Legal

Privacy Policy

Last updated: October 2026

Our Commitment

We do not sell your name or email. Partners you accept can see the name and email on your account, plus alert metadata. Apple receives a device token so alerts can be delivered. Stripe processes donations on the website. Website analytics run only if you allow them.

Remain Faithful is an accountability app for adults committed to purity. Because of the deeply personal nature of what this app does, we have designed our privacy model first and built the technology to match it. This policy describes exactly what data we collect, what stays on your device, and what your partners can see.

If you have any questions about this policy, contact us at support@remainfaithful.com.

What We Collect

Account Information

When you create an account, we collect:

  • Your display name (the name your partners will see)
  • Your email address (used for authentication and communications)
  • A hashed password (we never store plaintext passwords)

Device Information

We collect your APNs (Apple Push Notification service) device token to deliver accountability alerts to your partners. This token identifies your device to Apple's notification system but does not reveal your identity to us beyond what your account already provides.

Alert Metadata

If a chosen app is used for a minute, or if optional Deep Scan flags a non-DRM frame, an alert can be stored. The phone also sends a heartbeat while monitoring is on. That alert metadata is:

  • Timestamp of the alert
  • Content category (e.g., "Adult Content", "Explicit Text")
  • Severity level (Low / Medium / High)
  • A short system-generated summary string

We do not collect, store, or transmit: screenshots, screen recordings, raw OCR text, browsing history, or raw screen content. Partner sharing does not include those items beyond the short summary above.

Usage Analytics

Website analytics stay off until you tap Allow analytics. The choice is saved in this browser. The iPhone app does not include analytics.

Donation Information

Donations are processed by Stripe. We do not store your payment card information. Stripe stores payment data per their own privacy policy. We receive only a confirmation of donation amount for internal records.

Support Messages

If you use Send ideas or report a problem, we receive the type you pick, the words you type, and the name and email on your account so we can reply. App version, iPhone model, and iOS version are included only if you turn that on. The form does not send logs, alerts, screenshots, Screen Time choices, partner names, or group names.

What Stays On Your Device

Always-on Family Controls filtering and DeviceActivity usage monitoring do not capture screen frames. If you start an optional Deep Scan session, the following data is processed entirely on your device and is never transmitted to our servers or to your partners:

  • Raw screen frames captured by the ReplayKit broadcast extension (Deep Scan only)
  • OCR text extracted by Apple Vision
  • SensitiveContentAnalysis classification results
  • Local keyword classifier scores
  • Full browsing URLs
  • Any visual content from your screen

When Deep Scan flags a non-DRM frame, alert metadata is uploaded: category, severity, timestamp, and a short system-generated summary string. Screenshots, OCR text, and raw screen content never leave the device. The iOS app, backend, and website source are public on GitHub. Design notes and audit markdown in that repo are historical working papers, not product promises.

What Your Partners See

Your accountability partners have access to:

  • Your display name and account email (as provided by you when you initiated the partnership)
  • Alert metadata as described above: timestamp, category, severity level, and a short system-generated summary — not which app, and not a bundle ID
  • Your streak count (aggregate, not individual events)

Partners do not have access to your screen content, browsing history, or any data beyond alert metadata and account-level statistics you have explicitly made visible.

Data Retention

We retain data for the following periods:

  • Account data: deleted when you delete the account
  • Alert history: kept while your account exists, and deleted with the account. Older events and alerts are also removed after 365 days. Leaving a group notifies the other members. It does not delete your alert history.
  • Partnership records: removed when either person ends the relationship
  • Donation rows on your account: removed with the account. Stripe keeps its own payment records.

Third-Party Services

  • Apple (APNs): We use Apple's Push Notification service to deliver alerts. Apple's privacy policy applies to their handling of device tokens.
  • Stripe: Donation payment processing. Stripe is PCI-compliant. We do not store card data. See Stripe's privacy policy for details.
  • Google Analytics: Website analytics only. Not present in the iOS app.

Your Rights

You may, at any time:

  • Access your data: Settings → View My Activity Log shows your flagged activity in the app. For anything else, email support@remainfaithful.com. There is no separate export button.
  • Correct your data: update your display name and email in Settings → Edit Profile
  • Delete your data: delete your account in Settings, then Delete Account. The account, alerts, and donation rows tied to the account are removed then.
  • Change protection: you can change App Restrictions and turn off App Lockout in Settings. Pausing or turning off monitoring notifies your partners. Turning off App Lockout also sends a notice.

For data requests or concerns, contact support@remainfaithful.com. We respond within 30 days.

Children

Remain Faithful is not intended for users under the age of 18. We do not knowingly collect data from anyone under 18. If you believe we have inadvertently collected data from a minor, contact us immediately at support@remainfaithful.com and we will delete it promptly.

Security

The app and the server talk over HTTPS. Passwords are stored as bcrypt hashes. The session token is kept in the iOS Keychain and in the app group so Screen Time extensions can send events. Server logs do not include reset links or the address an email was sent to.

Changes to This Policy

We will post any material changes to this policy on this page with a new "Last updated" date. For significant changes, we will notify active users via push notification or email. Your continued use of the app after a policy change constitutes acceptance of the updated policy.