AJR Privacy Policy

Effective date: 20 August 2026

AJR is a digital wellbeing application developed by At Shoulder Height (“we”, “us”, “our”). AJR is designed to help users pause, reflect and clarify their intention before opening selected distracting apps.

This Privacy Policy explains what information AJR accesses, how it is used, where it is stored, and what happens to it.

1. Information AJR accesses

AJR uses Android's Usage Access permission to detect when your selected distracting app is currently open.

AJR accesses only the name/package identity of the app currently open for this purpose. This allows AJR to detect the selected distracting app and display its intervention.

AJR does not use Usage Access to read the contents of other apps.

In particular, AJR does not access:

• messages or conversations;

• passwords or keystrokes;

• photos or videos;

• audio or microphone input;

• contacts;

• files or documents;

• browsing content;

• screen contents;

• location information.

2. How AJR uses this information

AJR uses app-usage information solely to provide its core intervention functionality.

When AJR detects that the selected distracting app has been opened, it can display AJR's intervention overlay.

The information used for this detection is processed only on your device.

It is never transmitted off your device — not to us, not to any server, and not to any third party.

All monitoring is opt-in: AJR only monitors apps that you explicitly select, and you can disable monitoring at any time.

3. Information stored on your device

AJR stores certain information locally in its private application storage, including:

• the package name and display name of your selected app;

• the selected app's launcher icon;

• intervention events, including timestamps, outcomes, and the associated app package name;

• AJR settings and preferences, such as intervention status, language, theme, and verse-display preferences;

• notification and boot-related settings required for AJR to operate.

This information remains on your device. AJR does not have access to it remotely.

AJR does not maintain a cloud account or server database containing this information.

4. Permissions

AJR may request the following Android permissions or system capabilities to provide its functionality:

Usage Access — used to detect when your selected distracting app is open.

Display over other apps — used to display AJR's intervention over the selected app.

Notifications — used for AJR's monitoring notification and related notifications. You can manage notification permissions and notification-channel settings through Android.

Foreground service — used to maintain AJR's monitoring while the intervention is enabled.

Receive boot completed — used to restore monitoring after a device restart when monitoring was previously enabled.

Kill background processes — used only when you explicitly choose AJR's “Go back” action on an intervention overlay. AJR does not silently terminate other applications in the background.

AJR does not use these permissions to collect or transmit personal information.

5. Data sharing

AJR does not sell, share, or disclose your information to third parties.

AJR contains no:

• advertising;

• analytics;

• tracking;

• crash-reporting service;

• user accounts;

• cloud synchronisation;

• third-party data collection SDKs.

AJR has no production network connection and does not transmit the information described in this policy off your device.

6. Data retention and deletion

Information stored by AJR remains on your device until you remove it.

You can delete AJR's locally stored information by:

• clearing AJR's app data through Android Settings; or

• uninstalling AJR.

Because AJR does not maintain copies of this information on its servers, there is no remote account or server data that needs to be deleted.

7. Security

AJR stores its local data within Android's private application storage and relies on Android's application sandbox to restrict access by other applications.

AJR does not transmit user data over the internet, so there is no transmission of AJR user data to encrypt in transit.

Local AJR data is not separately encrypted by AJR. It is protected by Android's application-level storage isolation.

8. Children's privacy

AJR does not knowingly collect personal information from children or from any other users.

AJR does not transmit user information off the device and does not maintain user accounts.

9. Changes to this Privacy Policy

We may update this Privacy Policy when AJR's functionality or applicable requirements change.

When changes are made, the updated version will be published at this location with a revised effective date.

10. Contact

If you have questions about this Privacy Policy or AJR's privacy practices, contact:

At Shoulder Height
Email: atshoulderheight@gmail.com

Effective date: 20 August 2026