Privacy Policy

1 Introduction

Welcome to Willow, developed by Tasty Cocoa Software LLC ("we," "our," or "us"). This Privacy Policy explains how we handle your information when you use our iOS application.

By using Willow, you agree to the practices described in this Privacy Policy. If you do not agree with these practices, please do not use the app.

2 Information We Collect

Willow stores only what it needs to run its features, and it stores that on your device. Here is what exists and why:

Information Stored Locally On Your Device

• Focus activity you create in Willow: your focus sessions, schedules, daily limits, calendar and location rules, digital detox commitments, streaks, and Focus Score. These are computed only from what you do inside Willow — never from Apple's usage data about other apps.
• Mindful Pass reasons: if you unlock a blocked app by writing a reason, that sentence is saved on your device so your insights can reflect it. It is never transmitted anywhere.
• App preferences: your theme selection, notification choices, and settings.

Information Processed by Third-Party Services

• Subscription data: when you subscribe to Willow Pro, our subscription partner RevenueCat processes device identifiers, Apple receipt files, and subscription status. See Section 6.

Information We Do Not Collect

• Names, email addresses, or contact information
• Which apps you block, or how you use other apps
• Advertising identifiers (IDFA)
• Analytics or usage tracking data
• Crash reports (we do not use crash reporting SDKs)

3 Screen Time & App Blocking

Willow blocks distracting apps using Apple's Screen Time technology (the Family Controls, Managed Settings, and Device Activity frameworks), with your explicit permission.

How Apple Keeps Your Choices Private

When you pick apps to block, Apple's system hands Willow opaque tokens instead of app names. This is a deliberate privacy feature of Apple's design: Willow can tell the system "shield these," but it cannot see, list, or report which apps they are. Your selection is private even from us.

Notifications

Willow uses local notifications only (session endings, limit updates, streak changes, an optional weekly report). They are scheduled on your device; there are no push notification servers.

4 Motion & Walking

Willow's walk-to-unlock feature lets you earn a pass to a blocked app by taking a walk. If you use it, Willow reads your step count from the device pedometer (with your Motion & Fitness permission) for the duration of the challenge.

• Step counts are read on-device and used only to measure the current walk
• No step, health, or fitness data is stored long-term or transmitted anywhere
• Walk-to-unlock is optional — you can always use the other pass methods instead

5 Location & Calendar

Location Rules

If you create a Location Rule (for example, "block social apps at the library"), Willow uses your device's geofencing to notice when you arrive at or leave the places you chose. "Always" location permission is required for the rule to work while the app is closed.

• Geofence checks are processed entirely on your device
• Willow does not record a location history and never transmits your location — it has nowhere to send it
• Location Rules are optional; the permission is only requested if you create one

Calendar Rules

If you create a Calendar Rule, Willow reads your calendar (with your permission) to find events that should trigger a block. Event details are read on-device and are not stored beyond what the rule needs, nor transmitted anywhere.

6 Third-Party Services

Willow uses exactly one third-party service:

Services We Do Not Use

Willow does not include:

• Analytics SDKs (no Firebase Analytics, Mixpanel, or similar)
• Crash reporting SDKs (no Crashlytics, Sentry, or similar)
• Advertising SDKs (no AdMob, Facebook Ads, or similar)
• Attribution or tracking SDKs

7 Data Storage and Security

Local Storage

Everything Willow knows lives on your device: your sessions, schedules, limits, rules, streaks, pass reasons, theme, and settings.

Data Security

Locally stored data is protected by iOS security features, including device encryption when you use a passcode, Face ID, or Touch ID.

Data Retention

Local data remains on your device until you delete the app. Deleting Willow removes all of it. RevenueCat retains subscription records according to its own privacy policy.

8 Data Sharing

We do not sell your personal information. We share information only in these limited circumstances:

• Service Providers: RevenueCat processes subscription data on our behalf as described in Section 6.
• Legal Requirements: We may disclose information if required by law, court order, or government request.

Because we do not collect or store your personal data on any server, we have essentially nothing to share in any circumstance.

9 Your Rights and Choices

All Users

• Screen Time Access: You can revoke Willow's Screen Time permission at any time in iOS Settings > Screen Time. Willow's blocks stop working, and Willow tells you honestly rather than pretending otherwise.
• Motion, Location, and Calendar: Each permission can be revoked in iOS Settings > Privacy & Security. The related features simply turn off.
• Delete Local Data: Uninstalling the app removes all locally stored data.
• Ending blocks always works: Willow never locks you out of removing a restriction you created, regardless of subscription status.

European Users (GDPR)

If you are located in the European Economic Area, you have the right to:

• Access the personal data we process about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Lodge a complaint with a supervisory authority

Because we do not operate servers that collect your data, most data rights requests should be directed to RevenueCat regarding subscription data they hold. Contact us if you need assistance.

California Users (CCPA/CPRA)

California residents have the right to:

• Know what personal information is collected
• Know whether personal information is sold or shared
• Opt out of the sale or sharing of personal information
• Request deletion of personal information
• Non-discrimination for exercising these rights

We do not sell or share your personal information as defined under California law. To exercise your rights, contact us at the email below.

10 Children's Privacy

Willow is a self-management tool intended for users aged 13 and older managing their own devices. It has no parent/child mode and no remote management. We do not knowingly collect personal information from children under 13 — or, by design, from anyone.

If you are a parent or guardian and believe your child under 13 has provided personal information through our app, please contact us at the email address below.

11 International Users

Willow is available worldwide. If you use the app from outside the United States, please be aware that:

• RevenueCat may process subscription data in the United States
• Apple processes App Store purchases and Screen Time permissions according to Apple's Privacy Policy

By using Willow, you consent to the transfer of subscription information to these service providers in accordance with their respective privacy policies.

12 Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you through the app or App Store update notes for material changes

We encourage you to review this Privacy Policy periodically. Your continued use of Willow after changes are posted constitutes your acceptance of the updated policy.

13 Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

We will respond to your inquiry within a reasonable timeframe. For requests related to subscription data held by RevenueCat, we may direct you to contact them directly.