Privacy Policy
Squishy is available as a Chrome extension and an iPhone app. Both are built to keep blocking and Screen Time details as local as possible while still supporting purchases, analytics, notifications, and optional iPhone-to-Chrome sync.
The short version
- Your block lists, schedules, Screen Time app selections, and active unblock states stay on the device where you created them.
- If you turn on Sync with Chrome, Squishy uses an email sign-in code and stores the shared Squishy state needed to keep iPhone and Chrome aligned.
- Synced activity can include health changes, streaks, skins, difficulty, daily happiness history, aggregate focus/block stats, and Chrome blocked-domain activity shown in your recent activity.
- We do not sell your data, run ads, use ad tracking, or fingerprint you.
What's stored on your device
On Chrome
The extension uses Chrome's storage.local to keep local settings and progress on your device: your mascot state, block groups and schedules, the domains you block, focus settings, local top-site stats, health activity, and purchase or sync status. Uninstalling the extension deletes local extension data.
On iPhone
The app stores the same kind of data in a private App Group container on your device: your mascot state, skin, happiness, difficulty, streak, focus and recovery settings, stats, and Screen Time configuration. Deleting the app deletes local app data.
Screen Time data: Squishy uses Apple's Screen Time frameworks (Family Controls, Device Activity, and Managed Settings) to do the blocking. The specific apps you select and your usage of them are handled by iOS on your device and are represented to Squishy as opaque tokens. Squishy does not send your selected app names, app tokens, or raw Screen Time usage to our servers. The app may record aggregate events, such as a block or recovery, to update Squishy's happiness and recent activity.
How blocking works
On Chrome
Squishy uses Chrome's declarativeNetRequest API to redirect blocked domains to its takeover page. Chrome itself does the matching. Squishy does not collect your full browsing history. Local stats can include aggregate per-domain hit counts for the sites you chose to block. If Sync with Chrome is enabled, a block activity row may include the blocked domain so it can appear in recent activity on iPhone.
On iPhone
Apple's Screen Time enforces the shield on the apps and categories you choose. Those selections live on your device as opaque tokens; we never receive the identity of the apps you block.
Sync with Chrome (optional)
If you connect iPhone and Chrome, Squishy uses Supabase for email one-time-code sign-in, account sessions, entitlement checks, and sync storage. Resend may send the sign-in code email. We store your email address, a user ID, linked device records, subscription entitlement status, and sync timestamps.
Synced Squishy data can include current health, selected skin, difficulty, streak, best streak, last streak day, daily happiness history, recent health activity, and aggregate activity stats such as blocks, recoveries, focus sessions, and estimated time saved. Chrome activity can include a blocked domain label. iPhone activity does not include the names of Screen Time apps you selected.
We do not sync your Chrome block lists, Chrome schedules, Chrome top distracting sites, iPhone Screen Time app selections, iPhone app/category tokens, active temporary-unblock state, or raw browsing/app-usage history. You can unlink sync from iPhone or Chrome, which stops future sync on that device.
Purchases
On Chrome (Lemon Squeezy)
If Chrome Premium is purchased directly through Lemon Squeezy, Lemon Squeezy collects the information needed to process payment, handle tax, issue receipts, provide your license key, and support refunds. Their privacy practices are at lemonsqueezy.com/privacy. The extension stores license or activation details needed to confirm Chrome Premium.
On iPhone (Apple)
Premium for iPhone is an auto-renewing subscription, processed by Apple. We never receive your payment card details. To manage subscriptions, confirm access, and unlock synced Chrome access for eligible accounts, we use RevenueCat. RevenueCat receives App Store purchase events, product and entitlement status, and app-assigned identifiers. RevenueCat's privacy practices are at revenuecat.com/privacy. Manage or cancel your subscription in your Apple ID settings.
Analytics and notifications
The iPhone app uses PostHog for product analytics such as onboarding screen views, onboarding completion, paywall events, purchase success events, and app-assigned user identifiers. We use this to understand drop-off and improve Squishy, not for advertising.
The iPhone app uses OneSignal for push notifications if you grant notification permission, and to support subscription-related messaging such as trial reminders or win-back notifications. OneSignal may receive an app-assigned user ID, push token, notification status, and tags needed to send those notifications.
Notifications (iPhone)
With your permission, Squishy sends notifications, such as when a recovery session completes or before a free trial ends. You can turn notifications off in iOS Settings.
Cookies and tracking
Neither the extension nor the app uses advertising IDs, ad trackers, fingerprinting, or session replay. This website (squishyapp.com) loads Google Fonts for typography; Google may receive your IP address when the font files load, per their standard CDN behavior. We do not run ad tracking on this site.
Sharing your data
We do not sell your data or share it with advertisers or trackers. The third parties that may handle data on our behalf are Apple (iPhone subscriptions), RevenueCat (subscription management and entitlement checks), Supabase (optional account sync), Resend (sign-in code email), Lemon Squeezy (direct Chrome purchases, if used), PostHog (iPhone product analytics), OneSignal (iPhone notifications), and Google Fonts (website font delivery).
Your control
- Delete all local data by uninstalling the extension or deleting the app.
- Disconnect Sync with Chrome at any time to stop future sync on that device.
- Delete your optional sync account in the iPhone app from Settings → Sync with Chrome → Delete sync account. This deletes the server-side sync account and synced Squishy data tied to that account.
- Manage or cancel an iPhone subscription in your Apple ID settings.
- Deactivate Chrome Premium from the Account section, which removes locally stored activation details.
- Contact us at hello@blankslateapps.com for privacy requests that are not covered by the in-app controls.
Children
Squishy is not directed at children under 13. If you are under 13, please do not use it.
Changes to this policy
If we update this policy, we will revise the date at the top. Material changes will be noted on the Squishy website. Continued use after a change means you accept the updated policy.
Contact
Questions about privacy can go to hello@blankslateapps.com.