NeuralBlock ("we", "our", or "the app") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information.

1. Data We Collect

NeuralBlock processes the following data locally on your device:

• Heart rate and HRV data — Read from Apple Watch via HealthKit to detect a sustained elevated heart rate while you are at rest and activate protection. This data is processed and stored on your devices only. It is never sent to our servers or to any third party, and it is never stored in iCloud or included in iCloud backups.
• App usage patterns — We use Apple's Screen Time (FamilyControls) framework to block selected apps. We do not see which specific apps you use; we only apply blocking shields to apps you choose.
• Blocking episode history — Timestamps, durations, and trigger reasons for blocking events are stored locally to generate statistics.
• Your name — Used for personalization within the app and in SOS alert messages. Stored locally on your device.
• SOS contact information — Names and email addresses of the support contacts you configure, and the message you write for them. Stored locally and used only to send email alerts when protection or an SOS is triggered. You are responsible for informing these people and obtaining their agreement before adding them.

2. Data We Do NOT Collect

• We do not store any personal data on external servers. The only information that ever leaves your device is the SOS email described in Section 6.
• We do not use analytics, tracking, or advertising SDKs.
• We do not sell your data or share it with third parties for their own purposes. The service providers that deliver SOS emails (Section 6) act only on our instructions.
• We do not have access to your browsing history, messages, or photos.

3. On-Device Processing

All analysis of your heart rate, HRV and movement runs entirely on your iPhone and Apple Watch. No biometric data is ever transmitted to our servers or to any third-party service. In line with Apple's HealthKit rules, health data is used exclusively to provide the app's features: it is never used for advertising, marketing, data mining or any other purpose, and it is never sold.

4. Apple Watch & HealthKit

If you connect an Apple Watch, the app reads heart rate and heart rate variability data through HealthKit. This data:

• Is processed on-device only
• Is never uploaded to external servers
• Is used exclusively to detect a sustained elevated heart rate and activate protection
• Is never stored in iCloud and never included in iCloud or iTunes backups (device-only storage)
• Can be revoked at any time via Settings > Health > NeuralBlock

5. Screen Time & FamilyControls

NeuralBlock uses Apple's FamilyControls framework to apply app blocking. We do not have visibility into which specific apps are installed on your device. The blocking selection is managed entirely by the operating system.

6. SOS Alerts

When you press the SOS button, or when protection is activated (manually, by schedule or automatically), NeuralBlock sends an email to the support contacts you configured. To deliver it, the app sends the following data over an encrypted connection (HTTPS) to our own server, which runs on Cloudflare Workers, and the server relays the email through Resend, our transactional email provider:

• The contact's email address
• Your first name, as you entered it in the app
• The message you wrote for that contact

No health data, heart-rate readings, risk level or information about the apps you block is ever included in these emails or sent to our server. Our server does not store the emails; it only keeps anonymous rate-limiting counters for up to one hour to prevent abuse. Resend processes the email in order to deliver it, in accordance with its own privacy policy. Cloudflare and Resend act as data processors on our behalf and do not use this data for any other purpose.

Before adding a contact, make sure that person agrees to receive these emails. You can send them a test message from the app so they know what to expect.

7. Subscriptions

Subscription purchases are processed entirely through Apple's App Store. We do not collect or store payment information. Subscription status is verified locally via StoreKit.

8. Data Storage & Security

All data is stored locally on your device using:

• UserDefaults — For preferences and settings
• Keychain — For sensitive data: your name, SOS contacts, the active block and escalation state, and a local copy of your history (encrypted by iOS and stored with device-only protection, so it is never included in iCloud backups)
• App Group container — For sharing data between the main app, Watch app, and monitor extension

Deleting the app does not remove everything. Because the app is designed so that an active block survives reinstallation, items stored in the Keychain (your name, SOS contacts, block and escalation state, and the local history copy) remain on the device after the app is deleted and are restored if you reinstall. To erase all of your data, use Settings > Delete all data inside the app before deleting it. This removes every item, including the Keychain copy.

9. Age Requirement

NeuralBlock is intended for adults. You must be at least 18 years old to use the app. We do not knowingly collect personal information from anyone under 18; if you believe a minor has provided us with personal data, contact us and we will delete it.

10. Your Rights

Since all data is stored locally on your device, you have full control:

• Access — All your data is visible within the app
• Delete — Use Settings > Delete all data inside the app (recommended; see Section 8 for why deleting the app alone is not enough)
• Portability and objection — Because we hold no copy of your data, there is nothing for us to export or restrict; everything is under your control on your device
• Revoke permissions — Via iOS Settings for HealthKit, Screen Time, and Notifications

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

12. Contact & Data Controller

NeuralBlock is operated from Lima, Peru, and this policy is governed by Peruvian data protection law (Law No. 29733) and, where applicable, the laws of your country of residence. If you have questions about this Privacy Policy or want to exercise your rights, contact us at:

privacy@neuralblockapp.com