Privacy Policy

Score to Unlock ("the app") is a private score tracker for couples, designed with privacy as the default. This policy explains what data the app handles and why.

What the app stores

• Your scores, rules, requests, and rewards — the entries the two of you create inside the app. Each entry is stored on your device and, when you are signed in to iCloud, synchronized to your iCloud account's private database.
• Shared notebook with your partner — when you pair with one other person, a separate shared container is created via Apple's CloudKit Share. Both of you can read and write to that shared container; nothing flows through any developer-operated server.
• App preferences — your chosen language, whether App Lock is enabled, your role selection, and similar local settings. These live on your device only.

What the app does not do

• No user accounts. The developer never sees your identity, email, or app content.
• No analytics SDKs. No tracking. No advertising identifiers.
• No third-party servers receive your scores, rules, requests, or any other content.

How data moves

Entries sync via Apple's CloudKit service: your private entries go to your iCloud private database, and shared entries flow through a CloudKit Share between the two paired devices. Both channels are the same that other iCloud-backed apps use. The developer has no access to this data. Apple's privacy policy governs the transport itself.

Pairing with a partner

Pairing happens by sending an invitation link (typically via iMessage or any sharing channel you choose) that your partner opens on their device. Accepting the invitation grants their Apple ID access to the shared notebook only — they will never gain access to your private data. You may stop sharing at any time from inside the app; doing so immediately revokes your partner's access.

Notifications

The app may send local push notifications when your partner takes a relevant action (for example, submitting a request). To deliver these reliably, an Apple Push Notification service (APNs) device token is forwarded through a small relay service operated by the developer (Cloudflare Workers). The relay only sees opaque APNs tokens and minimal routing metadata; it never sees the contents of your scores, rules, or messages. You can disable notifications from iOS Settings at any time.

Biometric & passcode lock

The app supports Face ID, Touch ID, and device passcode as an in-app lock. Authentication happens entirely on your device through Apple's LocalAuthentication framework. No biometric data ever leaves your device or reaches the developer.

Exporting and deleting your data

You can stop sharing, unpair, or uninstall at any time. Deleting an entry in-app removes it from the device and queues a CloudKit delete that propagates to your iCloud database within seconds. Uninstalling the app removes all local data; the iCloud copy can be removed from iOS Settings → your Apple ID → iCloud → Manage Account Storage → Score to Unlock.

Children

The app is intended for adult couples. It is not designed for, and does not knowingly collect data from, anyone under the legal age of majority in their jurisdiction.

Changes to this policy

If this policy changes materially, a notice will appear in-app and the effective date at the top of this page will be updated.

Contact

Questions? Email [email protected].