Privacy Policy

Last updated: 2026-05-30

This Privacy Policy describes what information Vow ("we", "us") collects when you use the Vow iOS application, why we collect it, and your rights over it. Vow is operated by Hassan Hajarat, a sole developer based in Amman, Jordan.

Short version: Vow is built around a single privacy principle — we don't know which apps you block, and we don't track what you do on your phone outside Vow. Apple's Screen Time framework hands us an opaque, encrypted reference to your selection; the actual list never leaves your device. We do use Mixpanel to measure how the app itself is used — what that covers, and the strict limits on it, are described below.

Information we collect

From Sign in with Apple

When you create your account, Apple sends us:

• A stable user identifier (Apple's "sub") that lets us recognize you on this and future installs.
• Your email address — either your real address, or, if you choose, the Apple private relay address that forwards to you.
• Your name, only if you choose to share it on first sign-in.

From your use of the app

• Your active vow: the start time, end time, current state ("active", "completed", "expired"), and an opaque Family Controls selection blob produced by Apple's Screen Time framework. This blob references the apps and categories you chose, but it is not human-readable and cannot be decoded by us. It only resolves to specific apps when running on your device under your Apple ID.
• Your account–device pairing: the Apple ID identifier described above is also written to your iCloud Keychain so that reinstalling Vow on the same Apple ID resumes the active vow without re-authentication.

From subscriptions

Your subscription state (active or lapsed), product ID (monthly or yearly), and an anonymous purchaser identifier are processed by RevenueCat on our behalf. Apple processes the payment itself; we never see card numbers, billing addresses, or transaction details.

Product analytics

To understand how the app is used and to improve it, we record in-app product events using Mixpanel — for example, opening the app, viewing onboarding or paywall screens, starting or completing a vow, creating or editing a schedule, and errors. These events are tied to your Apple identifier (the same "sub" above) and carry coarse context such as your app version, OS version, subscription status, and how many schedules you have.

We deliberately limit what analytics can see:

• We never send Mixpanel the specific apps or categories you block. Apple's opaque token stays on your device and our backend and never reaches analytics.
• We never send your email address, your name, or any Sign in with Apple tokens. This exclusion is enforced in our code.
• We do not use Apple's advertising identifier (IDFA), and no advertising SDKs are integrated.

Our subscription processor, RevenueCat, also forwards subscription and revenue events to the same Mixpanel profile.

What we do not collect

• The specific apps or categories you have blocked. We see only Apple's opaque token.
• Your device-wide screen time, your app usage outside Vow, or your browsing history. (Our product analytics, described above, see only your activity inside Vow.)
• Location, contacts, photos, microphone, camera, calendars, health data, or any other system data.
• Apple's advertising identifier (IDFA). No advertising SDKs or ad-tracking are integrated.

Why we collect each piece

Where your data is stored

• Amazon Web Services (AWS) hosts our backend. Vow records and account identifiers are stored in Amazon DynamoDB, and our API runs on AWS Lambda. All data is hosted in the AWS us-east-1 region (US East — N. Virginia, USA).
• Apple iCloud Keychain holds a copy of your active vow on your devices. This data syncs through Apple's infrastructure and is not accessible to us.
• RevenueCat holds your subscription receipt and an anonymous identifier.
• Mixpanel holds the in-app product events described above, tied to your Apple identifier.
• Apple handles the App Store purchase, Sign in with Apple, and Family Controls authorization. Their handling of that data is covered by Apple's own privacy policy.

Sharing

We do not sell your information, and we do not share it with advertisers. The only third parties that receive any data are the service providers listed above (AWS, RevenueCat, Mixpanel, Apple), and only to perform the functions we use them for.

Retention

• Active vow record: kept while the vow is active, and for up to 30 days after it ends, to support cross-device recovery.
• Account identifier and email: kept while your account exists.
• Subscription state: kept while your subscription is active, plus the period Apple and RevenueCat require for receipt validation.
• Product analytics events: kept while your account exists, and deleted from Mixpanel when you delete your account.

Your rights

You can:

• Delete your account and data at any time by emailing support@makevow.app. We will erase your account record, any associated vow data, and your Mixpanel analytics profile within 30 days, except where retention is required by law.
• Cancel your subscription at any time through Settings › Apple ID › Subscriptions on your device. Cancellation does not delete your account.
• Revoke Sign in with Apple via Settings › Apple ID › Sign in with Apple. This will sign you out of Vow on this device.

Children

Vow is intended for adults working on their own digital habits and is not directed at children under 13. We do not knowingly collect information from children under 13.

Changes to this policy

If we change this policy in a material way, we will notify you in-app before the change takes effect.

Contact

Vow — support@makevow.app

For data deletion requests, please use the same email and include the email address associated with your Apple ID.