HERAZUR LLC / SLOWROLL

Slowroll privacy policy

Effective October 20, 2026

This policy explains how Herazur LLC (“we”, “us”) handles information in Slowroll, an app blocker for Android: when you open an app you chose to watch, Slowroll shows a pause first, such as a breathing timer, a question, or a short physical challenge. Slowroll is published on Google Play as “Slowroll: Stop Doomscrolling” (package com.slowroll.app).

Summary

• Your rules, schedules, pause history, and statistics are stored only on your phone. We have no server that receives them.
• Slowroll’s accessibility service learns which app comes to the front of your screen, and nothing else. It cannot read screen content, and what it learns never leaves your phone.
• There are no ads, no analytics, and no crash reporting. The app does not read your advertising ID, and we do not sell your personal information.
• An account is optional and unlocks no feature. If you create one, you can delete it at any time from inside the app.

Accessibility service

Slowroll uses Android’s accessibility service for one purpose: to notice the moment you open an app on your watch list, so it can show your pause screen before that app. Without it, nothing is blocked.

• What it accesses: the package name of the app that comes to the front of your screen (for example com.instagram.android) and the time it appeared. The service listens only for window changes.
• What it cannot access: the service is configured with screen-content retrieval switched off, so Android does not give it the text or content on your screen. It does not see your messages, passwords, what you type, what you tap, or what you browse inside another app.
• Where it goes: the app name is compared in memory with your own rules. If a pause is shown, a record of that pause is saved on your phone for your statistics (see below). Nothing from the accessibility service is uploaded, shared with us or anyone else, or used for advertising.

Before Android’s accessibility settings open, Slowroll shows a disclosure explaining this and continues only if you tap Agree and continue. You switch the service on yourself in Android settings and can switch it off there at any time.

Information we collect

Information stored only on your phone

Slowroll keeps the following in a private database and settings file on your device:

• Your rules: the apps you chose to watch and, for each one, the pause type and length, whether the intention question is asked, the challenge type and target, any custom task name you type, session length, daily limits on opens or minutes, and strict mode.
• Your schedules: names, days, and start and end times.
• Your pause history: for each pause, the app, the time, why it was shown, what you chose, how long you spent on the pause screen, and how much of the challenge you completed. Also a daily count of opens per watched app, and your streak.
• Your settings: such as theme and daily reminder time.

None of this is sent to us or to any service provider. We have no copy and no way to get one.

The intention question

When the pause screen asks why you are opening an app, your answer and any note you type are kept in memory only while that screen is open. They are not saved and do not leave your phone.

Usage access (optional)

If you grant usage access in Android settings, Slowroll reads the app usage history Android already keeps on your phone: when apps were opened and how long they were in the foreground. It uses this to show your screen time in the Statistics tab, to enforce any minutes-per-day limit you set, and to confirm which app is really in front before showing a pause. These figures are read on the device and are never uploaded. Without usage access, pauses still work, but minutes-per-day limits cannot count your time.

Motion sensors, only during a challenge

Push-up, squat, and burpee challenges read the accelerometer and proximity sensor, and the step challenge reads Android’s step counter, only while the challenge screen is open. Readings are processed in memory; only the number of reps or steps you completed is saved with that pause.

Installed apps

To let you choose apps to watch, Slowroll lists the apps on your phone that can be opened from the launcher. This list is not saved or sent anywhere.

Account information (optional)

Signing in is optional and changes nothing about blocking. If you create an account with an email address and password, Firebase Authentication stores your email address and a user ID; your password is handled by Firebase and we never see it. If you continue with Google, Firebase receives the email address, name, profile photo link, and account identifier your Google account shares. Firebase also sends the verification and password-reset emails you ask for. Your rules, schedules, history, and statistics are not uploaded to your account.

