Privacy Policy for صخر

1. Who we are

The party responsible for the data is صخر.

To contact us, write to getsakhr@gmail.com.

This policy is published at sakhr.app/en/privacy, and support is at sakhr.app/en/support.

صخر is a self-control app that locks the apps that distract you when you tap the piece with your phone.

2. What stays on your phone only

This data stays on your phone and is never sent to us.

• The apps, categories and websites you chose for each mode.
• Mode names and mode types.
• Lock state and when it started.
• Lock sessions, start and end, to calculate how long you were locked today.
• The number of emergency unlocks used and when they were used.

The piece key and identifier are kept in the Keychain on this phone, and do not move to another phone or to iCloud.

They pass through our server once at binding and are not stored there, as described in section 4.

Locking and unlocking happen on your phone and never reach our server.

When you lock or unlock, how long you stay locked, and which app you tried to open are never sent to us.

3. What we send to our server and why

At first registration and when you bind the piece, we send and store the following.

• A random device identifier generated by the app, to link the piece to your phone and to limit request rates.
• An App Attest key identifier, which proves the request comes from the genuine app.
• A one-way fingerprint (HMAC) of the piece identifier, not the identifier itself, so we know which piece is bound to your phone.
• The piece status and its batch number.

We also keep a security event log of bind and rebind events and failed authentication attempts, and failure counters and waiting periods for the device and the piece, to protect pieces from remote lockout.

Each record also keeps the time it was created.

Its purpose is security, support and resolving disputes when a piece is rebound.

4. What passes through our server without being stored

• The raw piece identifier and its originality signature, to check it is a genuine piece programmed by صخر, then we turn it into a fingerprint and do not keep the original.
• The new key of your phone at binding time, passed once so we can write it into the piece, and never stored or logged.
• The app version with binding requests, so we can ask you to update if your version is too old.
• Your IP address, which is technically needed to connect and to limit request rates, and which we do not store in our database, and is kept only temporarily for rate limiting and abuse prevention, then deleted.

5. When you contact us

Contact us in the app opens a chat with our support team in WhatsApp.

Contacting us through WhatsApp is subject to the WhatsApp privacy policy, and it reveals your phone number to our support team.

If you write to us on WhatsApp, we receive your phone number and your message, and we use them only to reply and handle your request.

If WhatsApp support is not available in the app, Contact us opens an email in the mail app on your phone, and it contains your device identifier.

You can see the identifier in the email before sending and remove it.

If your phone has no mail account, the app shows our support email and your device identifier so you can copy them and write to us yourself.

If you send it, we receive your email address, your message and your device identifier, and we use them only to reply and handle your request.

6. What we never collect

• Name, email and phone number, except your email or phone number if you write to us yourself.
• Your location, contacts and photos.
• The names of the apps you block.
• Browsing history.
• The advertising identifier (IDFA).
• Any tracking across other apps or websites.

We use no third-party libraries, no analytics tools and no ads.

7. Who processes data

• Cloudflare, to host the server and database.
• Apple, for verification through App Attest.
• Apple also handles crash reports, which reach us only if you turned on sharing with developers in your iPhone settings.

The صخر website sets no cookies and no analytics, and is hosted by Cloudflare, which may set a strictly necessary security cookie to protect the site, and processes your IP address to deliver and protect the pages.

Data may be processed or stored outside the Kingdom of Saudi Arabia.

We follow the transfer requirements of the Saudi Personal Data Protection Law (PDPL).

8. How long we keep data

• Device and piece binding, as long as the piece is bound, and we delete them on your request, and a device with no bound piece is deleted automatically one year after its last activity.
• Event log, 90 days, then deleted, and when you delete your data, security events remain until their period ends, with a one-way fingerprint in place of your device identifier, together with the piece fingerprint where present.
• Contact messages, until your request is closed, then deleted within 12 months.
• Server logs if enabled, the shortest period the account allows, without IP address or request content.

9. Your rights

Under the PDPL you have the right to the following.

• To be informed how we use your data.
• To access your data.
• To get a copy of it.
• To correct what is wrong.
• To request its deletion.
• To withdraw your consent.

To use any right other than deletion and copy, write to getsakhr@gmail.com, and deletion and copy are made from inside the app.

We respond within 30 days.

There is no account, so requests to delete or copy your data are made from inside the app, because the request is signed by the genuine app on your phone and proves it is your device.

Uninstalling the app deletes its data from your phone but not the device data on our server, and the piece key may remain in the Keychain depending on iOS behavior.

After deletion we keep the piece generation number and its counters, and the emergency unlock counter stays on your phone and in the piece, to protect against tampering, and they contain no personal data, and security events remain until their period ends with a one-way fingerprint in place of your device identifier.

If you uninstalled the app and still have the piece, reinstall the app and tap the piece, the binding moves to your phone, then request deletion from inside the app.

If you have neither the piece nor the app, the device data is not linked to your identity and we cannot identify it, a device identifier alone in a message is not proof that it is yours, and device data with no owner is deleted automatically one year after its last activity.

You also have the right to complain to the Saudi Data and AI Authority (SDAIA).

10. Screen Time permission

صخر asks Apple for the Screen Time permission.

We use it only to block the apps you chose, on your own phone.

You can withdraw it at any time from iPhone Settings.

صخر is a self-control tool that adds friction for yourself.

We do not promise absolute blocking, because you can withdraw the permission whenever you want.

11. Children

The app is not designed to collect data from children.

We collect no names or contact details, except your email or phone number if you write to us yourself.

A minor should use the app with the knowledge of a guardian.

12. Security in brief

The connection to our server is encrypted with HTTPS.

The piece key is designed so it cannot be read from the piece, and authentication needs it.

Your keys do not leave your phone, except the new key that passes through once at binding.

We use measures to protect data, and we cannot promise absolute security.

13. Changes to this policy

We may update this policy.

We will write the date of the latest update at the top of the page.