Privacy Policy for RestUp

Last Updated: January 2025

TL;DR: RestUp helps you focus by blocking apps and auto-replying to messages. We read your contacts locally (never uploaded), detect SMS for auto-reply, and only send essential data to our servers for authentication. Your privacy matters to us.

Introduction

RestUp (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the RestUp mobile application.

Permissions We Request

Permission Purpose Data Storage
Contacts Identify SMS senders for better logging βœ… Local only, never uploaded
SMS Auto-reply to messages during focus mode βœ… Not stored, processed locally
Accessibility Block social media app launches βœ… No data collected
Notifications Block social media notifications βœ… Not stored or transmitted
Internet Authentication and session sync πŸ” Encrypted transmission

What We Collect

1. Contacts Permission (READ_CONTACTS)

  • Purpose: To identify if incoming SMS senders are in your contacts
  • How We Use It: Read contact names locally to show sender names in logs
  • Data Storage: Contact information is never uploaded to our servers
  • You Control: Revoke this permission anytime in device settings

2. SMS Permissions (SEND_SMS, READ_SMS, RECEIVE_SMS)

  • Purpose: Automatically reply to SMS messages during focus mode
  • How We Use It: Detect incoming SMS, read sender number, send auto-replies
  • Data Storage: SMS content is not stored. Only phone numbers logged locally
  • You Control: Only active during focus mode

3. Accessibility Service

  • Purpose: Block social media app launches during focus mode
  • How We Use It: Monitor app launches and prevent access to blocked apps
  • Data Storage: No data collected

4. Notification Access

  • Purpose: Block notifications from social media apps
  • How We Use It: Detect and suppress notifications from blocked apps
  • Data Storage: Notification content is not stored or transmitted

What We DO NOT Collect

RestUp DOES NOT:
  • ❌ Upload your contacts to any server
  • ❌ Store SMS message content
  • ❌ Read SMS messages except sender phone number
  • ❌ Share your contacts with third parties
  • ❌ Sell your personal information
  • ❌ Track your location
  • ❌ Access your photos or media
  • ❌ Record audio or use your camera

How We Use Your Information

Local Processing Only

  • Contact names: Read locally to improve logging, never uploaded
  • SMS detection: Processed on your device only
  • App blocking: Handled entirely on your device

Server Communication

We only send the following to our servers:

  • Authentication: Email, Google account ID
  • Focus sessions: Start/end times, duration
  • Auto-reply settings: Your custom auto-reply message (stored securely)

Third-Party Services

Google Sign-In

  • Purpose: User authentication
  • Data Shared: Email address, name, Google account ID
  • Privacy Policy: Google Privacy Policy

Gmail API (Optional)

  • Purpose: Email auto-reply feature (if you enable it)
  • Data Accessed: Your Gmail inbox (read), ability to send emails
  • Data Storage: Not stored by RestUp, accessed via OAuth
  • You Control: Disconnect Gmail access anytime in settings

Your Rights

You have the right to:

  • Access: Request a copy of your data
  • Deletion: Delete your account and all associated data
  • Correction: Update your profile information
  • Revoke Permissions: Disable any permission in device settings

How to Exercise Your Rights

  • Delete Account: Settings β†’ Sign Out β†’ Account deleted after 30 days
  • Revoke Permissions: Device Settings β†’ Apps β†’ RestUp β†’ Permissions
  • Disconnect Gmail: RestUp β†’ Menu β†’ Gmail Auto-Reply β†’ Disconnect

Data Security

  • All data transmitted over HTTPS (encrypted)
  • Authentication tokens encrypted and securely stored
  • Focus session data stored in secure database with access controls
  • Contact data never leaves your device

Data Retention

  • Account Data: Retained until you delete your account
  • Focus Sessions: Retained for 90 days, then automatically deleted
  • Deleted Accounts: All data permanently deleted after 30 days

Children’s Privacy

RestUp is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of changes by:

  • Updating the “Last Updated” date
  • Displaying a notice in the app
  • Sending an email (for significant changes)

Contact Us

If you have questions about this Privacy Policy:

Email: [email protected]
Address: Sector Oficios 17 2D Tres Cantos, MD 28760, Spain
Website: restup.app

Compliance

RestUp complies with:

  • GDPR (General Data Protection Regulation – EU)
  • CCPA (California Consumer Privacy Act – US)
  • Google Play Developer Policies
  • Android Permissions Best Practices

Summary

Your privacy is important to us. RestUp is designed to help you focus, not to invade your privacy. We only access your contacts locally for better user experience, and never upload them to our servers.