Purchases

Slowroll Premium is optional and is sold through Google Play as a monthly or yearly subscription or a one-time lifetime purchase. Google Play processes the payment; we never see your card details. RevenueCat manages Premium status: when you open screens that depend on it, such as Statistics, Settings, schedules, an app’s rules, or the Premium screen, the app asks RevenueCat whether Premium is active. RevenueCat receives a random app user ID that its SDK creates, or your account’s user ID while you are signed in, together with your purchase records (product, purchase and renewal or expiry dates, and store transaction details) and basic technical information needed to validate purchases, such as store country and app version. It does not receive your rules, history, or anything the accessibility service sees.

Backups

Settings → Data → Save a backup writes your rules, schedules, statistics, and settings to a file in a place you choose. The file is created on your phone and is not uploaded by Slowroll. If Android backup is turned on for your Google account, Android may also include Slowroll’s database and settings in your device backup so they can be restored on a new phone. That backup is managed by Google under your Google account; we cannot read it. You control it in your phone’s backup settings.

Notifications

While blocking is running, Android requires a permanent notification. If you turn on the daily reminder, it is scheduled on your phone. No notification is sent from a server, and we do not collect a push token.

What we do not collect

We do not collect screen content, messages, typed text, location, contacts, photos, microphone audio, or your advertising ID. The app contains no analytics, crash-reporting, or advertising tools.

Permissions

Accessibility service: detecting that a watched app was opened, as described above. Display over other apps: showing the pause screen on top of the app you opened. Usage access: statistics, minutes-per-day limits, and confirming the app in front. Physical activity: the step challenge only. Notifications: the required notification while blocking runs and the optional daily reminder. Run at startup and foreground service: restarting blocking after your phone restarts and keeping session timers running. Internet: optional sign-in and Premium only; blocking, schedules, challenges, and statistics work offline. The optional “unrestricted battery use” setting opens Android’s own battery list, where you change it yourself. You can change every permission in your device settings.

How we use information

We use information to show pauses in front of the apps you chose; keep your rules, history, and statistics on your phone for you; provide your optional account; sell, verify, and restore Premium; send the reminder you choose; respond to support requests; and meet legal obligations.

Service providers

We share information only with providers that process it on our behalf to run the app:

• Google Firebase Authentication (with Google Sign-In): your optional account.
• RevenueCat: Premium status and purchase records.
• Google Play: app distribution and in-app purchases.

We may also disclose information if required by law or to protect the rights, safety, or security of our users or others. We do not sell personal information or share it for cross-context behavioral advertising.

Where data is processed

Information stored on your phone stays there. Account and purchase information may be processed by Google and RevenueCat in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the providers’ standard contractual clauses.

Retention

Information on your phone stays until you delete it: Settings → Data → Clear statistics history removes your pause history and streak, Reset all rules removes your rules, and uninstalling the app removes everything, including settings. Your account is kept until you delete it. Purchase records are kept by RevenueCat and Google Play for as long as needed to provide and restore Premium and to meet tax and accounting obligations.

Deleting your account

In the app, open Settings → Account → Delete account and confirm. This permanently deletes your account from Firebase Authentication. If Firebase asks, sign in again and repeat the deletion. It cannot be undone.

Your rules, history, and statistics are on your phone, not in your account, so they stay after the account is deleted. To remove them, use Settings → Data or uninstall the app. Deleting your account does not cancel a Premium subscription: cancel it in Google Play under Payments & subscriptions → Subscriptions. Purchase records held by RevenueCat are not deleted automatically; you can ask us to delete them.

If you cannot use the app, email support@herazur.us from your account’s email address with the subject “Slowroll account deletion”, and we will delete it for you and confirm.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can view, export, and delete the information on your phone in the app. For other requests, contact us at the address below. We aim to respond within 30 days and will not discriminate against you for exercising your rights. You may also complain to your local data protection authority.

Security

Your rules and history stay in the app’s private storage on your phone, protected by Android’s app sandbox. Sign-in and purchase requests are encrypted in transit. No method of transmission or storage is completely secure.

Children

Slowroll is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

If we change how we handle information, we will update this page and its effective date and, for significant changes, tell you in the app.

Contact

Privacy questions: furkan@herazur.us. Support and account deletion: support@herazur.us.