Privacy Policy

This Privacy Notice for Scarabyte (a sole proprietorship of Ibrahim Mostafa) — referred to as "we," "us," or "our" — describes how and why we might access, collect, store, use, and share ("process") your personal information when you use our services ("Services"), including when you:

• Download and use our mobile application ScreenReps, or any other application of ours that links to this Privacy Notice
• Use ScreenReps as a health, fitness, and productivity app — to block time-consuming apps, and earn back screen time by completing physical exercise (using on-device camera analysis to count reps, or logging activity via Apple Health)
• Engage with us in other related ways, including any marketing or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@scarabyte.app.

Summary of Key Points

What personal information do we process? When you use ScreenReps, we may process a small amount of information that stays on your device — such as a first name (or chosen display name) you provide to personalize the app, your exercise activity, your selected apps to block, and a small amount of subscription data managed by Apple and RevenueCat for billing purposes.

Do we process any sensitive personal information? No. We do not process information that would be classified as sensitive personal information in most jurisdictions (such as racial origin, sexual orientation, or religious beliefs).

Do we collect any information from third parties? No. We do not collect information about you from outside sources or data brokers.

How do we process your information? We process your information to provide ScreenReps' core features (blocking apps, counting exercise reps, tracking earned screen time), to manage subscriptions through Apple and RevenueCat, and to comply with law. We process your information only when we have a valid legal reason to do so.

In what situations and with which parties do we share personal information? ScreenReps does not have its own servers. The only third parties involved are Apple (for App Store distribution and in-app purchases) and RevenueCat (for subscription management). We do not share personal information with any other parties.

How do we keep your information safe? Most of your data never leaves your device, which is itself secured by iOS's sandboxing and encryption. For data that does flow through Apple and RevenueCat (subscription state), those companies have their own enterprise-grade security practices.

What are your rights? Depending on where you are located geographically, applicable privacy law may give you certain rights regarding your personal information.

How do you exercise your rights? The easiest way to exercise your rights is by emailing us at hello@scarabyte.app. You can also delete most of your data directly within the ScreenReps app, or by uninstalling the app.

Table of Contents

1. What Information Do We Collect?

Personal information you disclose to us

The personal information we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. Personal information you may provide includes:

• First name or display name — used to personalize the app experience (e.g., "Good morning, Ibrahim"). You can enter any name you choose, including a nickname or pseudonym. This is stored locally on your device only.

Sensitive Information. We do not process sensitive information.

Payment Data. If you choose to subscribe, payment information is collected and processed entirely by Apple Inc. through the App Store and managed via RevenueCat. We never see, access, or store your payment card information. Subscription status (whether you have an active subscription, the tier, and renewal dates) is provided to ScreenReps in real-time by these services to gate premium features. You can review their privacy notices here:

• Apple: https://www.apple.com/legal/privacy/
• RevenueCat: https://www.revenuecat.com/privacy/

Application Data. If you use ScreenReps, we may also process the following information based on permissions you grant in iOS:

• Geolocation Information. If you choose to use the gym check-in feature, we request access to your location only at the moment you tap "check in." Your coordinates are compared on-device to your user-pinned gym location, then immediately discarded. No coordinate history is stored. You can change permissions any time in iOS Settings.
• Camera Access. For pushup and squat exercise tracking, we request camera access. Camera frames are processed in real-time on your device using Apple's Vision framework to detect body keypoints for rep counting. No images, video, or visual data are saved, recorded, or transmitted. The camera is only active when you start an exercise session.
• Health Data. For walking-based exercise tracking, we request read-only access to step count via Apple HealthKit. Step counts are read on-device and used to calculate earned screen time. No HealthKit data is transmitted off your device.
• Screen Time / Family Controls. We use Apple's Family Controls and Screen Time APIs to apply app shields and track usage of apps you have selected to block. All Screen Time data remains on your device and is processed by iOS — we never receive or transmit your app usage history.
• Push Notifications. We may send local push notifications for exercise reminders, time bank status, and similar operational messages. You can opt out at any time in iOS Settings.

