Privacy policy

Privacy is the core promise of Interruptr, so this page is written to be read. The short version: what you type, search or look at is checked on your phone and never leaves it. Only counts, times and on/off states are sent to our server. This policy covers the Interruptr Android app, this website and the waitlist.

Who we are

Interruptr is a product of CREWU LTD, a company registered in England and Wales (company number 15835707), registered office 53 Edale Road, Nottingham, NG2 4HT, England. CREWU LTD is the controller of your data. For anything about your data, email [email protected].

What stays on your phone

These are processed on your phone only. They are never stored on our server and never sent to anyone:

• Anything you type, and your searches. They are checked against a word list on the phone and discarded.
• The sites you visit and the sites and words on your block list.
• Your notes, reasons, reflections and check-in text.
• The camera. It counts pushups on the phone; nothing is recorded or sent.
• Screenshots, if you turn on the on-screen watch. Each one is checked on the phone and thrown away; none is stored or sent.
• Voice notes you record for yourself.

Interruptr uses Android's accessibility service to read what you type in search bars and the address bar and to show the lock over other apps, and a local VPN to block the sites you chose. The VPN answers lookups on the phone; none of your traffic is sent to us or anyone else. You turn both on yourself, after a full-screen explanation.

What the app sends to our server

The app creates an anonymous account the first time it opens, so a new phone can restore your progress and a partner can be told if protection stops. It sends:

• An account id, a device id the app makes, the app version, your phone's maker and model, and a push token (so we can reach the phone with notifications).
• Your rules (lock length, reps, night hours and similar settings) and your time zone.
• Counts and times: locks (their kind, length, reps and how they ended), urges ridden out, slips, check-ins, points and badges. Never the search, site or app behind a lock.
• Whether each protection is on, off or not available, and a regular check-in from the phone (a heartbeat).
• Your plan (Free or Premium) and its state.
• Your age band (under 13, 13–17, or 18 and older). Never your year or date of birth.
• Your partner's status, if you add one.
• Your email address, only if you add one or sign in with Google. You can use the app without one.
• Check-in moods, only if you choose to share them with a partner.

Our server enforces this: every stored value is a number, a time, a yes/no or a choice from a fixed list, never free text. We use this data only to run the app for you. We never sell it, and there are no ads.

Accountability partner

A partner is optional. If you invite one, we email them your first name as you give it and their invite. They see counts and status only: your streak, locks, urges ridden out (if you share them), check-in days, moods (only if you share them), whether protection is on, alerts (for example, protection turned off or the app removed) and requests you send for their approval. They never see your searches, sites, notes, screenshots or anything you typed. A partner can send you a short note for your next lock; it's stored encrypted until your phone fetches it, then erased.

Coach

The coach is an optional chat for adults on Premium. You agree to it before the first message. Your messages are sent to our AI provider, Anthropic, to write a reply, and Anthropic processes them on our behalf only: it doesn't use them to train its models and deletes them after a limited time under its commercial terms. We keep the chat encrypted for 30 days so you can see it, then erase it. "Delete this chat" erases it at once. No one else, including a partner, can read it.

Deposits

A deposit is optional and for adults only. You pay on Stripe's own payment page: your card details go to Stripe and never reach us. We receive only the amount, whether it was paid and refunded, and Stripe's reference for it. A deposit is refunded in full at the end of your commitment. If it's forfeited under the deposit terms, it is given to the charity you chose; Interruptr keeps none of it. If you ask for a review of a forfeit, we use your account's email address to reply.

Purchases

Premium is bought through Google Play. Google handles the payment; we receive the product, its state and when it ends, so we can turn Premium on. We never see your payment details.

Challenges

In a challenge group you appear under a nickname made from fixed word lists, and others see your daily check-ins and counts of replies. There is no free text. The group is for people 18 and older.

Crash reports and diagnostics

The app sends warnings, errors and crash reports to Sentry, our error-tracking service in the EU, so we can fix problems. They contain the app's own log lines, your phone's model and Android version, and never your name, email, searches, sites or anything you typed. This is on for everyone, because it's the only way we can see what went wrong on a phone.

Who processes data for us

• Supabase: our server and database, in Frankfurt, Germany.
• Google: sign-in with Google, Google Play billing and Firebase Cloud Messaging (push notifications).
• Sentry: crash reports and diagnostics, in the EU.
• Anthropic: the coach's replies.
• Stripe: deposit payments and refunds.
• Resend: emails (sign-in links, partner emails, alerts about your commitment).
• Cloudflare: this website and the waitlist.

Each processes data only to provide its service to us. Some may process data outside the UK, including in the United States. Where they do, the transfer is covered by the safeguards UK law requires, such as the UK International Data Transfer Addendum or the UK-US data bridge.

Why we're allowed to use it

We use app data to provide the service you asked for (our contract with you). We use crash reports for our legitimate interest in keeping the app working. Mood and the coach are optional, and we use them only with your consent, which you can withdraw at any time by turning moods off or deleting the chat.

Deleting your account

You can delete your account in the app (Settings → Privacy and data), or by following the steps on our delete your account page. You're signed out on every phone at once, and the account is deleted 7 days later, unless you sign in again before then. During a running commitment, deleting goes through the commitment's exit rule. An anonymous account that hasn't been used for 60 days is deleted too.

Deleted data is hidden from you, a partner and any restore straight away, and permanently erased one year after deletion. Coach chats are erased at once. If you want everything erased sooner, email us and we'll do it within 30 days.

Age

The app asks your age once, when you start. It can't be used under 13. People aged 13 to 17 can use it without the deposit, the coach and the challenge group, which are for people 18 and older. We store only the age band, never your date of birth.

The website and waitlist

If you join the waitlist, we collect:

• Your email address.
• Your phone type (Android or iPhone), if you choose to tell us.
• Which form you used and when you signed up.
• Your answer to our optional question, if you give one. Because it's about something personal, we only store it with your explicit consent, which you give when you send it. It's never shared, published or used for advertising.

We use this to confirm your signup, tell you about the app and learn what to build, because you signed up and confirmed by email (your consent). We keep it until you unsubscribe or ask us to delete it; unconfirmed signups are deleted after 30 days.

The website uses privacy-friendly analytics that don't use cookies and don't track you across sites. We see totals, like page views, never individual people. That's why there's no cookie banner.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it. Email [email protected] and we'll answer within 30 days. Every waitlist email has an unsubscribe link.

If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.

Things we never do

• Sell your data or use it for advertising.
• Use an advertising ID or track you across apps or sites.
• Collect your location, contacts, photos, browsing history or search terms.
• Hide the app. While protection is on, a notification always shows.

Changes

If this policy changes in a way that matters, we'll tell you in the app (and by email if you gave us one) before it takes effect.