Privacy Policy — Merit
Last updated: August 4, 2026
1. Introduction / Data Controller
This privacy policy describes how the Merit app, published by PeakLabz ("we," "the publisher"), handles information about you. Merit is a focus timer designed with your privacy in mind: the app works without requiring an account.
2. No Account
Merit does not require you to create an account. We do not ask for your name, email address, or password to use the app. We do not build an identifiable user profile on our side.
3. Data Stored on Your Device
Your usage data is first stored locally on your device: your focus session history (date, start and end time, duration, mode, ambient sound, project), cumulative statistics, streaks, ranks and achievements, goals, personal quotes, your preferences (theme, language, sounds) and the Focus Shield data described in article 4. If you uninstall the app, this local data is deleted. A copy of that same data is synchronised to our Supabase host (European Union) so you can find it again on another device: synchronisation relies on an anonymous identifier created by the app, with no name, email address or password, and access is isolated per user. No directly identifying data is attached to it.
4. Focus Shield — App Blocking (Apple Screen Time)
The Focus Shield feature blocks the apps you choose using Apple's Screen Time framework (Screen Time / FamilyControls). Specifically: you pick the apps in the iOS system picker, and that picker returns only opaque identifiers to Merit, held by the system on your device — we never learn the names of the apps you block, and the app never transmits them anywhere. Merit also has no access to your usage statistics (time spent per app, number of opens, notifications received): Apple's API does not expose these to third-party apps. We store only what the mechanic requires: the number of selected apps, the Screen Time authorisation state, the blocking state, your balance of earned screen-time minutes, the end time of the current unlock window, and the totals of minutes earned and spent. If you turn the Focus Shield off yourself, the app keeps a record of it: the date and time of the action and your minute balance at that moment, in a log capped at the last 50 deactivations. This log holds no information about the apps involved, you are told it exists at the moment you turn blocking off, it is synchronised with the rest of your data under the terms of article 3, and you can delete it like the rest (article 7). During initial setup the app asks you to estimate how much time you lose each day: you enter that value yourself, it is kept with your other settings, it is used only to display a yearly projection, and it may be left blank. Finally, Screen Time authorisation is requested explicitly and can be withdrawn at any time in iOS settings; Merit remains fully usable without it — the timer, statistics and sounds work normally, only blocking is unavailable.
5. Subscriptions and Purchases (RevenueCat)
When you take out a Premium subscription, the purchase is processed by the App Store (Apple) or Google Play (Google). To manage your Premium access rights, we use the RevenueCat service, which processes technical data related to your subscription (for example an anonymous purchase identifier, subscription status and history, device type). This data is used solely to validate and restore your Premium access. We do not have access to your payment details (card number): these are handled exclusively by Apple and Google. Learn more: the privacy policies of RevenueCat, Apple, and Google.
6. Data Sharing
We do not sell your data and do not share it for advertising purposes. The only data processed is handled by the providers necessary for the app to function, within the limits described above: RevenueCat (subscriptions), Apple and Google (purchases and distribution), Sentry (crash and performance reports: device model, OS version, technical error trace — no personal data, no IP address and no user identifier is attached), and Supabase (EU-hosted storage of the backup used for multi-device sync, encrypted in transit — for Premium subscribers who have enabled that feature only).
7. Your Rights
In accordance with applicable regulations (in particular the GDPR in Europe), you have the right to access, correct, and delete your data. As most of your data is stored locally, you can delete it at any time by uninstalling the app. For any request regarding data processed by our providers, you can contact us at the address below.
8. Children
Merit is not intended for children under 13 and does not knowingly collect data about them.
9. Changes
We may update this privacy policy to reflect changes to the app or to regulations. In the event of a significant change, we will inform you by an appropriate means within the app. The date of the last update appears at the top of this page.
10. Contact
For any questions regarding this privacy policy or your data, you can contact us at: contact@flavors-joy.com.