Privacy Policy

Feral (“Feral”, “we”, “us”, or “our”) is an iOS application and web platform designed to help people build digital discipline through native Apple Screen Time enforcement and financial commitments. This Privacy Policy explains what personal information we collect, why we collect it, how it is protected, and how you can exercise your legal rights.

This policy applies to the Feral mobile application for iOS, the website at joinferal.app, and all associated services operated by Feral, based in Buenos Aires, Argentina.

If you have any questions or wish to exercise your data rights, you can reach our privacy team at privacy@joinferal.app or write to our general support at support@joinferal.app.

Feral utilizes Apple's native Screen Time frameworks (including FamilyControls, DeviceActivityMonitor, ShieldConfiguration, and DeviceActivityReport). These system frameworks enforce application limits directly on your iPhone operating system:

• App Selection: When you choose which apps or categories to block, you interact with Apple's system picker. Apple provides Feral with opaque, sandboxed tokens. Feral does not send a list of your installed apps to our servers.
• On-Device Activity Monitor: The activity referee runs locally as an iOS extension. It tracks your daily minute threshold against Apple's internal counter. When you reach your agreed daily allowance, the system shield triggers locally on your device.
• Sandboxed Reports: Live usage charts are displayed using Apple's sandboxed DeviceActivityReport view, which renders private system data directly onto your screen without passing the underlying numbers or app names to our application JavaScript code.

We deliberately minimize the personal information we collect. The categories of information we process include:

Under European data protection laws (GDPR) and similar regulations worldwide, we must have a valid legal basis to process your personal data:

• Performance of a Contract: Authenticating your account, enforcing your chosen pact rules, delivering unlocked app sessions, maintaining your Wilds ledger, and crediting purchases you make.
• Legitimate Interests: Securing our systems, preventing fraudulent chargebacks, maintaining game integrity, and diagnosing software crashes.
• Legal Obligation: Complying with tax and financial accounting requirements for merchant transactions, and responding to lawful requests from judicial authorities.
• Consent: Sending optional local push notifications when you approach your daily screen time limit. You can revoke notification permission at any time in iOS Settings.

Feral is built for personal accountability, not surveillance. By default, your data is private to you.

If you choose to participate in social features or community leaderboards, other registered users may see your display name, your @handle, your current streak count, and your permanent Tier rank (such as Stray, Wolf, or Apex).

Other users can never see which apps you chose to block, how many minutes you spent on your phone, your financial stakes, or your checkout transaction history.

We work with a small number of trusted infrastructure providers who process data strictly under our instructions:

• Supabase: Provides managed database hosting, user authentication, and secure row-level access control. Data is hosted in secure data centers with encryption at rest and in transit.
• Polar: Acts as the Merchant of Record for credit purchases made through our website checkout. Polar handles secure card processing, sales tax, VAT calculation, and payment compliance.
• Apple: Provides Sign in with Apple authentication, native FamilyControls APIs, and push notification dispatching through Apple Push Notification service (APNs).
• Google: Provides Google Sign-In authentication for users who choose to log in with a Google account.

We do not sell, rent, or trade your personal data. We do not share your personal information with data brokers or advertising networks for cross-context behavioral advertising.

Our cloud servers and service providers operate primarily in the United States and the European Union. When data originating in the European Economic Area (EEA), the United Kingdom, or Argentina is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission and relevant international transfer agreements.

We retain your personal information only for as long as necessary to provide the service:

• Account Data: Retained for the lifetime of your account. If you delete your account, your profile, active pacts, and authentication records are permanently erased immediately.
• Transaction and Ledger Records: Completed order identifiers and financial records are retained for up to seven years to satisfy statutory tax, accounting, and anti-fraud legal requirements.
• Diagnostic Logs: Temporary crash reports and performance telemetry are deleted or anonymized within 90 days.

You have full control over your account. You can permanently delete your account at any time:

• Inside the iOS App: Navigate to your profile settings and tap “Delete Account”. Confirming this action will immediately remove your credentials, wipe your active pact, and invalidate all sessions.
• By Email: Send a deletion request to privacy@joinferal.app from the email address linked to your account. We will process your request within 30 days without charge.

If you are located in the European Economic Area or the United Kingdom, you have the following legal rights:

• Right to Access: You can request a complete copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete personal data.
• Right to Erasure: You can ask us to delete your personal data when it is no longer required.
• Right to Restrict Processing: You can limit how we process your information in certain circumstances.
• Right to Data Portability: You can request your data in a structured, machine-readable format.
• Right to Object: You can object to data processing based on our legitimate interests.

To exercise any of these rights, contact us at privacy@joinferal.app. We respond to all verified requests within one month.

This section applies to California residents under the California Consumer Privacy Act and California Privacy Rights Act:

• No Sale or Sharing of Personal Information: We do not sell your personal information and we do not share your personal information for cross-context behavioral advertising.
• Categories Collected: Identifiers (email, user ID, IP address), commercial transaction records, and internet network activity (app diagnostics). We do not collect biometric, health, or precise geolocation data.
• Sensitive Personal Information: We only process sensitive account identifiers for the specific purpose of securing your account and delivering the requested services.
• Non-Discrimination: We will never discriminate against you, change your prices, or degrade service quality because you exercised your statutory privacy rights.

If you reside in Argentina, Ley de Protección de los Datos Personales N° 25.326 gives you the right to access, rectify, update, and suppress your personal data held in our databases:

Requests sent to privacy@joinferal.app are answered within 10 calendar days for access requests, and within 5 business days for rectification or suppression requests.

You must be at least 18 years old (or the age of legal majority in your jurisdiction) to use Feral. This applies to the app as a whole, including financial commitment stakes and checkout transactions.

Feral is not directed toward anyone under 18 years old. We do not knowingly collect personal data from anyone under 18. If we become aware that a person under 18 has created an account, we will immediately terminate the account and purge all associated data.

We employ industry-standard technical and organizational security measures to protect your information:

• All communications between the mobile app, web platform, and servers use TLS 1.3 encryption.
• Database storage is encrypted at rest using AES-256 standards.
• Database access is strictly isolated using Supabase row-level security policies so one user can never read another user's private data.
• Authentication tokens are securely stored in the iOS native Keychain.

We may update this Privacy Policy from time to time. When changes are made, we will update the effective date at the top of this page. If we make material changes that significantly affect your rights, we will notify you in advance via an in-app banner or direct notification.

If you have questions, feedback, or concerns regarding your privacy, please write to us first at privacy@joinferal.app.

You also have the right to lodge a complaint with your local data protection supervisory authority. In the European Union, this is the supervisory authority in your country of residence. In the UK, it is the Information Commissioner's Office (ICO). In Argentina, it is the Agencia de Acceso a la Información Pública (AAIP).