This information is primarily needed to maintain the security and operation of the application and to provide the features you've enabled.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

2. How Do We Process Your Information?

We process your personal information for the following reasons:

• To deliver and facilitate the delivery of services. We process your information to provide the features you've enabled — counting reps, tracking exercise progress, applying app shields, syncing your time bank, and so on.
• To respond to user inquiries and offer support. We may process your information to respond to inquiries you send us and to resolve any potential issues.
• To fulfill and manage subscriptions. Subscription state managed by Apple and RevenueCat is used to determine whether you have access to premium features.
• To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual's vital interest, such as to prevent harm.
• To detect and prevent fraud or abuse. Covers things like Apple's receipt validation through RevenueCat (preventing fake or fraudulent subscriptions).
• To comply with legal obligations. Covers tax records, responding to lawful government requests, and similar requirements.
• To improve the safety and security of the Services. In case a security issue ever requires looking at logs or diagnostic data.

3. What Legal Bases Do We Rely On?

If you are located in the EU or UK:

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on. For ScreenReps these are:

• Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose, such as granting camera, location, or HealthKit access. You can withdraw your consent at any time by adjusting iOS permissions or contacting us.
• Performance of a Contract. We process your personal information to fulfill our contractual obligations under our subscription agreement with you, including providing premium features.
• Legal Obligations. We may process your information where it is necessary to comply with our legal obligations, such as cooperating with regulatory agencies or responding to lawful requests.
• Vital Interests. We may process your information where it is necessary to protect your vital interests or those of a third party.

If you are located in Canada:

We may process your information if you have given us specific permission (i.e., express consent), or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including for fraud detection, business transactions under specific conditions, legal compliance, or other situations specified in applicable Canadian privacy law.

4. When And With Whom Do We Share Your Personal Information?

We may need to share your personal information in the following limited situations:

• With service providers we depend on for app distribution and subscriptions:
  • Apple Inc. — for App Store distribution, in-app purchases, and Family Controls / HealthKit infrastructure
  • RevenueCat — for subscription state management and receipt validation
• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Legal Obligations. We may share information when required by law, such as in response to a valid court order or government request.

We do not sell, rent, or trade personal information to advertisers, data brokers, or any other third parties.

5. Do We Offer Artificial Intelligence-Based Products?

As part of our Services, we offer features powered by machine learning, specifically Apple's Vision framework for body pose detection. The terms in this Privacy Notice govern your use of these features.

Our AI Products

Our AI products are designed for the following functions:

• Image analysis (analyzing camera frames in real-time to detect body keypoints)
• Machine learning models (Apple's pre-trained pose detection model, running entirely on-device)

How We Process Your Data Using AI

When you use camera-based exercise tracking (pushups or squats), camera frames are processed in real-time on your device using Apple's Vision framework. Each frame is analyzed and immediately discarded. No images, video, or any visual data is saved, recorded, or transmitted off your device. We never see what your camera sees — only the resulting rep counts are retained.

How to Opt Out

We believe in giving you full control over how your data is used. To opt out of camera-based AI processing, you can:

• Choose non-camera exercises instead — walking (HealthKit), plank (timer-based), or gym check-in (location-based) — none of which use AI
• Decline camera permission when prompted, or revoke it at any time in iOS Settings → ScreenReps → Camera
• Contact us at privacy@scarabyte.app with any questions

6. Is Your Information Transferred Internationally?

ScreenReps itself does not operate any servers. The third parties we rely on — Apple and RevenueCat — are based in the United States. When you subscribe, transaction data flows through their U.S.-based infrastructure.

If you are a resident of the European Economic Area (EEA), United Kingdom (UK), or Switzerland, please note that these third parties may process your information outside your jurisdiction. We rely on the following legal mechanisms to ensure adequate protection of cross-border transfers:

European Commission's Standard Contractual Clauses (SCCs):

Both Apple and RevenueCat have implemented SCCs (and where applicable, the EU-U.S. Data Privacy Framework) for transfers of personal information from the EEA, UK, and Switzerland to the United States. Their respective privacy policies (linked above) describe their data transfer mechanisms in detail.

