Privacy notice
Your focus data stays yours.
This notice explains what Toggle My Phone collects, why we need it, where it goes, and the choices you have. It covers the TMP website, account panel, iOS app, and desktop controller.
Last updated September 12, 2026
Who controls your data
TMP, also called Toggle My Phone, is the service responsible for the personal information described here. Privacy requests can be sent to privacy@togglemyphone.com.
Information we collect
- Account data: name, email address, authentication provider, account identifiers, and security records.
- Subscription data: selected plan, entitlement, renewal state, transaction identifiers, and billing status after billing is enabled. TMP does not currently collect payment information in the local development build.
- Device and enrollment data: device identifiers, OS version, supervision and enrollment state, management tokens, command status, and the public identity of a trusted desktop controller.
- Installed-app inventory: the bundle identifier, reported name, short version and build version returned by the enrolled device, TMP’s classification and catalog version, when the app was first and last observed, and when it disappeared. For older iOS releases, separately marked Apple system-app records may come from TMP’s versioned catalog.
- Focus configuration: allowed apps, additional personal blocks, schedules, commitment duration, policy versions, and device acknowledgements.
- Support and security data: messages you send us, audit events, IP address, and diagnostic information needed to prevent abuse and resolve faults.
How we use it
We use this information to create and secure your account, enroll and manage your devices, apply the restrictions you request, synchronize subscription access, provide support, prevent fraud, and meet legal obligations. We do not sell personal information or share it for cross-context behavioral advertising.
Legal bases
Where UK or European data protection law applies, we process core account, device, and subscription data to perform our contract with you. We use legitimate interests for service security, fraud prevention, and limited operational diagnostics. We ask for consent before using any optional analytics, advertising, or similar storage technology.
Service providers
TMP uses service providers only for defined operational purposes. These may include Cloudflare for hosting and network security, Apple and Google for sign-in, Apple for device management services, and Stripe for payments and subscription management. Each provider processes data under its own terms and privacy commitments.
Retention and security
We retain account and device records while your account is active and for the limited period needed for recovery, fraud prevention, accounting, or legal claims. App inventory is limited to the metadata above; removing an app marks the record removed instead of treating an incomplete scan as truth. Account deletion removes app inventory subject to any narrow legal retention requirement. Expired pairing codes and routine command data are removed or minimized on shorter schedules. TMP uses encrypted transport, access controls, signed management commands, and separation between public web credentials and sensitive controller keys.
Your choices and rights
Depending on where you live, you may ask to access, correct, export, or delete your information; object to or restrict certain processing; withdraw consent; or appeal a privacy decision. You can also lodge a complaint with your local data protection authority. Send a request to the address above. We may verify your identity before acting on it.
Children
TMP is not directed to children under 13, or the higher minimum age required in a user’s country, without verified parent or guardian involvement. We do not knowingly use children’s information for advertising.
Changes
We will update the date on this page when this notice changes materially. When required, we will also notify account holders before the new terms take effect.