What data does Fold'em keep?

What is on the server

Seven things, and the reason for each is that the lock cannot work without it.

Your account: the identifier Sign in with Apple returns, plus your name and email if you chose to share them. Your exclusion: the term you chose, its start and end dates, how many things you blocked as plain counts such as twelve apps and ten websites, and how many blocked attempts happened, as hourly counts. Your keyholder arrangement: the first name you typed for them, and the email address they typed themselves on the page where they accepted and confirmed with a code, used only to send them invites, exit requests and protection alerts. If they left a phone number there, it is stored with their invite and shown only to you. Your keyholder's first name, shown to another keyholder: when you hand the key from one person to another, each of them is told the other's first name, because a handover neither of them can see is not one they can consent to. Your protection status: periodic check ins from the phone saying whether blocking is still active, which is what lets a keyholder be told when it is not. The app deletion lock: whether it is on, and if you start turning it off, which of three fixed reasons you picked. And your exit requests with their decisions.

What never leaves the phone

The exact apps and categories you blocked never reach the server, and this is a property of Apple's Screen Time technology rather than a promise we made: the picker hands the app opaque tokens that are meaningless outside the device that made them. Nobody at Fold'em can read your blocklist, and neither can your keyholder. The same is true of the site or app name behind any blocked attempt, which is why an attempt is counted and never named.

Three more things stay local by design: the craving logs and wins you record in SOS, your self reported weekly spending baseline, and the money kept figures worked out from it. Money kept is computed on the phone and never leaves it, which is why no dollar amount reaches a partner anywhere in the product.

What Fold'em never does

No advertising, no trackers, no analytics brokers. No selling or sharing of data for marketing, to anyone. No reading of your browsing history, because blocking happens on the device and a resolver answering a domain name is not a log of where you went. Subscriptions are processed by Apple, so payment details never reach us; we learn only whether a subscription is active. The app runs on Google Firebase for sign in, database and hosting, and uses Resend in the EU region to deliver keyholder emails, and both act only on our instructions.

What a keyholder sees is narrower still

Everything above is what the service holds. What actually reaches another person is a much shorter list: a first name, a lock status, day counts and dates, milestones, and the type and count of events. Never an app, never a site, never an amount, never anything you typed. There are exactly eleven things on that list and they are written out one by one in What does my keyholder see?, which is where to look if that is the question you came with. A witness sees a subset of it, named on the same page.

What this does not do

Fold'em cannot show you a list of the apps you blocked, because it cannot read one. It cannot tell you which site an attempt was against, for the same reason. It does not hold your payment details, and it cannot answer a question about a charge. A keyholder's email address belongs to them, not to you, and cannot be changed on their behalf from inside the app. Data is kept while the account exists and is removed when the account is deleted, so there is no separate button that erases your history and leaves you signed in.