Privacy Policy

ScrollCop: App Blocker for iOS · Last updated 7 September 2026

The short version: The short version: ScrollCop has no account and no server. Everything you enter stays on your phone. We can't see it, and neither can anyone else.

What ScrollCop stores, and where

ScrollCop stores the following on your device only, in the app's private storage:

A small summary (for example, "block ends at 9:30 PM") is shared with ScrollCop's own widgets, Live Activity and Screen Time extensions through an App Group container on the same device, so the Lock Screen and Home Screen widgets can show it. That container is part of the app; it is not sent anywhere.

What ScrollCop does not do

Screen Time (Family Controls)

Blocking runs on Apple's Screen Time frameworks. When you allow Screen Time access, iOS lets ScrollCop ask the system to keep the apps you chose closed, and to count time spent in them. By design, Apple gives ScrollCop opaque tokens for the apps you pick in Apple's picker: ScrollCop cannot see which apps they are. Usage numbers shown inside ScrollCop's Insights are drawn by an Apple-controlled extension on your device; the app itself never receives the numbers. You can revoke access at any time in iOS Settings → Screen Time.

Apple Health (optional)

If you turn on Health context in Settings, ScrollCop reads steps, sleep, workouts and mindful minutes from Apple Health to show context lines in Insights. This is read-only, happens on your device, and is never written back or sent anywhere. You can revoke it in iOS Settings → Health → Data Access & Devices.

Notifications

Notifications (a block ending, a boundary reminder, a weekly review) are scheduled locally on your device. There are no push notifications and no re-engagement messages.

The friend key

When you invite a friend to hold your key, you send them a link or QR code yourself, using Messages or the share sheet. The invite carries your name and nothing secret. Your friend's device then makes the key: in ScrollCop it is kept in their Keychain, and on the web page at thebighead.ca it is kept in that browser's own storage and never sent to a server. They send back only the part that lets your phone check a code, which cannot be used to make one. Everything after the # in these links stays in the browser; browsers never send it to a server. The codes are checked on your phone. Choose someone you trust: they decide when you get a code.

Export and deletion

Settings → Export my data produces a JSON file of everything ScrollCop has logged, which you can save or share as you like. Settings → Delete everything removes all of it. Deleting the app also deletes its data.

Children

ScrollCop is not directed at children under 13 and does not knowingly collect information from anyone, of any age.

Changes

If this policy changes, the new version will be posted at this address with a new effective date. Because ScrollCop collects nothing, changes will be about wording, not about data.

Contact

Questions about privacy: info@thebighead.ca.