Privacy Policy

Gemify ("Gemify", "we", "us") is operated by Rammaru Ito as an individual operator based in Japan. If you have questions about this policy, contact us at rammaru.ito@gmail.com.

Account identity

When you sign in with Google or Sign in with Apple, we receive a basic profile from the provider: a unique user ID, your email address (or Apple's private relay address, if you chose that option), and (if provided) your display name and avatar URL. We use this to create your account in Firebase Authentication.

App usage data

We store the data needed to run the product:

• Your Gem balance and lifetime earned Gems.
• Focus session history (start time, duration, and the Gems earned or spent).
• Your list of blocked sites. This list is stored both in your browser's local storage and in your account so it can sync.
• On iOS: the apps you choose to block. These are stored only on your iPhone as opaque ApplicationTokens issued by Apple's Screen Time framework — we never receive the app names or bundle identifiers, and these tokens are never transmitted to our servers.
• Your in-app language preference, if you set one.

Subscription status

If you subscribe to Gemify Pro, we store your subscription state (status, plan, trial end date, current period end). On the web, card payment details are handled by Stripe — we never see, store, or process your card number, CVC, or expiration date. On iOS, the purchase is handled by Apple via the App Store; we receive only Apple's signed transaction confirming your subscription status, and we never see your payment method.

Technical logs

When our backend (Cloud Functions) encounters an error, the error and a request identifier are logged so we can fix bugs. We do not run analytics SDKs, behavioral tracking, advertising tags, or third-party trackers in the extension or the app.

What we do NOT collect

• The content of pages you visit. The extension only reads the URL of the current tab to decide whether the site is on your blocked list.
• Your browsing history outside the blocked-site check.
• On iOS, which apps you actually open or how long you spend in them. The Screen Time / Family Controls framework keeps that information on your device; we do not request, receive, or store any of it.
• Mappings between an ApplicationToken and the underlying app name or bundle ID — Apple does not share those with us.
• Keystrokes, form inputs, screenshots, or microphone/camera data.
• Cross-site behavioral data for advertising.

We use the data above only to:

• Provide the service: sign you in, enforce your blocked-site list, track Gems earned and spent, and sync state across devices.
• Operate billing: confirm whether you are on a free or Pro plan and apply Pro features accordingly.
• Communicate with you about your account, billing, or important service changes.
• Debug and improve the product through error logs.

We do not use your data to train AI models, to build advertising profiles, or for any purpose unrelated to running Gemify.

We do not sell your personal data. We share data only with the service providers that make Gemify possible:

• Google / Firebase — for authentication, database (Firestore), and serverless functions. See Google's Privacy Policy at https://policies.google.com/privacy.
• Stripe — for subscription billing on the web. Card data is collected and stored by Stripe, not by us. See Stripe's Privacy Policy at https://stripe.com/privacy.
• Apple — for Sign in with Apple, App Store subscription billing on iOS, and the Screen Time / Family Controls framework. ApplicationTokens for blocked apps are processed entirely on your device by Apple's framework; we do not receive them in identifiable form. See Apple's Privacy Policy at https://www.apple.com/legal/privacy/.

We may also disclose data if required by law, valid legal process, or to protect the rights, property, or safety of Gemify, our users, or the public.

Account and usage data is stored in Google Firebase in the United States (multi-region nam5 / us-central). Subscription and payment data is handled by Stripe (for web subscribers) or Apple (for App Store subscribers) and stored per each provider's data practices. On iOS, the ApplicationTokens that represent your blocked apps are stored only on your iPhone (in the app's SwiftData store) and are never transmitted to our servers. If you use Gemify from outside the United States, your account and usage data will be transferred to and processed in the United States.

We keep your account data for as long as your account exists. Error logs are retained for a limited period for debugging and then expire automatically. If you delete your account, we delete the associated account, gem balance, session history, and blocked-site list. Records we are legally required to keep (for example, billing records) may be retained for the period required by law.

• Access and export: you can request a copy of the data tied to your account.
• Deletion: you can request that we delete your account and the data tied to it by emailing rammaru.ito@gmail.com.
• Cancel subscription: for web subscriptions, use the Stripe Customer Portal linked in the extension's settings. For iOS subscriptions, manage or cancel from Settings → Apple ID → Subscriptions on your iPhone.
• Local data: removing the extension clears its locally cached blocked-site list. Deleting the iOS app clears the blocked-app list and ApplicationTokens stored on your device.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise any right, email us at rammaru.ito@gmail.com.

Gemify is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

We use industry-standard practices: data is transmitted over HTTPS, authentication is handled by Firebase Authentication, database access is restricted by per-user security rules, and payment data is isolated to Stripe. No system is perfectly secure, but we take reasonable steps to protect your data.

If we make material changes to this Privacy Policy, we will update the "Last updated" date above and, where appropriate, notify you in the app or by email. Continued use of Gemify after changes take effect means you accept the updated policy.

This Privacy Policy is governed by the laws of Japan. Any dispute arising from or related to this policy will be subject to the exclusive jurisdiction of the Tokyo District Court as the court of first instance.

Questions, deletion requests, or anything else: email rammaru.ito@gmail.com.