7. How Long Do We Keep Your Information?

Because ScreenReps stores your data locally on your device:

• Personal information (display name), exercise data, time bank, and settings: Retained on your device until you delete the app or clear the data within ScreenReps. Uninstalling the app removes all of this information.
• Camera frames (for AI rep detection): Not retained. Frames are processed in real-time and discarded immediately.
• Geolocation (for gym check-in): Not retained. Coordinates are compared on-device and discarded immediately. Only the result of the check-in (timestamp, gym ID, success/failure) is retained on your device.
• Subscription data: Managed by Apple and RevenueCat per their respective retention policies. ScreenReps does not maintain its own copy.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.

8. How Do We Keep Your Information Safe?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. Because most of your data lives only on your iOS device, the primary security mechanism is iOS itself — sandboxed app containers, on-device encryption, and Apple's permission system for sensitive APIs (camera, location, HealthKit, Family Controls).

However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

9. What Are Your Privacy Rights?

Depending on your state of residence in the U.S. or in regions such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include:

• The right to request access and obtain a copy of your personal information
• The right to request rectification or erasure
• The right to restrict the processing of your personal information
• If applicable, the right to data portability
• The right not to be subject to automated decision-making

You can exercise these rights by contacting us at privacy@scarabyte.app, or by directly managing data within the app or via iOS Settings.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent

If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can withdraw consent for camera, location, or HealthKit access in iOS Settings → ScreenReps. For other matters, contact us at privacy@scarabyte.app. Note that withdrawal will not affect the lawfulness of any processing conducted prior to withdrawal.

Reviewing or deleting your data

If you would like to review or delete the information ScreenReps stores locally on your device, you can:

• Use the in-app data management features in ScreenReps' Settings
• Uninstall the app, which removes all locally-stored personal data from your device
• Contact us at hello@scarabyte.app

If you have questions or comments about your privacy rights, you may email us at privacy@scarabyte.app.

10. Controls For Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.

11. Do United States Residents Have Specific Privacy Rights?

Categories of Personal Information We Collect

The table below shows the categories of personal information we have collected in the past twelve (12) months:

We may also collect a first name or display name that you choose to provide for personalization within the app. This data is stored locally on your device only.

How We Use and Share Personal Information

We use your personal information only to provide ScreenReps' core features (as described in Sections 2 and 4 above). We may disclose your personal information with our service providers (Apple and RevenueCat) pursuant to written agreements between us and each service provider.

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information of website visitors, users, or other consumers.

Your Rights

You have rights under certain U.S. state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:

• Right to know whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request the deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects

Depending on your state, you may also have additional rights such as the right to obtain a list of categories of third parties to which we have disclosed personal data, the right to limit the use of sensitive personal data, and others as enumerated in your state's privacy law.

How to Exercise Your Rights

To exercise these rights, you can contact us by emailing hello@scarabyte.app or privacy@scarabyte.app.

Under certain U.S. state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable laws.

Request Verification

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, given that ScreenReps stores most data on your device and does not have user accounts on our servers, our ability to verify identity is limited — and so is the data we have to share.

Appeals

Under certain U.S. state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at privacy@scarabyte.app. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may submit a complaint to your state attorney general.

California "Shine The Light" Law

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits California residents to request and obtain from us, once a year and free of charge, information about categories of personal information we have disclosed to third parties for direct marketing purposes. ScreenReps does not disclose personal information to third parties for direct marketing purposes.

12. Do We Make Updates To This Notice?

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

13. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at privacy@scarabyte.app or contact us by post at:

14. How Can You Review, Update, Or Delete The Data We Collect From You?

Based on the applicable laws of your country or state of residence in the U.S., you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information.

Because most of your data is stored locally on your device, you can exercise many of these rights directly:

• Use the in-app data management features in ScreenReps' Settings to view, edit, or delete information stored locally
• Uninstall the app, which removes all locally-stored data from your device
• Adjust permissions in iOS Settings → ScreenReps to revoke camera, location, or HealthKit access
• For requests we need to process directly, email us at hello@scarabyte.app

Changelog

We track material changes to this Privacy Notice here so you can see what changed and when.

• April 25, 2026 — Initial publication.