Privacy Policy

1. Introduction

Welcome to bloc ("we," "our," or "the app"). bloc is a focus and productivity app paired with a physical device that helps users block distracting apps during timed focus sessions. This Privacy Policy explains what data we collect, how we use it, and your rights when you use our iOS mobile application, physical device, and website at www.letsbloc.com (collectively, the "Services").

Please read this Privacy Policy carefully. By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. Information We Collect

Account Information

When you sign in with Google, we collect:

• Name: Your Google account display name, shown in your in-app profile
• Email address: Your Google account email, used for authentication and account identification
• User ID: A unique identifier linked to your account

Profile Information

You may optionally provide:

• Phone number: For profile completion purposes only

Usage Data

We collect anonymized usage data to improve the app experience:

• Focus session duration and frequency
• Feature interaction events (e.g., starting a session, completing a friction challenge)
• App settings and preferences (e.g., preferred session duration, streak data)

Diagnostics

We collect diagnostic data to maintain app stability:

• Crash reports and error logs
• App performance metrics
• Device type and operating system version

Device Data

When you use the bloc physical device, we collect data necessary for its operation, including:

• Bluetooth connection status and signal strength (for device pairing and proximity detection)
• Device interaction events (tap to unlock, shake to unlock)
• Firmware version and device health status

Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and approximate location (country/region level only)
• Browser type and version
• Pages visited and time spent
• Referring website

3. Data Linked to Your Identity

The following data is linked to your identity via your account:

• Name
• Email address
• Phone number (if provided)
• User ID
• Focus session statistics

Data Not Linked to Your Identity

The following data is collected anonymously:

• Crash data
• Performance diagnostics
• Device identifiers (for analytics only)

4. How We Collect Your Data

We collect information through the following methods:

• Directly from you: When you sign in with Google, contact support, or configure app settings.
• From Apple frameworks: Screen Time API (DeviceActivity, FamilyControls, ManagedSettings) provides app blocking functionality. This data stays on your device.
• From the bloc device: Via Bluetooth Low Energy (BLE) or NFC connection between the physical device and your phone.
• From Android Accessibility Service: Detects the foreground app package name to enforce app blocking during focus sessions. No screen content is read or stored.
• From Firebase: Authentication, preference sync, anonymized analytics, and crash reporting.
• Automatically: Via cookies and similar technologies on our website.

5. How We Use Your Data

All data is used solely for app functionality and analytics. Specifically:

• Account and profile information: To authenticate you, display your profile, and sync your preferences across sessions
• Usage data: To track your focus statistics (total focus time, sessions completed, streaks) and improve the app
• Diagnostics: To identify and fix bugs and improve app performance
• To pair your iPhone with the bloc physical device
• To block and unblock apps based on your focus session settings
• To send you updates about product launches and offers
• To process in-app purchases (handled entirely by Apple via StoreKit)
• To provide customer support and respond to your inquiries
• To detect, prevent, and address technical issues or security threats
• To comply with legal obligations

6. Screen Time and App Blocking

bloc uses Apple's Screen Time APIs (FamilyControls and ManagedSettings) to block apps during focus sessions. The list of apps you select to block is processed entirely on-device using Apple's privacy-preserving opaque tokens.

We never see or store the names or identifiers of the apps you block. All Screen Time data remains on your device and is never transmitted to our servers or shared with any third party.

7. Android Accessibility Service

On Android, bloc uses the Accessibility Service to detect when you open a blocked app during an active focus session. The service reads only the package name of the foreground app and compares it against your block list.

We do not collect, transmit, or store any content displayed in other apps. The Accessibility Service is used solely for the core app-blocking functionality. No screen content, text, images, or personal information from other apps is accessed or recorded.

8. NFC Data

When you pair the bloc physical device using NFC, the NFC tag identifier is stored locally on your device using Android EncryptedSharedPreferences. This data is encrypted at rest and never transmitted to our servers.

