Privacy Policy

Effective July 20, 2026

SwornIn is built to know as little about you as possible. There is no account and no login, and almost everything the app stores lives on your device. The one exception is Trusted Contacts (Premium), which does use a server to relay a push notification to people you've invited — see below.

What stays on your device

Everything SwornIn stores is local to your phone. This includes:

• Your promises: the title, category, deadline, and recurrence you set
• The apps you chose as the consequence for each promise
• Your history: which promises you kept or broke, and your streak
• Any active penalty (a locked app, or SwornIn itself) and its expiry time
• Your permanent record: total strikes and lifetime broken-promise count (see below)

None of this leaves your device on its own. The one exception is a promise's title and deadline, which are sent to our server if you've enabled Trusted Contacts (Premium) — see below for exactly how and why.

Choosing consequence apps

On iOS, you choose apps through Apple's own Screen Time picker (FamilyActivityPicker). Apple deliberately does not tell SwornIn — or any app — which apps you selected. SwornIn only ever receives an opaque, anonymous token for each choice, used solely to apply and lift the block. SwornIn cannot see, store, or transmit the names or icons of the apps you protect on iOS.

On Android, there is no equivalent platform guarantee: SwornIn's on-device blocker needs the actual app list to enforce a block, so it does know which apps you selected. That list never leaves your phone — it's kept in local storage only.

Your signature

Signing the contract — your name, the date, and a finger-drawn signature — is part of the ceremony of making a promise. The drawn signature itself is never saved as an image and never transmitted; it exists only in the moment you swear.

Your permanent record

SwornIn is designed to remember one thing on purpose: your strike count and lifetime broken-promise count. This record is written to your device's secure, encrypted storage (Keychain on iOS) in addition to normal app storage, specifically so that deleting your data, deleting the app, or reinstalling does not erase it. It never leaves your device — the redundancy exists so the app can't be reset by wiping it, not so we can see it.

Notifications

Reminders and kept/broken alerts are local notifications scheduled directly on your device — no push notification service or third-party server is involved in these. Trusted Contacts (Premium), described next, is the one feature that does use push notifications.

Trusted Contacts (Premium)

If you invite a trusted contact, SwornIn sends that contact's device a push notification when you keep or break a promise, including the promise's title. This is opt-in on both sides: your contact must accept your invite before anything is sent. You can remove a trusted contact at any time from within the app, which stops notifications to them immediately. If you're the contact and want to stop receiving them, contact us and we'll remove the connection. No account or login is involved — each device is identified only by a random id it generates itself.

To make sure your contact still hears about a broken promise even if you never reopen SwornIn afterward, each active promise's title and deadline are held on our server between the moment you make the promise and the moment it resolves. If you keep it, that record is deleted immediately. If you don't, it's deleted the moment the deadline check fires and the notification goes out. It is never kept any longer than that, and only exists for promises made while Trusted Contacts is in use.

Meet Request

SwornIn's final consequence tier appears only after every paid reset has been used and you break a promise one more time — in practice, dozens of broken promises and every reset tier purchased. At that point, and only at that point, you're offered the option to submit your name (an alias or nickname is fine), a meeting spot of your choosing (not your home address), and, if you want, a phone number and/or email — so the person who built SwornIn can meet you in person, anywhere in the world. Every field is optional and can be left blank, including all of them at once. This whole feature is optional: you can close the app without filling anything in, submit as little or as much as you'd like, and a submitted request can be withdrawn from within the app at any time.

Unlike everything else in this policy, this can be real, identity-linked information if you choose to provide it — a name, phone number, and email are all voluntary. Whatever you submit is sent directly to the developer for the sole purpose of arranging that meeting, never used for tracking, advertising, or analytics, and never shared with anyone else.

What SwornIn does not collect

• No location data
• No camera, microphone, or photo library access
• No contacts access
• No advertising identifiers or ad SDKs
• No analytics or tracking SDKs, as of this policy's effective date

Children

SwornIn is intended for use by the device owner on their own device and is not directed at children under 13.

Changes to this policy

If this policy changes, the "Effective" date above will be updated. Material changes will be noted in the app's release notes.

Contact

Questions about this policy: privacy@noout.app