Privacy Policy

1. Who we are

Groggy is an iOS app that keeps distracting apps locked until you complete morning tasks verified with a live photo. This Privacy Policy explains what data the app uses and why.

Operator: Till Theurer, sole trader (Einzelunternehmen), Carl-Friedrich-Straße 7, 76437 Rastatt, Germany. No commercial register number. No VAT ID on file.

Contact for privacy questions: support@getgroggy.com. Website: getgroggy.com.

2. Short summary

• No account and no login. Your routine, streak, and settings stay on your device (App Group storage).
• Live task photos are sent only for a one-time check. They are not stored by us after the check.
• Which apps you block is handled by Apple’s Screen Time APIs. Groggy does not learn the names of your selected apps.
• Subscriptions are billed by Apple. We do not receive your payment card details.
• You can delete local app data from Settings in the app, or by uninstalling Groggy.

3. What we collect

3.1 Data stored on your device

To run the app, Groggy stores locally (including in an App Group shared with system extensions):

• Your morning plan (tasks, schedule, weekdays)
• Streak and completion status
• App preferences (for example reminder settings)
• Subscription access status needed to enable or disable blocking
• Tokens and configuration needed to talk to our verify endpoint

This data is not synced to a Groggy cloud database. There is no Groggy user account.

3.2 Permissions

• Screen Time / FamilyControls: required to shield the apps you choose during your lock window.
• Camera: required to take live photos that prove a task. Groggy does not use your photo library for task verification.
• Notifications: optional local reminders (for example when tasks are ready).

3.3 Data we do not collect as a product feature

• No email/password account in the app
• No contacts, HealthKit, or location tracking for the core product
• No gallery upload for task proofs

4. Task photos and AI checks

When you complete a task, Groggy opens the live camera. You take a photo. That image, plus the task’s check criterion (what should be visible), is sent over HTTPS to a Cloudflare Worker endpoint (POST /verify) that we operate.

The Worker forwards the check to a vision model via OpenRouter (currently a Gemini-class model). The response is a pass/fail result and a short reason. The image is processed for that request and is not stored by Groggy after verification.

If verification fails, you get another attempt. After two failed attempts, Groggy applies a courtesy pass for that task so a bad lighting angle does not trap you. If our servers fail while your phone has internet, the live photo still counts (fail-open). If you have no internet, the photo is not counted until you are back online; you can still use the in-app pause / end path.

Photos can show private morning contexts (bathroom, bedroom). They exist only for the check. Do not include other people’s faces or sensitive documents in task photos if you can avoid it.

5. Screen Time and app blocking

Blocking uses Apple’s FamilyControls, ManagedSettings, and DeviceActivity frameworks. You pick apps or categories with Apple’s system picker. By Apple’s design, Groggy does not receive a readable list of which apps you selected. Shield screens and schedules run through Apple’s system extensions.

Without an active subscription, Groggy does not keep your apps locked. Blocking is a commitment tool, not a jail.

6. Subscriptions and payments

Paid access is sold as auto-renewable App Store subscriptions (product IDs such as groggy_yearly, groggy_weekly, and groggy_founding_yearly). Apple processes payment. We do not receive or store your card number.

We use RevenueCat to manage subscription status and restore purchases. RevenueCat may process App Store purchase receipts and device identifiers needed for entitlement checks. See RevenueCat’s Privacy Policy.

For Apple’s handling of payments, see Apple’s Privacy Policy.

7. Third parties

Depending on features you use, these processors may handle data on our behalf:

• Apple: App Store, Screen Time APIs, device OS services
• RevenueCat: subscription entitlements
• Cloudflare: Worker that receives verify requests
• OpenRouter / model provider (e.g. Google Gemini): one-time vision check of the task photo

We do not sell your personal data.

8. Retention and deletion

• On device: until you use “Delete all data” in Settings or uninstall the app.
• Verify photos: not retained by Groggy after the check completes.
• Support email: if you write to us, we keep the conversation as long as needed to help you, then delete or anonymize it when no longer needed.
• Subscription records: held by Apple / RevenueCat under their policies for billing, fraud prevention, and restores.

9. Your rights

Depending on where you live (for example GDPR in the EEA/UK, or similar laws elsewhere), you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. Because most Groggy data lives on your device, the practical path is:

• Change or clear settings and tasks in the app
• Use Delete all data in Settings
• Uninstall the app
• Manage or cancel your subscription in your Apple ID subscription settings
• Email support@getgroggy.com for help with anything we may hold (for example support mail)

If EU/UK GDPR applies, our lawful bases are typically: performance of the contract (running the app you subscribed to), consent where required (for example camera for verification), and legitimate interests for security and abuse prevention on the verify endpoint. The controller is Till Theurer (address above). No data protection officer is appointed.

10. Children

Groggy is built for adults who want a morning commitment tool. You must be at least 17 to use Groggy. Do not use the app if you are under 17.

11. International transfers

Verify requests and subscription tooling may be processed on servers outside your country, including in the United States. Where required, we rely on appropriate safeguards used by our providers (for example Standard Contractual Clauses).

12. Changes

We may update this Privacy Policy. We will change the “Last updated” date above and, for material changes, provide a reasonable notice in the app or on this site when practical.

13. Contact

Questions about privacy: support@getgroggy.com
Operator: Till Theurer, Carl-Friedrich-Straße 7, 76437 Rastatt, Germany.