Privacy policy

Last updated: 1 October 2026

Gatekeep is an iPhone app that locks the apps you lose time in until you have done a few minutes of motivation. The data controller is Flavien Verloo, sole trader registered in France, SIREN 944 196 617, reachable at flavien.build@gmail.com.

1. The principle: almost nothing leaves your phone

Gatekeep has no account, no email, no server. Your settings, your categories, your streak, your favourites and anything you write in the app are stored on your device, in a container shared between the app and its extensions. None of it is sent to us, and we hold no copy of it.

The consequence is deliberate: if you delete the app, that data is gone, because there is no backup on our side to restore it from.

2. The apps you block

This is the most important paragraph on this page. Gatekeep uses Screen Time (Family Controls), Apple's own system. The apps you select are never handed to us as names: iOS gives them to us as opaque tokens, which cannot be read, guessed, or turned back into app names, not even by us.

Those tokens stay on the device. They are never transmitted, never logged, never sent to any analytics tool. Neither the list of what you block nor how long you spend in an app ever leaves your phone.

3. What we do not collect

• Your location, your contacts, your photos, your health data.
• Your browsing outside the app.
• The content of what you write in the app, the quotes you save, and your notes. Gatekeep asks you to write personal things; they are yours and they stay on the device.

The app's reminders are local notifications on your device: no notification identifier is sent to a server.

4. Subscription

The subscription is bought through your Apple account. Its status (active or not) is handled by Apple and by our provider RevenueCat (United States). We never see your payment details.

5. Product analytics, inside the app only

To understand how the app is used and improve it, we measure product events (for example “session finished”, “paywall shown”) with PostHog, on its European hosting. That measurement contains no Screen Time data and no written content: not what you block, not what you write, not what you save.

Legal basis: legitimate interest. It is configured to stay a usage statistic (no targeted advertising, no resale, no cross-app or cross-site correlation), in line with the French data protection authority's guidance. You can object by writing to flavien.build@gmail.com.

6. This website

This site is hosted by Vercel. It sets no cookies and uses no analytics, so there is nothing to accept or refuse when you arrive on it.

Like any web server, Vercel's keeps technical request logs (IP address, time, page requested, browser type) retained by the host for security and diagnostics. When you submit the form we write only the outcome of that submission into them (“created”, “already on the list”, “error”) and never your email address. Legal basis: our legitimate interest in running and securing the site.

7. The waitlist

If you leave your email on this site to be told about the launch:

• Data collected: your email address, and nothing else. No other information is asked for or stored with it, beyond the host's technical request logs described in §6.
• Purpose: to email you when the app launches, and nothing else. No newsletter, no recurring marketing.
• Legal basis: your consent (Art. 6(1)(a) GDPR), given by entering your email and submitting the form.
• Processor: Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, United States). Transfers outside the European Economic Area are covered by the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework, as set out in Resend's data processing agreement.
• Retention: until the app launches, or until you ask to be removed if that comes first, then deletion.
• Withdrawal: you can withdraw your consent and ask for your email to be deleted at any time, with no reason to give, by writing to flavien.build@gmail.com.

8. Your rights

You have the rights of access, rectification, erasure, portability and objection. For data held in the app, deleting the app is the simplest and most complete route: there is no copy anywhere else. For anything else, write to flavien.build@gmail.com. You can also complain to the French data protection authority (cnil.fr).

9. Children

Gatekeep is not intended for children under 13.

10. Changes

Any change to this policy will be published at this address together with its update date.