NFC is used solely to verify proximity to the physical bloc device when unlocking blocked apps. No other NFC data is read or processed.

9. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties, advertisers, or data brokers. We may share your information only in the following circumstances:

• Service Providers: We share data with Firebase (Google Cloud infrastructure) for authentication, data storage, analytics, and crash reporting. All third-party service providers are contractually obligated to provide the same or equal level of protection for your data as described in this Privacy Policy.
• Accountability Partners: If you opt in to the accountability feature, limited usage data (such as focus session completion) may be shared with your designated accountability partner(s). You control what is shared and can revoke access at any time.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

10. Tracking

We do not track you across other companies' apps or websites. We do not engage in cross-app tracking or targeted advertising.

11. Third-Party SDKs and Services

We use the following third-party services:

• Firebase Authentication (Google): For sign-in and account management
• Firebase Firestore: For syncing your preferences and session data
• Firebase Analytics: For anonymized usage analytics
• Firebase Crashlytics: For crash reporting and diagnostics
• Apple StoreKit: For in-app purchases (managed entirely by Apple)
• Apple Screen Time APIs (DeviceActivity, FamilyControls, ManagedSettings): For app blocking functionality. Data processed by these frameworks remains on your device and is governed by Apple's Privacy Policy.

We do not share your personal data with advertisers, data brokers, or any other third parties beyond those listed above. All third-party service providers are bound by contractual obligations to protect your data and provide the same or equal level of data protection as described in this Privacy Policy.

12. Data Storage and Security

Your data is stored securely using Firebase (Google Cloud infrastructure) with encryption in transit and at rest. Focus session data and preferences are also stored locally on your device using iOS secure storage or Android DataStore. NFC tag identifiers are stored in Android EncryptedSharedPreferences.

Additional security measures include:

• Encryption of all data in transit (TLS/SSL) and at rest
• Secure Bluetooth Low Energy (BLE) communication between the app and physical device
• On-device processing of sensitive Screen Time data using Apple's opaque tokens
• Android EncryptedSharedPreferences for sensitive local data such as NFC tag identifiers
• Regular security assessments and access controls

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

13. Data Retention and Deletion

Your data is retained as long as you maintain an active account. Specifically:

• Account data: Retained while your account is active and deleted within 30 days of account deletion.
• Usage data: Focus session statistics are synced via Firebase and deleted with your account. Locally stored data is deleted when you uninstall the app.
• Waitlist data: Retained until the product launches or you request removal.
• Diagnostics: Crash reports and performance data are retained for up to 90 days.
• Support communications: Retained for up to 12 months for quality assurance.

You can request deletion of your account and all associated data by contacting us at the email below or by navigating to Settings > Account > Delete Account in the app. Upon deletion, all personal data will be removed from our servers within 30 days.

14. Your Rights and Choices

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a machine-readable format
• Withdraw consent to data processing at any time, without affecting the lawfulness of processing before withdrawal
• Opt out of marketing communications at any time

How to Withdraw Consent

You can withdraw consent for data collection at any time by:

• Disabling Screen Time permissions in iOS Settings > bloc
• Disabling the Accessibility Service in Android Settings > Accessibility > bloc
• Unpairing the bloc device in the app settings
• Deleting your account via Settings > Account > Delete Account
• Contacting us at yashverma.iitkgp@gmail.com

15. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
• Right to Opt-Out of Sale: We do not sell your personal information.

16. International Users (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on consent, contractual necessity, or legitimate interests.
• Data Transfers: If your data is transferred outside the EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data.
• Right to Object: You may object to processing based on legitimate interests.

17. Children's Privacy

bloc is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verified parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at yashverma.iitkgp@gmail.com and we will delete the information.

18. Third-Party Links

Our Services may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our Services.

19. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the app and by updating the "Last updated" date on this page. Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy.

20. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

We will respond to all privacy-related inquiries within 30 days.