Privacy Policy
Unrush is built with a "privacy-by-design" core. Your data never leaves your device.
Unrush ("we," "our," or "us") is a gamified digital wellbeing application. This Privacy Policy describes how the Unrush mobile application ("App") handles information when you use it on your Android device, and sets out your rights under applicable privacy laws worldwide including the EU General Data Protection Regulation (GDPR), UK GDPR, CCPA/CPRA (California, USA), LGPD (Brazil), PIPEDA (Canada), and COPPA (USA).
1. Data Controller
For the purposes of applicable data protection laws, including the GDPR, the Data Controller is:
Since all processing occurs locally on your device and no data is ever transmitted to us, your device acts as the sole processing environment. We hold no personal data about you.
2. Information We Access
Unrush requires certain device-level permissions to deliver its core functionality. We access only the minimum data necessary (data minimisation principle). Below is a full and transparent breakdown.
2.1 Accessibility Service
Unrush uses Android's Accessibility Service to detect which application is currently in the foreground. This is used solely to identify when a blocked app has been opened, so a focus-encouraging overlay (such as a breathing exercise or a mindful challenge) can be displayed.
We explicitly do NOT:
- Read screen content or capture window text
- Monitor keystrokes or input
- Access messages, emails, or personal content
- Transmit any accessibility data externally
2.2 Usage Stats Access (App Usage)
Unrush accesses Android's Usage Stats API to retrieve information about how long you use specific apps. This data powers your personal productivity insights and triggers focus sessions.
- Processed and stored entirely on your device
- Never uploaded or shared externally
2.3 Display Over Other Apps
Used solely to display blocking screens over restricted apps when you attempt to open them. Not used for advertising, third-party overlays, or any other purpose.
2.4 Device Administrator (Optional)
Anti-uninstallation measure during active focus sessions. Only applies a minimal screen-lock policy. Disable via Settings > Security > Device Admin Apps.
2.5 Foreground Service
Maintains background monitoring with a persistent notification so you are always aware when Unrush is active. Required for modern Android versions.
2.6 Notifications
Requests notification permission to send focus reminders, session summaries, and wellbeing nudges. Manageable in device settings.
2.7 Receive Boot Completed
Listens for device reboot events to automatically restart the monitoring service, ensuring schedules remain active.
2.8 Installed Apps List
Reads installed apps solely to populate the app-selection screen. Never stored persistently or transmitted outside your device.
2.9 Accelerometer / Sensor Data
Used for "tilt-to-align" mindful unlock challenges. Read only in real-time, never stored or transmitted.
2.10 Battery Optimization Exemption
Requested to ensure the background monitoring service functions reliably when the device screen is off or idle.
2.11 Internet Permission
Included due to underlying Android framework requirements. Unrush itself does not connect to any server, operates entirely offline, and makes no network requests.
3. How We Use Data
All data accessed by Unrush is used for one purpose: to provide the App's features directly to you on your device.
| Data Type | Purpose | Stored? | Transmitted? |
|---|---|---|---|
| Foreground app (Accessibility) | Detect blocked app launches | No | No |
| App usage stats | Productivity insights, session triggers | On-device only | No |
| Installed apps list | App-selection UI | No | No |
| Sensor data (accelerometer) | Tilt challenge interaction | No | No |
| Focus tasks and block sessions | Core app functionality | On-device only | No |
| Notification preferences | Sending reminders | On-device only | No |
4. Legal Basis for Processing (GDPR)
If you are located in the European Union or EEA, we process data under the following legal bases as required by GDPR Article 6:
Foreground app detection
Legitimate Interests (Art. 6(1)(f))Necessary to deliver the app-blocking feature you requested
App usage statistics
Contract Performance (Art. 6(1)(b))Necessary to provide the focus and productivity features
Installed apps list
Legitimate Interests (Art. 6(1)(f))Necessary to let you configure which apps to block
Accelerometer / sensor data
Legitimate Interests (Art. 6(1)(f))Necessary to operate the real-time tilt challenge
Background monitoring service
Legitimate Interests (Art. 6(1)(f))Necessary to maintain active blocking functionality
5. Data Storage and Security
Local-Only Architecture
Unrush uses an on-device SQLite database (via Drift) to store your focus tasks, app block configurations, session history, and preferences. No external database or cloud service is used.
