PRIVACY POLICY
- Download and use
our mobile application ( DO IT OR ELSE.) , or any other application of ours that links to this Privacy Notice
- Use
DO IT OR ELSE. .Do It Or Else LLC develops and operates Do It or Else, a consumer iOS mobile application designed to help users build habits, increase focus, and complete self-imposed tasks. Users voluntarily create "lock" sessions during which they restrict access to selected apps on their own device, and define "keys" — task-based unlock conditions — that they must complete to end the session. Keys are verified through a combination of Apple HealthKit data (workouts, step counts, activity ring progress, and other fitness metrics), precise GPS location, timers, app usage tracking via Apple's Screen Time framework, NFC tag scanning, biometric authentication, and other device features.
- Engage with us in other related ways, including any marketing or events
OUR CORE PRIVACY PROMISE
The most sensitive data inside the DO IT OR ELSE app — your Screen Time activity, the apps you choose to lock, your HealthKit fitness data, your precise GPS location, and your NFC tag history — stays on your iPhone. We never see it. We never transmit it to our servers. We never store it on our servers. We never share or sell it to third parties.
We do use standard advertising and analytics tools on our website and for ad campaigns (such as Google Analytics, Meta Pixel, Google Ads, and TikTok Pixel) to measure marketing performance and reach prospective users. Those tools are described in Section 5 and only operate on website visits and ad interactions. They never have access to the focus, health, location, or Screen Time data inside the app.
What this means: Your in-app focus data is private and stays on your phone. Our marketing measurement tools track website visits and ad clicks like most companies do — they do not see what you do inside the app.
SUMMARY OF KEY POINTS
TABLE OF CONTENTS
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.names
email addresses
contact preferences
contact or authentication data
health data
- Geolocation Information. With your permission, our app reads your precise GPS location on your device to support location-based focus keys (geofences). Location data is processed entirely by your iPhone's Core Location framework — it is never transmitted to our servers, never stored on our servers, and never shared with third parties. We do not track your movements or build a location history. You can revoke location permission at any time in your device's Settings.
- Mobile Device Access. We may request access or permission to certain features from your mobile device, including your mobile device's HealthKit data (workouts, step counts, distance, calories, exercise minutes, and Activity Ring progress), Reminders, Push Notifications, NFC, precise Location, Family Controls and Screen Time data, and biometric authentication via Face ID. Each permission is requested only when you create or use a corresponding focus key, and can be revoked at any time. If you wish to change our access or permissions, you may do so in your device's settings.
- Mobile Device Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware model Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server). If you are using our application(s), we may also collect information about the phone network associated with your mobile device, your mobile device’s operating system or platform, the type of mobile device you use, your mobile device’s unique device ID, and information about the features of our application(s) you accessed.
Information automatically collected
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.- Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called
"crash dumps" ), and hardware settings).
- Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
Information collected from other sources
In Short: We receive limited subscription status data from Apple, and may receive aggregated, anonymous analytics or crash data from our service providers.
We may receive information about you from third parties only in these limited situations: (1) Apple provides us with subscription status (active, expired, in trial, etc.) when you purchase or renew a subscription via the App Store; (2) our service providers (such as our analytics, crash reporting, and email vendors) may pass aggregated or pseudonymous data back to us about how the Services are used. We do not purchase, license, or otherwise acquire personal information about you from data brokers, marketing partners, public databases, or social media platforms.
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.- To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.
- To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
- To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
- To request feedback. We may process your information when necessary to request feedback and to contact you about your use of our Services.
- To send you marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time. For more information, see
" WHAT ARE YOUR PRIVACY RIGHTS? " below.
- To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
- To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.
- To determine the effectiveness of our marketing and promotional campaigns. We may process your information to better understand how to provide marketing and promotional campaigns that are most relevant to you.
- To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e.- Consent. We may process your information if you have given us permission (i.e.
, consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.
