StolenEyes — Privacy Policy
Last updated 22 September 2026
StolenEyes does not collect your data. There is no account to create, no server to send anything to, no analytics, and no third-party SDKs. Everything StolenEyes knows about you stays on your iPhone.
The short version. StolenEyes has no backend. Nothing you do in the app is transmitted anywhere. Your Screen Time data is never seen by the app itself — it is read inside a sandboxed Apple extension that can draw charts but cannot send anything out. Deleting StolenEyes deletes everything.
What StolenEyes stores, and where
All of this lives in the app's own storage on your device, shared between the app and its extensions through an Apple App Group. None of it is backed up to a server we control, because there isn't one.
- Your block history — when a block started, how long it ran, how many apps and sites it covered, and any website addresses you typed.
- Your settings — your distraction threshold, which apps and sites you have labelled Productive, Distracting or Intentional rest, and your notification preferences.
- Your warning history — which warnings fired and whether you acknowledged them.
Screen Time data
StolenEyes uses Apple's Screen Time APIs (Family Controls, Device Activity and Managed Settings) with your explicit permission. This part is worth being precise about, because it is the most sensitive data involved:
- Your per-app and per-website usage is only ever read inside Apple's Device Activity Report extension. Apple designed this extension so that it can display your usage but cannot pass it back to the app or send it over the network. The StolenEyes app itself never receives your raw usage numbers.
- The apps and websites you choose to block or classify are handled as opaque tokens issued by iOS. These tokens are meaningless outside your device and cannot be turned back into a list of apps by anyone else.
- Blocks are enforced by iOS on its behalf. StolenEyes asks the system to shield an app; the system does the rest.
What StolenEyes does not do
- No accounts, sign-in, or email address.
- No analytics, crash reporting, telemetry, or usage tracking of any kind.
- No advertising, and no advertising identifiers.
- No third-party SDKs.
- No network requests. StolenEyes does not talk to any server, including ours.
- No selling, sharing or disclosing of your information, because none of it reaches us to begin with.
Notifications
If you allow notifications, StolenEyes sends them locally from your own device — a warning when you cross your threshold, and a note when a block ends. They are composed on your iPhone and never routed through a push server.
Deleting your data
Settings ▸ Your data ▸ Delete my data erases everything StolenEyes has stored on your iPhone. One deliberate exception: if a block is currently running, its record is kept so that deleting your data cannot be used to cancel a block early. The block still ends at its own time.
Deleting the StolenEyes app removes all of its data, and also lifts any block that is running, because the restrictions are applied by iOS on its behalf and go away with the app.
Children
StolenEyes requests individual Screen Time authorization, which Apple only grants to an Apple Account managing its own Screen Time. Accounts under 18 in a Family Sharing group cannot grant it, and StolenEyes will tell you so rather than leaving you at a wall. StolenEyes is not directed at children and collects no information from anyone.
Changes
If this policy ever changes, the updated version will be posted at this address with a new date at the top.
Contact
Questions, or something here that does not match what you observe? Open an issue.