Accountability Guard — Privacy Policy

Last updated 7 October 2026.

Accountability Guard helps you keep chosen websites and short-form video surfaces blocked on your own Mac, and lets an accountability partner you invite see whether that protection is running. This policy explains exactly what the app stores and what it does not.

What we store

The service keeps only what is needed to relay protection status between your Mac and your partner:

• A device identifier, the name given to the Mac, and its public verification key. Records are linked to that device and its partner relationships; a random identifier does not make them anonymous.
• Your protection settings — which surfaces (for example Reels or Shorts) are blocked or watched, and any specific websites you or your partner add.
• Partner names or nicknames, partnership and session identifiers, and one-way hashes of access and recovery credentials. Older beta pairings may also retain an email address supplied during setup.
• An activity log with timestamps: guarded surfaces accessed or blocked, monitored website domain names, partner actions, browser-extension coverage, and protection status. The log can reveal sensitive interests even though it does not contain page contents.
• Apple push-notification tokens, notification preferences, and delivery records so partners can receive alerts. Protection reports also include operating-system version, administrator-account and virtual-machine indicators, and filter/helper health.

What we do not store

• We do not collect a complete browsing history or page contents. We do collect access events for guarded surfaces and domains selected for blocking or notification, including allowed visits to sites in Notify mode.
• We do not store screenshots, keystrokes, message contents, photos, location, contacts, or the content of anything you view.
• We do not receive your Apple ID or payment details. Apple processes App Store purchases. Device names, partner names, and older beta email records are described above.
• We do not use advertising or third-party analytics trackers and do not sell your data. We share the protection information described here with your connected partners and use the service providers below to operate the app.

Where it is stored

Data is held on Cloudflare (Workers and D1) and push notifications are delivered through Apple's Push Notification service. It is used only to operate the app's protection and partner features.

Your partner

The accountability partner you invite can see your protection status and the privacy-limited activity log described above. That is the purpose of the app. You choose who to invite. A partner can leave at any time; leaving never unlocks the Mac's settings.

Deleting your data

If you use Accountability Guard on your Mac: choose Uninstall Accountability Guard… from the Mac app menu while online. The service deletes the Mac's record, settings, activity log, partnerships, sessions and push registrations. Partners are sent a notice first; delivery of that notice is not guaranteed.

If you are a partner: in Guard Partner, open the Mac's settings and choose Delete my data. The service deletes your partnership, your name, your sessions and credentials, your push registration and any queued notifications addressed to you, and removes your name from the Mac's activity log (entries such as "a former partner joined" remain so the record still makes sense to the people who stay). This works even if you are the only partner or were already removed. The Mac keeps its current settings locked; its owner can invite a new partner. Remaining partners are told that a partner left, without your name.

After a deletion, the service keeps only a one-way hash of the credential that asked for it, for 30 days, so an app that lost its connection can confirm the deletion. It contains no name or device link.

How long we keep data

• Activity log entries: 180 days, then deleted automatically.
• Copies of notifications that were delivered: 30 days.
• Expired or used invitations: 30 days after they expire.
• Everything else: for as long as the Mac and partnership exist, and removed by the deletion options above.

Our database provider keeps point-in-time recovery copies for up to 30 days. Deleted data can remain in those copies until they expire; we do not restore them except to recover from a service failure.

Children

Accountability Guard is intended for adults and is not directed at children under 13.

Contact

Questions about this policy or your data: eremos.app@gmail.com.