Privacy Policy
Last updated 22 October 2026
Acris is a screen diet app for iPhone, made by Odune, a company registered with the Dutch Chamber of Commerce. This policy covers the app and the website at acrisapp.com, and explains what we collect, why, who handles it, how long we keep it, and what you can ask us to do about it.
1. Permissions the app asks for
- Screen Time (Family Controls): to apply the limits you set and to measure your time in the apps you chose. This is the only permission Acris needs to work.
- Notifications: optional, and used for your weekly summary, a reminder before a free trial ends, and on iOS versions before 26.5 to open Acris when you tap Request access on a limit screen.
- Tracking: optional, and only for measuring our ads. Declining changes nothing about how Acris works. See section 5.
2. Your Screen Time data
Your usage, your balance, your history and your per-app breakdown are worked out on your device, inside the separate sandbox Apple provides for reading Screen Time.
- Calculated and shown to you in that sandbox, and nowhere else
- Never sent anywhere: not to the rest of the app, not to your widgets, not to us
- Held for about the 30 days of history Apple keeps, and removed when you delete Acris
One thing about your usage is known outside the sandbox: whether today's allowance has been spent, as a plain yes or no, with no figures attached. The limit screen and the widget cannot work without it. It is kept on your device. If you have chosen to share usage data, the moment it changed is sent as an event, still without any amounts.
When you pick apps, categories or websites, Apple gives Acris a reference to your selection rather than readable names. The names and icons you see on screen are drawn by Apple from that reference.
3. What stays on your phone
These never reach us at all. They are held on your iPhone and deleted with the app:
- Your Diet plan, your allowances and your schedules
- The apps, categories and websites you chose
- Your settings
- Your answers during setup: your first name, what you would do with more time, what you have tried before, your own estimate of your screen time, your age band, and your plan for when time runs out
4. Usage data
Acris shares how the app is used so we can see what works and what breaks. It is on by default. You can turn it off at any time in Settings › Privacy, and everything you pay for works the same either way.
While it is on, Acris sends:
- which screens and features you use, for example that an allowance was changed or a continuation chosen
- events about a free trial or subscription, such as a trial starting, a purchase completing or being cancelled, or a payment failing, with no prices, product identifiers or transaction identifiers
- when something failed, such as a purchase or a restore
- the time of each event and the app version
- your Privacy ID, a random identifier created when you install Acris
Your Privacy ID is generated by the app. It is not Apple's advertising identifier, is not derived from any device identifier, and is not connected to your name, email or Apple Account. It ties your events to each other so we can see how the app is used. Meta's software does use the advertising identifier, but only if you allow tracking, which is section 5.
This includes what Acris recorded from first launch, including setup. Our analytics provider discards your IP address and we do not derive your location from it. Acris never records your screen. Nothing is shared at all for anyone who tells Acris they are under 18.
Turning it off stops it immediately and discards anything recorded but not yet sent. You can also ask us to delete what was already sent, under section 11.
5. Measuring our ads
Two things measure how well our ads work. One applies to everyone and carries no identifier. The other involves tracking and runs only if you allow it.
5.1 Apple's measurement. Apple counts which ads led to an install, for everyone, whether or not you allow tracking. Acris also tells Apple, on your device, whether a free trial started or a first payment was made, so that Apple can count those the same way. What reaches us and the ad network stays aggregated and delayed, and carries no identifier for you or your device. It is not something Acris can switch off.
5.2 Meta. Acris uses Meta's software to measure how well its ads on Facebook and Instagram work. This is the only part of Acris that involves tracking.
Apple shows you a tracking prompt during setup, after the age question. It is never shown to anyone who says they are under 18. If you do not tap Allow, Acris sends Meta nothing at all.
If you do tap Allow, Meta receives:
- your device's advertising identifier, which Apple calls the IDFA
- that the app was installed, and that it was opened
- which ad campaign brought you here, if you arrived through a Meta ad link
- purchases and subscription starts, including which plan, the price and the currency
- your device model, iOS version, app version, language and time zone
- your IP address
- crash reports from Meta's own software
Meta never receives your Screen Time figures, the apps or websites you chose, your Diet, or your answers during setup.
Meta's software in the app is not the only route. RevenueCat, which section 6 describes, can also report a trial start or a first payment to Meta directly, with the same identifiers, and likewise only after you tap Allow.
This is used to work out which of our ads led to installs and subscriptions, and by Meta to show you more relevant ads.
Turning it off. Go to iOS Settings › Privacy & Security › Tracking and switch Acris off. Nothing further is sent from that point.
Meta's role. Meta Platforms Ireland Ltd. is a joint controller with us for collecting this data and sending it, rather than acting on our instructions. For whatever it does with the data afterwards Meta is an independent controller, governed by Meta's privacy policy. Meta may transfer the data to the United States under the EU-US Data Privacy Framework.
6. Subscriptions
Subscriptions are sold and processed by Apple. Apple handles your payment details, and we never receive your card, bank details, billing address or Apple Account identity. Apple tells Acris on your device which plan you are on and its status, which is used to unlock the app, show your plan in Settings, and remind you before a trial ends.
