1. Preface

This Privacy Policy applies to Cloak (hereinafter referred to as "this App"), a local app management tool built on Apple’s official frameworks including FamilyControls, DeviceActivity and ManagedSettings. It provides features such as hiding apps, scheduled locking, daily usage time limits, home screen icon disguise, group management, and full feature unlocking via VIP subscriptions.

We strictly comply with the Cybersecurity Law of the People’s Republic of China, Data Security Law, Personal Information Protection Law, Minor Online Protection Regulations, as well as global privacy standards including App Store Privacy Guidelines, GDPR and CCPA.

By downloading, installing, launching or using this App, you acknowledge that you have fully read, understood and voluntarily agreed to all terms of this Privacy Policy. If you disagree with any provision herein, please uninstall this App immediately and discontinue all usage.

2. Information We Will Never Collect Actively

Under no circumstances will this App actively retrieve or transmit the following data through any code, SDK or tracking logic. We never distribute, sell or rent user information to external parties:

• Identity Information: Full name, phone number, email address, ID documents, social media accounts, residential address and other personal identifiers;
• Payment Information: Bank card numbers, payment passwords, Apple ID credentials, payment order records;
• Device Tracking Identifiers: IDFA, device serial numbers, IMEI and other unique hardware markers;
• Location Data: GPS coordinates, travel trajectories;
• User Private Content: Photos, contact lists, SMS messages, chat logs, local files;
• Third-Party App Internal Data: Content stored within managed applications;
• Online Behavior Records: Browsing history, search logs;
• Diagnostic & Tracking Data: Crash reports, usage analytics, click heatmaps.

No third-party SDKs for analytics, ads, push notifications or event tracking are integrated, so there is no channel for external parties to access your local data actively or passively.

3. Necessary Data Stored Locally Only

To deliver core management functions, this App only stores configuration data within your device’s local sandbox and App Group shared containers. There is no cloud synchronization or remote backup, and all data is exclusively accessible on the current device. All stored data will be permanently erased once you uninstall the App.

1. App Management Group Configurations

• Stored Content: Names of hidden/locked groups, anonymous app tokens you select, scheduled start & end time, weekly repeat rules, daily usage limits and group toggle statuses.
• Purpose: Power core functions including scheduled and time-limit app hiding and locking.

2. Home Screen Disguise Settings

• Stored Content: Alternate Icon identifiers manually selected by you.
• Purpose: Switch the display style of this App’s home screen icon.

3. Local Screen Time Statistics

• Stored Content: Per-app daily usage duration returned locally by Apple’s DeviceActivity API.
• Purpose: Display native device usage stats on the homepage; data will never be transmitted externally.

4. Anonymous Subscription Entitlement Credentials

• Stored Content: Original transaction IDs returned by Apple’s transaction system, subscription expiration dates and cycle markers.
• Purpose: Locally verify valid VIP entitlements on your device and prevent local tampering of subscription status. This data will never be used for user tracking, profiling or shared with third parties.

4. In-App Purchases & VIP Subscription Terms

Payments Fully Managed by Apple

All VIP subscription charges and auto-renewals are processed entirely within the App Store ecosystem. This App cannot access or interfere with payment workflows, nor does it collect or store sensitive payment data such as bank card numbers, payment passwords or Apple ID credentials.

Subscriptions Tied to Your Device

VIP benefits are bound to the current device via Apple transaction identifiers. If you reinstall the App or switch to a new device, you must restore purchases with your Apple ID. This App maintains no personal account system and cannot sync subscription status across devices.

Auto-Renewal Control

Auto-renewal settings are managed solely through your Apple account. You may disable auto-renewal anytime via: iPhone Settings > Your Apple ID > Subscriptions. No further charges will apply once auto-renewal is turned off after the current term expires.

Subscription Data Deletion

All locally saved subscription credentials will be permanently deleted upon App uninstallation and cannot be recovered.

5. Required System Permissions

All permissions listed below are mandatory to enable core management features. Disabling any corresponding permission will render related functions unavailable.

1. Screen Time Permission (FamilyControls)

Purpose: Retrieve anonymous app identifiers to enable app hiding, scheduled locking and usage limit controls. Only non-identifiable app markers are accessed; no internal content of any third-party app can be read.

2. Notification Permission

Purpose: Send alerts for activated management rules and daily usage limit reminders. You may disable this permission anytime in system Settings.

3. Alternate Icon API Permission

Purpose: Switch this App’s home screen icon via official iOS APIs after manual user selection. Only the visual icon of this App will be modified; no other applications are affected. You may revert to the default icon anytime in Settings.

6. Your Statutory Privacy Rights

Under the Personal Information Protection Law, CCPA, GDPR and other applicable regulations, you hold the following rights:

• Right to Know: You may review full data processing rules within this Privacy Policy at any time;
• Right to Erasure: Clear group configurations directly inside the App; full local data will be permanently removed upon uninstallation;
• Right to Withdraw Consent: Disable any permission granted to this App via iPhone system Settings to halt related data access;
• Right to Inquiry: Contact us via the channel listed below for questions regarding data handling.

This App requires no registration or login, and there is no account cancellation process.

7. Data Sharing & Third-Party Disclosure

• This App has no proprietary cloud servers, meaning no channel exists for transmitting your local data externally;
• We will never sell, exchange or rent any local configuration data to advertisers, data analytics firms or third-party platforms;
• Subscription payments are solely handled by the official App Store, whose data processing is governed by Apple’s own Privacy Policy and completely isolated from this App’s data system;
• No third-party SDKs (analytics, advertising, push tracking, payment modules, etc.) are integrated, eliminating all avenues for external parties to retrieve local device data.

8. Minor Data Protection

This App is suitable for users of all age groups and will never actively collect any personal information from minors. If guardians utilize this App to manage minor devices, all control configurations are saved locally on the guardian’s device only; no minor behavioral data will be uploaded or stored on any cloud server. Minors are advised to review this full Privacy Policy with a guardian before use.

9. Dispute Resolution

Any dispute arising from this Privacy Policy or your use of this App shall first be resolved through amicable negotiation. If negotiation fails, either party may submit the dispute to the people’s court with jurisdiction at the operator’s location for litigation.

10. Privacy Policy Updates

We reserve the right to revise this Privacy Policy to comply with updated national laws, App Store review guidelines or product feature iterations. Updated terms will be presented via an in-app pop-up notice. Your continued use of the App constitutes acceptance of the revised policy. The latest version will also be published on the App Store product page.

11. Contact Us

Cloak · Local-First · Privacy-Focused