Privacy Policy
Last updated: October 19, 2026
Pawl is a self-control tool that helps you stop something you're struggling with, such as gambling, adult content, or any distracting app, by blocking it with Apple's Screen Time and making it deliberately hard to unblock. This policy explains what Pawl does and doesn't collect.
The short version. Since version 2.3, Pawl collects no data. There is no account, no sign-in and no Pawl server. Your data stays on your iPhone and in your own private iCloud. We never see which apps or websites you block. We don't use advertising, we don't track you, and we never sell data. If you signed in on an older version, see Section 6.
1. Who this applies to
This policy covers the Pawl iOS app and the website getpawl.com. Pawl is intended for
adults (17+). It is not directed to children.
2. What Pawl never sees
Pawl blocks apps and sites using Apple's Screen Time / Family Controls framework. Apple hands the app only opaque tokens that stand in for your selections. Pawl cannot read, and never receives, the identities of the specific apps or websites you choose to block. Your blocking choices are not transmitted to us.
3. Data that stays on your device
The following stays on your iPhone and in your own private iCloud, and is not sent to us:
- Your streak and history.
- Your slip log and urge entries.
- Your blocking selections (as opaque Screen Time tokens), websites you type in, scheduled sets, friction settings, the hard lock record, and the optional “someone to call” phone number.
- The record of your paired security key. The key itself never leaves your hands.
iCloud storage is Apple's and is tied to your Apple Account. We cannot read it.
4. Purchases
Pawl Pro is sold through the App Store. Apple handles payment. The app only learns whether your Pro subscription is active, so it can turn on the Pro features. We don't receive your payment details.
5. Who we share data with
No one. Pawl has no server of its own, so there is nothing for us to share. Apple runs Screen Time, iCloud and the App Store under its own privacy policy. No advertisers and no data brokers.
6. If you signed in on version 2.2 or earlier
Versions up to 2.2 had an optional ally (sponsor) feature that used Sign in with Apple and a backend hosted on Supabase. If you signed in, that backend stored your Apple user identifier, email address (possibly Apple's private relay address), optional display name, ally link, unlock requests, commitment status and settings, a device identifier and push token, check-ins, and protection alerts. Your slip and urge entries were never sent there.
Version 2.3 removed that feature. The app no longer signs in or sends anything to that backend, and on its first launch it clears the old sign-in from your phone. While older versions are still in use, the data above is kept only so those versions keep working. It is protected by row-level security and encrypted in transit, and it is never used for anything else.
To delete old account data: if you still have version 2.2 or earlier, open Pawl → Settings → Account → Delete account. If you have updated, or can't open the app, email privacy@getpawl.com from the email tied to that account and we'll delete it and revoke Sign in with Apple.
7. Removing your data
Because your data lives on your phone and in your iCloud, you control it. To remove what Pawl keeps on your iPhone: open Settings → Screen Time, turn off Screen Time (or remove Pawl under “Apps with Screen Time Access”), then delete Pawl from your Home Screen. To remove the copy in iCloud, manage Pawl's data in your iPhone's iCloud settings.
8. Children
Pawl is not directed to children and is rated 17+. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us and we'll delete it.
9. Changes to this policy
If we make material changes we'll update the date at the top and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.
10. Contact
Questions or deletion requests: privacy@getpawl.com.