We use RevenueCat to check and keep your purchases for us. When you open Acris, see the plans, buy, or restore a purchase, Acris sends RevenueCat:
- a random installation identifier, which Acris shows you as your subscription support ID
- the identifier Apple gives each app maker for your device, which Apple calls the identifier for vendor
- your purchase and subscription history from Apple: the plan, the dates, renewals, refunds, the price and your App Store country
- your device model, iOS version, app version, language and IP address
Apple also tells RevenueCat directly when a subscription renews, lapses or is refunded.
RevenueCat gives us subscription and revenue reports, including tests of which plans and prices we offer.
If you allow tracking, RevenueCat also receives your advertising identifier and the installation identifier from Meta's software, so that a subscription can be matched to the ad that led to it. Without Allow it receives neither, and it reports nothing to Meta. See section 5.2.
7. The website
7.1 Measuring visits. We count how the site is used so we can tell whether it works: pages opened, how far they were scrolled, whether the signup form was submitted, and which campaign link brought you. Your approximate location at city level, browser and device type are derived from the connection.
- Each visit is counted anonymously and on its own
- Nothing joins one visit to another, to you, or to anything you do in the app
- If your browser sends a “Do Not Track” signal, nothing is recorded at all
7.2 The signup list. If you enter your address in the signup form we store it, along with the campaign labels in the link you arrived through. We use it to email you about Acris, starting with a confirmation and then a message when the app is available. You can leave at any time through the unsubscribe link in any message.
8. Who else handles your data
Each of these acts as our processor, under a data processing agreement, and handles the data only on our instructions.
- PostHog: the app usage data, and website visit counts. Stored in the European Union. App data and website data are not joined, and website visits carry no identifier that could tie them to an installation or to you.
- Resend: stores the signup list and delivers our emails, on servers in the United States.
- RevenueCat: checks and keeps your purchases, and gives us subscription and revenue reports. What it receives, and the one thing it only receives after you allow tracking, are set out in section 6. Servers in the United States.
- Vercel: hosts the website.
Where one of these, or its parent company, sits outside the European Economic Area, the transfer relies on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Two others are not our processors, and decide for themselves what they do with what they receive:
- Meta Platforms Ireland Ltd., and Meta Platforms, Inc. in the United States: measuring our ads, and only after you allow tracking. Joint controller with us for the collection, and an independent controller for what it does afterwards, as set out in section 5.
- Apple: sells and processes subscriptions, under its own privacy policy.
We do not sell personal data and we do not share it with data brokers. We share data with Meta for measuring our ads, and only if you allow tracking, which is covered in section 5.
9. Why we are allowed to hold it
- Consent: the signup list, and measuring our ads, where tapping Allow on Apple's tracking prompt is the consent. You can withdraw either at any time, which does not affect what was done beforehand.
- Contract: the subscription status needed to unlock the app you are paying for, and the purchase records RevenueCat processes to check and keep your purchases.
- Legitimate interest: understanding how the app is used, Apple's ad measurement, subscription and revenue reports, testing which plans and prices we offer, counting website visits so we can tell whether the site works, and answering emails you send us. You can object to any of these at any time, and for app usage the switch in Settings does it immediately.
10. How long we keep it
- On your phone: until you delete Acris, which removes your plan, your settings and everything recorded on the device.
- Usage data: up to seven years, which is the longest our analytics provider holds events. We delete yours sooner whenever you ask.
- The signup list: until you unsubscribe, or until the list has served the purpose you joined it for.
- Emails you send us: for as long as answering you needs, and deleted within two years.
- Purchase records at RevenueCat: up to three years after your subscription ends, unless you ask us to delete them sooner.
- Data sent to Meta: kept by Meta under its own policy, not ours. Turning tracking off stops anything further being sent.
11. Your rights
You can ask us for a copy of what we hold about you, and ask us to correct it, delete it, restrict or object to how we use it, or send it to someone else. You can withdraw any consent at any time.
To use any of these, email privacy@acrisapp.com.
For anything shared from the app, include your Privacy ID and your subscription support ID. Both are in Acris under Settings › Privacy, or under Privacy on the screen Acris shows if your subscription has ended. Acris has no accounts, so without them we cannot tell which records are yours. For the signup list, the email address you used is enough.
If you think we have handled your data badly, you can complain to your data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens.
If you live in the United States, we do not sell your personal information. If you allow tracking, Meta may use what it receives for targeted advertising, which some state laws treat as sharing. You can stop it at any time in iOS Settings › Privacy & Security › Tracking. You can also ask us what we hold about you, and ask us to correct or delete it, at the same address. We will not treat you differently for asking.
12. Children
Acris is for adults managing their own device use. It is not directed at children and is not a parental-control or supervision product. We do not knowingly collect personal data from children under 13. Acris shares nothing at all for anyone who tells it they are under 18, and never shows them the tracking prompt.
13. Changes
If this policy changes materially we will publish the new version here with a new date, and where the change affects what we collect we will tell you in the app.
14. Contact
Acris is operated by Odune, registered with the Dutch Chamber of Commerce.