WHITE STEED
Privacy policy
THE SHORT VERSION
White Steed never sees what you look at. There are no screenshots, no screen recording and no browsing history.
Your streak, urges, check-ins, notes and your reason stay on your phone and are never sent to us.
The only things that reach our server are what it needs to tell your accountability partner: your first name, their contact details, and whether protection is on.
No ads. No tracking. We do not sell or share your information.
Who this covers
This policy covers the White Steed app and the alert server that supports it. "We" means Northstone Publishing LLC, the company that makes White Steed.
What stays on your phone
These are saved on your device only. We cannot read them and they are never sent to our server:
- Your streak, your best streak, resets and clean days overall.
- Every urge you log and anything you write about it.
- Your daily check-ins and the notes on them.
- Your own reason for quitting.
- Which lessons you have read, and your Christian Mode settings.
- The apps and websites you chose to block.
Blocking is done on the phone by Apple's Screen Time. Apple does not tell White Steed which websites you visit or which apps you open, so we have no record of either.
What our server holds
White Steed has no sign-up: no email address, no password and no profile for you. When you finish setup, your phone is given a random ID so the alert server can do one job, which is telling your partner. For that it holds:
- Your first name, if you gave one, so alerts say who they are about.
- Your partner's name, mobile number and email address, as you typed them.
- A notification address for your phone (an Apple push token), so the server can notice if the app is deleted.
- Whether protection and Screen Time access are on, and when your phone was last heard from.
- The alerts sent to your partner, such as "removal requested" or a check-in you chose to send. A check-in message includes your day count. If you ask to unblock an app, the alert names that app. Only the most recent 200 alerts are kept.
- Shared plan details, if you add devices: the name you gave each device and a one-time code that expires after 24 hours.
Your removal code is passed to your partner when you hand it over, and is not stored on the server. The one exception: texts are only sent to a partner after they reply YES to our first text, so until then a text waiting for them, which can include the code, is held for at most 7 days and then deleted.
To stop abuse, the server counts requests per network address for the current day. Those counts are deleted the next day.
What we never collect
- Screenshots or recordings of your screen.
- Browsing history, search history or app usage.
- Your location, contacts, photos, camera or microphone.
- Advertising identifiers. White Steed contains no advertising and no analytics or tracking tools.
If you are an accountability partner
The person you support gives us your name and the mobile number or email address they want you reached on. We use them only to send you alerts about that person. We text you once to ask if you agree, and send nothing more by text unless you reply YES. Reply STOP at any time to stop all texts. If you install White Steed and link it with their invite code, the server also holds a notification address for your phone. You can unlink at any time in the app, which deletes that record. Partners never pay and are never sent marketing.
Subscriptions
Payments are handled by Apple. We never see your card details. A subscription service, RevenueCat, confirms that a subscription is active using a random ID, not your name or email address.
Who helps us run White Steed
- Apple: Screen Time blocking on your phone, payments, and delivery of notifications.
- Cloudflare: hosts the alert server.
- RevenueCat: confirms subscriptions.
- Text and email delivery services: where text or email alerts are switched on, your partner's number or address and the alert wording are passed to a delivery service only to send that alert.
These services act on our instructions. We do not sell your information, and we do not share it with anyone for advertising.
How long we keep it
- Removing or changing your partner in the app removes their old details from the server.
- Only the most recent 200 alerts are kept for each person.
- If a phone has not been heard from for 12 months, its whole record is deleted automatically, including partner details and alerts.
- Everything kept on your phone is erased when you delete the app.
Your choices
You can use White Steed without a partner, in which case no partner details are held. You can ask us to delete your server record, or to tell you what it holds, at any time. Depending on where you live, you may also have legal rights to access, correct or erase your information, and we will honour them.
Security
Connections to the server are encrypted. The key your phone uses to talk to the server is stored only as a one-way hash on our side and in the protected keychain on your phone. No system is perfectly secure, which is the main reason White Steed is built so that your history never leaves your phone in the first place.
Children
White Steed is not intended for children under 13, and we do not knowingly collect information from them.
Changes
If this policy changes, the date at the top changes with it. If a change means we would hold more about you than before, the app will tell you first.
Contact
Northstone Publishing LLC. Email support@whitesteed.app with any question, or to ask what we hold about you or to have it deleted.