Your screen time never leaves this phone.

LAST UPDATED · JULY 8, 2026

Resurface exists to give you attention back, not to take data from you. This page says what we store, where, and why — in plain language, because the legal version and the honest version should be the same document.

What stays on your phone

Your screen-time history. Whether measured through Apple's Screen Time framework or entered by hand, it lives in a local database on your device and is never uploaded.
Your urges, check-ins, and surfaced moments. Every intercept, every logged walk, every daily entry: on-device only.
Your onboarding answers. Which apps pull you under, when your phone wins, what you want the time back for — stored locally, never synced.
Your Depth Log. The one-line journal is never uploaded and never enters analytics. A line appears on a share card only when you place it there yourself.
Your Clarity history and Ascent record. Computed on the device from the data above.
Your reef. The aquarium grows from numbers already on your phone — hours reclaimed and milestones reached — and is computed there. Your reef lives on your phone: if you move to a new device without restoring its data, the reef starts growing again from your history on that device.

What our servers hold

Your login identity — an anonymous user ID, created only after you subscribe, and only if you choose to save your ascent with Sign in with Apple or Google.
Your subscription status — written by our payment processor so the app knows you are a subscriber.
If you link an accountability partner — the first name you choose to show them, and one row of aggregate flags per day: your streak day, whether the day counted, shield state, and a clarity trend (rising, steady, or dipped). Never minutes, never app names, never journal lines. Either side can end the link at any time, which stops the sharing.

That is the whole list.

Analytics

We measure how the product performs with pseudonymous events: a screen was viewed, a step was completed. Events are keyed to a random-looking identifier, never to your name or email, and they never contain app names, screen time amounts, or anything you typed or logged. Personal numbers — like the years figure in onboarding — are reduced to broad buckets before any event leaves the device.

Notifications

Local reminders are scheduled on your device and never touch a server. If you link a partner and opt in to nudges, we store your device's push token so our server can deliver at most one partner note per day. Ending the partnership or deleting your account removes it.

Services we rely on

Apple processes payments and refunds; we never see your payment details.
RevenueCat manages subscription state; it receives your user ID and purchase status, nothing else.
Supabase hosts the login identity and the short list above.
PostHog stores the pseudonymous product events described under Analytics.

Each processes data on our instructions to run the product. None of them may use your data for anything else.

Retention and deletion

Everything on your phone is yours: deleting the app deletes it. Everything on our servers can be removed in the app: Settings → Account → Delete account removes your login, subscription record, partner link, and push token immediately. Your subscription itself is managed and cancelled through the App Store. For anything else — including erasure of the pseudonymous analytics trail — write to us and we will handle it within 30 days.

Who we are

Resurface is built and operated by its maker; the app is for adults (18+) and is not directed at children. If this policy ever changes, the date at the top moves and material changes are called out in the app before they apply.

What we will never do

No ads, ever. We never sell attention back to you.
No selling or sharing of data. There is nothing to sell.
No marketing notifications. At most one nudge a day, and it exists to help you, not us.
No fake urgency, no fake counters, no charge-hiding. We remind you before your trial ends, and cancelling takes two taps.

This website

resurface.health sets no cookies and runs no trackers. There is nothing to accept or decline.

Questions

Write to [email protected]. A person reads it.