- Performance of a Contract. We may process your personal information when we believe it is necessary to
fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
- Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:
- Send users information about special offers and discounts on our products and services
- Develop and display
personalized and relevant advertising content for our users
Analyze how our Services are used so we can improve them to engage and retain users
- Support our marketing activities
- Diagnose problems and/or prevent fraudulent activities
- Understand how our users use our products and services so we can improve user experience
- Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
- Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
- If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
- For investigations and fraud detection and prevention
- For business transactions provided certain conditions are met
- If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
- For identifying injured, ill, or deceased persons and communicating with next of kin
- If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
- If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
- If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
- If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
- If the collection is solely for journalistic, artistic, or literary purposes
- If the information is publicly available and is specified by the regulations
- We may disclose de-identified information for approved research or statistics projects, subject to ethics oversight and confidentiality commitments
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Special protections for HealthKit, Family Controls, and on-device data
In Short: HealthKit, Family Controls / Screen Time, and precise location data are processed entirely on your device. We do not transmit, sell, or share this data with any third party for any purpose.
The following categories of data are processed exclusively on your iOS device and are never transmitted to our servers, sold, shared with third parties, used for advertising, or used to derive marketing profiles:
- Apple HealthKit data (workouts, step counts, distance, calories, exercise minutes, and Activity Ring progress) — used solely on-device to verify whether you have completed a focus key you configured. We do not use HealthKit data for advertising or marketing, and we do not sell or share HealthKit data. This commitment is required by Apple's HealthKit policy and is reaffirmed here.
- Family Controls and Screen Time data (the apps and app categories you select to lock, application tokens issued by Apple's Family Controls framework, and your Screen Time usage data) — used solely on-device to apply and lift the locks you configure. This data is not transmitted to our servers, not shared with third parties, and not sold.
- Precise geolocation (used for geofence-based focus keys) — processed on-device to detect when you arrive at, leave, or remain within a location you have specified. Your precise location is not transmitted to our servers, not shared with third parties, and not sold.
- NFC tag identifiers (used for tag-based focus keys) — read on-device and compared against tags you have registered. NFC data is not transmitted to our servers.
- Face ID biometric authentication — Face ID is processed entirely by Apple's operating system. We never receive, access, or store any biometric data; we receive only a yes/no authentication result.
Marketing analytics and advertising tools
In Short: We use standard marketing measurement tools on our website and for ad campaigns. These tools do not have access to data inside the app.
We use the following third-party analytics, advertising, and attribution services on our website (doitorelse.app) and in connection with marketing campaigns:
- Google Analytics 4 (GA4) — first-party analytics cookies for aggregated website performance reporting. You can opt out by installing the Google Analytics Opt-out Browser Add-on.
- Google Ads — used to measure ad campaign performance and to display ads to people who have previously visited our website. You can manage Google ad settings at adssettings.google.com.
- Meta Pixel (Facebook / Instagram Ads) — used for ad performance measurement, conversion tracking, and remarketing to users who previously visited our website or interacted with our ads. You can manage your Meta ad preferences in your Facebook or Instagram settings.
- TikTok Pixel — used to measure TikTok ad campaign performance and reach prospective users. You can manage TikTok ad preferences in your TikTok settings.
These tools operate solely on our marketing website and in connection with paid advertising campaigns. They do not have access to any data inside the DO IT OR ELSE app — including Screen Time, HealthKit, location, or focus session data — which is processed entirely on your device as described in Section 4.
6. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as necessary to7. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We aim to protect your personal information through a system ofWe will never request your account credentials. DO IT OR ELSE LLC and its representatives will never ask you for your password, your Sign in with Apple credentials, or any other authentication information by email, text message, or phone. If you receive a message claiming to be from us asking for credentials, do not respond — please report it to privacy@doitorelse.app and check your account from a trusted device.
8. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from children under 13. Users between 13 and 17 must have a parent or guardian’s consent to use the Services9. WHAT ARE YOUR PRIVACY RIGHTS?
In Short:Account Information
If you would at any time like to review or change the information in your account or terminate your account, you can:Log in to your account settings and update your user account.
10. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (Global Privacy Control (GPC). In addition to DNT, some browsers and browser extensions support the Global Privacy Control signal (GPC), which communicates a user's opt-out preference for the sale or sharing of personal information. To the extent we engage in any activity that constitutes a "sale" or "sharing" of personal information under applicable US state laws (such as California's CCPA), we honor GPC signals received from your browser as a valid opt-out request. You can learn more at globalprivacycontrol.org.
11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
In Short: If you are a resident ofCategories of Personal Information We Collect
The table below shows the categories of personal information we have collected in the past twelve (12) months. The table includes illustrative examples of each category and does not reflect the personal information we collect from you. For a comprehensive inventory of all personal information we process, please refer to the section| Category | Examples | Collected |
|---|---|---|
A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name |
B. Personal information as defined in the California Customer Records statute | Name, contact information, education, employment, employment history, and financial information |
Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data | ||
Transaction information, purchase history, financial details, and payment information | ||
Fingerprints and voiceprints | ||
Browsing history, search history, online | ||
Device location | ||
Images and audio, video or call recordings created in connection with our business activities | ||
Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us | ||
Student records and directory information | ||
Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics | ||
- Receiving help through our customer support channels;
- Participation in customer surveys or contests; and
- Facilitation in the delivery of our Services and to respond to your inquiries.
- Category
K - As long as the user has an account with us
- Category
L - As long as the user has an account with us
Sources of Personal Information
Learn more about the sources of personal information we collect inHow We Use and Share Personal Information
Your Rights
You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:- Right to know whether or not we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to request the deletion of your personal data
- Right to obtain a copy of the personal data you previously shared with us
- Right to non-discrimination for exercising your rights
- Right to opt out of the processing of your personal data if it is used for targeted advertising
(or sharing as defined under California’s privacy law) , the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ( "profiling" )
- Right to access the categories of personal data being processed (as permitted by applicable law, including the privacy law in Minnesota)
- Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in
California, Delaware, and Maryland )
- Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in
Minnesota and Oregon )
- Right to obtain a list of third parties to which we have sold personal data (as permitted by applicable law, including the privacy law in Connecticut)
- Right to review, understand, question, and depending on where you live, correct how personal data has been profiled (as permitted by applicable law, including the privacy law in
Connecticut and Minnesota )
- Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including the privacy law in California)
- Right to opt out of the collection of sensitive data and personal data collected through the operation of a voice or facial recognition feature (as permitted by applicable law, including the privacy law in Florida)
How to Exercise Your Rights
To exercise these rights, you can contact usRequest Verification
Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes.Appeals
Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us atCalifornia "Shine The Light" Law
California Civil Code Section 1798.83, also known as the 12. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?
In Short: You may have additional rights based on the country you reside in.Australia and New Zealand
- offer you the products or services that you want
- respond to or help with your requests
- manage your account with us
- confirm your identity and protect your account
Republic of South Africa
At any time, you have the right to request access to or correction of your personal information. You can make such a request by contacting us by using the contact details provided in the section13. DO WE MAKE UPDATES TO THIS NOTICE?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.DE-IDENTIFIED AND AGGREGATED DATA
In Short: Once data is anonymized so it can no longer identify you, it is no longer personal information.
We may aggregate or de-identify personal information we collect, such that the data can no longer reasonably be used to identify you. Once information has been de-identified or aggregated, it is no longer considered personal information under this Privacy Notice or applicable law. We may use or share de-identified or aggregated data for any lawful purpose at our sole discretion, including to improve the Services, develop new features, generate industry-level insights, or report on usage trends. We will not attempt to re-identify de-identified data or share it with third parties for the purpose of re-identification.