Security Measures
- All data resides in private, sandboxed app storage.
- Data benefits from device encryption and biometrics.
- No sensitive personal identifiers are collected.
- Strict data minimisation is applied.
6. Data Sharing and Disclosure
We do not share your data with any third party under any circumstances. specifically, we do not:
- Sell, license, rent, or trade personal information
- Share data with advertisers, data brokers, or marketing services
- Provide data to analytics or crash-reporting platforms
- Transmit data to any cloud server or partner
No Third-Party SDKs
Unrush does not integrate any third-party analytics, advertising, crash reporting, tracking, or profiling SDKs.
Legal Disclosure
We hold no user data. If we were ever served with a valid legal order, we would have no data to produce.
7. Intl. Transfers
Unrush does not transfer any personal data internationally. Since all data is stored on your device and never transmitted, no cross-border data transfers occur.
8. Retention & Deletion
Data remains on-device. Delete it by clearing App Data (Settings > Apps > Unrush > Storage) or simply uninstalling the App permanently.
9. Automated Decisions
Unrush does not engage in any automated decision-making or profiling under GDPR Article 22. Blocking logic is locally configured by you.
10. Your Rights Under Applicable Law
10.1 GDPR Rights (EU / EEA)
Under GDPR Arts. 15–22, you have rights including Access, Rectification, Erasure ("Right to be Forgotten"), Restriction, Portability, and Objection. Since no data leaves your device, you can automatically exercise access/rectification directly in the App, and erasure by uninstalling.
Response Time: 30 days. You may lodge a complaint with your local DPA.
10.2 UK GDPR
Same rights as EU GDPR. Complaints can be lodged with the ICO (Information Commissioner's Office).
10.3 CCPA / CPRA (California)
We do not sell or share personal information. You have rights to know, delete, correct, and non-discrimination. No opt-out mechanism is needed.
10.4 LGPD (Brazil)
Rights to confirmation, correction, anonymisation, portability, and revocation of consent. Data resides on your device.
10.5 PIPEDA (Canada)
Rights to access, challenge accuracy, and know usage. Contact support for any PIPEDA inquiries.
10.6 Android Controls
You can revoke any permission at any time through device Settings:
Accessibility
Settings > Accessibility > Unrush
Usage Stats
Settings > Apps > Special App Access
Overlays
Settings > Apps > Special App Access
Admin
Settings > Security > Device Admin Apps
Notifications
Settings > Apps > Unrush
Battery
Settings > Apps > Unrush > Battery
11. Children's Privacy
COPPA (Under 13 - US)
Unrush is not directed at children under 13. We do not knowingly collect personal info from them.
GDPR (Under 16 - EU)
We do not target advertising or profiling at minors. Unrush does not process data externally.
12. Google Play Disclosure
In accordance with Google Play's Data Safety section: Installed apps list, App usage data, and Sensor data are accessed locally only, not shared, and not encrypted in transit (because they are never transmitted). All other data (Location, Financial, Health, Communications, Contacts) is Not collected.
13. Third-Party Links
The App may contain links to external websites. We are not responsible for their privacy practices.
14. Changes
Updates will reflect a new "Last Updated" date. Continued use constitutes acceptance.
15. Governing Law
Governed by the laws of India, unless superseded by your greater local data protection laws (EU/UK/US/etc).
16. Contact Us
For any questions, Subject Access Requests (DSARs), or complaints, we will acknowledge within 5 business days and respond within 30 days.
EU / EEA / UK: Lodge complaints with your local DPA or the ICO.
California: CPPA (cppa.ca.gov) / Brazil: ANPD (gov.br/anpd).
This Privacy Policy is effective as of February 14, 2026. Last updated March 3, 2026.
Unrush Slow down. Stay present.