PRIVACY
Privacy Policy
Asr is built around one boundary: what the app measures stays on your phone. The server keeps only what it takes to run your account, your challenge, and the people you asked to watch it.
Effective September 5, 2026
1. What we collect
Account information: email, full name, profile photo, date of birth, country and gender. Challenge information: selected apps, daily limits, challenge duration, challenge status, breach events and earned-time activity records. Device and protection information: Usage Access status, display-over-other-apps status, notification permission status, selected-app usage duration and foreground usage events needed to enforce limits.
2. App usage and blocking
Usage Access is used to measure how long each app you selected has been in the foreground, to enforce your limits and to show your progress. The "display over other apps" permission is used to put the block screen in front of a selected app once its limit is reached. This app reads the package name of the app in the foreground and how long it was there. It does not read messages, passwords, typed text, photos or anything shown inside another app, and it does not use Android's accessibility service. What the app measures stays on your phone. The server receives the apps you chose to limit, their limits, the daily minutes for each of them, and the moments a limit was reached. It never receives the list of other apps on your phone, or when you opened what.
3. Activity rewards
If you choose a walking reward, we may process step-count or motion data during the activity to verify completion. Step-based walking rewards do not require GPS or location access.
4. Accountability features
If you add witnesses, we store the relationship you selected, invite status and witness reactions. If your pact is breached, selected challenge information such as the breached app, breach status and time may be shared with your active witnesses. We do not share your messages, passwords or unrelated app content.
5. How we use data
We use data to create and secure your account, enforce app limits, operate challenges, calculate progress, grant earned time, deliver protection alerts, power witness notifications and improve reliability.
6. Sharing
We use service providers to run the service: hosting, sign-in, push notifications, crash reports and product analytics (Google Firebase), email (Resend) and profile-photo storage (Cloudflare R2). A crash report carries the app version, the phone model and Android version, and where in the app the failure happened; never your usage, your witnesses or anything you typed. Analytics receives a small number of product events, such as an account being created, a challenge starting, an invitation going out or a challenge ending, with the app version, the phone model, your country and language and a random identifier for the installation; never the apps you limit, your minutes, your name, your email address or your witnesses. The advertising identifier is switched off. There is no advertising provider in the app. Witnesses receive only the accountability information described above. We do not sell personal data to advertisers.
7. Retention and deletion
We retain information while your account is active and as needed for security, legal obligations and challenge history. You can request deletion from Personal details, then Delete account & data. Deletion removes the account and data that we are not required to keep.
8. Security and changes
We use reasonable technical and organizational safeguards to protect data. No system is perfectly secure. We may update this policy as the service changes and will publish a new effective date.
9. Contact
Asr is operated by Ariyan Khan, House 16, Road S11, Block L, Eastern Housing (Pallabi Phase 2), Rupnagar, Mirpur, Dhaka, Bangladesh. For privacy questions or requests, email hi@ariyankhan.com or use Help & Support inside the app.