Effective October 17, 2026

Your progress.
Your choice.

This notice describes Timeout, operated by Lani Technologies Limited, at jointimeout.app.

On your device

You can use local movement breaks and app limits without creating a cloud account. Apple’s ordinary Screen Time reports stay inside its private report extension. We do not upload those report totals, private application tokens, camera frames, or pose recordings. Camera processing supports movement counting on your device.

Camera coaching and Google ML Kit

Optional camera workouts use Google ML Kit to detect movement on your device. Google states that ML Kit does not send the input images, video, or detection results to its servers. Separately, the SDK sends Google diagnostic and usage metrics, including device and app information, a per-installation identifier, performance, API configuration, feature events, and error codes. Google uses these metrics to operate, debug, improve, and protect its APIs. The SDK may contact Google for updates and compatibility information. Timeout has not disabled this SDK metrics collection. See Google’s ML Kit privacy terms, its iOS data disclosure, and Google’s privacy policy. Camera-free movement breaks remain available.

Workout illustrations and video guides

Core movement illustrations and character previews are bundled with Timeout and do not require Traina’s servers. Optional YouTube guides connect to YouTube only after you choose to play or open a guide; YouTube then processes connection and playback information under Google’s policies. Opening another linked resource uses that provider’s service.

Optional account and backup

When you explicitly enable backup, we store your verified email, chosen display name, time zone, device registration, and new Timeout activity: completed movement breaks, learning results, access windows granted, and goals. These are device-reported activity records, not independent proof of exercise or measured screen usage. Earlier local activity is not automatically uploaded.

People you choose

Joining a circle starts with no activity shared. Your display name and membership are visible to its members. You choose which activity categories and start date to share. Leaving, removal, or stopping sharing prevents new server reads. Someone may still remember or separately save information they already saw.

Service providers and security

Cloudflare hosts the API and sends requested sign-in codes. Neon stores account data in AWS US East (Ohio). Connections use TLS, session tokens are stored as hashes on the server, and the app keeps credentials in the device Keychain. We do not sell your activity or use advertising trackers.

Retention and controls

Account activity remains until you delete your account; the current service accepts up to five years of event dates and 100,000 events per account. In-app export provides your stored activity and goals. When an account deletion request is accepted, Timeout blocks further cloud access and stops backup. Cleanup normally completes immediately; if a provider is unavailable, the app clearly reports that cleanup is queued. The service retries accepted requests and alerts the operator if automated cleanup cannot finish. Local workouts and restrictions remain on the device unless you remove them separately.

Database recovery history can retain deleted data for up to seven days. Encrypted sign-in challenges expire after ten minutes; short-lived abuse-control state expires within an hour. Cloudflare recovery storage may retain prior encrypted challenge state for up to 30 days. Minimal security audit records are retained for 90 days and empty deleted account rows for 30 days, with bounded weekly cleanup. Deleted goals are reduced to a minimal identifier/version marker after 30 days until account deletion. Separately, an independent deletion journal retains account and goal identifiers, request identifiers, timestamps, and cleanup status so older backups cannot restore deleted records. These safety markers contain no email addresses, goal text, or activity, and are retained while any recoverable copy could restore those records. Recovery also resets sessions, invitations, circles, and sharing consent before restored data can be used.

Age and platform limits

Cloud accounts and circles are currently available to people aged 18 or over. Friend invitations do not establish guardianship. Regional Apple data-export capabilities and family supervision are not enabled by this notice or by joining a circle.

Contact

For support, privacy requests, or trouble deleting an account, email support@jointimeout.app. Do not send sign-in codes or sensitive activity attachments unless specifically needed for your request.

Choices

Use Settings → Account & backup to sign out, review unsynced activity, export your records, or delete your account. Turning off backup by signing out stops capture of new cloud events. Your local app remains available.