The State Club (“we”, “us”) provides an iOS app and related backend that help you manage focus with on-device Screen Time shields and an optional NFC fob. Contact: legal@thestate.club.
2. What this policy covers
This policy describes personal data we process when you use The State Club app and API. It is written for a general consumer / App Store audience and is not a substitute for jurisdiction-specific legal advice.
3. Data we process
3.1 Account
Apple Sign in identifiers (for example Apple subject / team-scoped user id).
Email and/or name only if Apple provides them (often on first authorization); private relay emails may be used.
Session tokens we issue (access/refresh). Refresh tokens are stored hashed; Apple refresh material is encrypted at rest.
3.2 Device and push
Device ids you register, platform, optional app/OS/model version strings.
Optional Firebase Cloud Messaging (FCM) registration tokens so we can send pushes you enable. Muting notifications in-app clears the stored token for that device.
3.3 Focus product data (privacy-critical)
Apple’s Screen Time model means we cannot—and by design do not—learn which real-world apps or websites you block:
Family Activity / Application selections are stored as opaque blobs. We do not decode them to app names, bundle IDs, or domain strings.
Shield interaction logs, if collected, use hashed opaque tokens, not readable app identities.
Adherence and progress stats are built from lock sessions (timing, completion, counts)—not “minutes on Instagram”-style per-app usage.
3.4 Fob and unlock events
Fob claim/verify metadata and tap events needed to operate hardware unlock and prevent replay/abuse.
Lock session start/end reasons (for example completed, early unlock with fob, emergency unlock).
3.5 Technical logs
We may process IP address, request timestamps, and diagnostic logs to operate, secure, and debug the Service. Where we use observability providers, we configure them for this purpose.
4. Why we process data (purposes)
Provide accounts, sync schedules/modes, verify fob unlocks, and show adherence.
Send optional push notifications you enable.
Secure the Service (fraud, abuse, session integrity).
Comply with law and respond to valid requests.
Improve reliability (aggregated or non-identifying diagnostics where possible).
5. Legal bases (EEA/UK where applicable)
Depending on the processing, we rely on performance of a contract (providing the Service), legitimate interests (security, product integrity, limited analytics), consent (where required, for example certain notifications or optional data), and legal obligation.
6. Sharing
We use processors such as hosting, database, push (Apple / Firebase), and observability vendors to run the Service. They process data on our instructions. We do not sell your personal data. We may disclose data if required by law or to protect rights and safety.
7. Retention
We keep account and product data while your account is active. After deletion requests, we delete or anonymize personal data we control within a reasonable period, unless law requires longer retention (for example security logs or legal claims).
8. Security
We use industry-reasonable measures (encryption in transit, access controls, hashed refresh tokens, encrypted Apple credentials at rest). No method is 100% secure.
9. Your choices and rights
Revoke Screen Time permission or delete the app on your device at any time (shields will stop working as Apple defines).
Mute pushes in-app or in iOS Settings.
Request account deletion in Settings.
If you are in the EEA/UK or another region with privacy rights, you may have rights to access, correct, delete, restrict, or port data, and to object or withdraw consent. Contact legal@thestate.club. You may also lodge a complaint with a supervisory authority.
10. Children
The Service is not directed to children under 13 (or the minimum age required in your country). Do not use The State Club if you are under that age.
11. International transfers
We may process data in the EU and other countries where our providers operate. Where required, we use appropriate safeguards for cross-border transfers.
12. Changes
We may update this Privacy Policy and will revise the “Last updated” date. Material changes may also be highlighted in-app when appropriate.
Governing organization location for these consumer terms/privacy materials: Netherlands.
This page is a consumer product template describing The State Club’s intended privacy design (including Screen Time opacity). It is not formal legal advice.