method of storage or transmission is perfectly secure; protect your device, your Apple Account and any files you share.

Breach notification

If a security incident affects any data we control, we assess it and notify the relevant supervisory authority and affected individuals as applicable law requires. Under GDPR, a reportable incident is notified to the authority without undue delay and, where feasible, within 72 hours of awareness. Where there is a high risk to individuals, they are notified without undue delay.

Changes to this policy

If this policy changes, the new version will be published at this address with an updated date. Material changes receive the notice or consent applicable law requires; an edited policy is not itself permission for a new use of your data.

Legal entity and contact

Srutva Labs LLC
State of Texas, United States
Privacy questions, data requests and complaints: [email protected]

We may ask for proportionate verification of a request (for example, a reply from the email address you used), but never for your app entries or a government ID as a routine step.