The Short Version
Offlimit now offers a one-time in-app purchase, Offlimit Pro. That transaction is handled entirely by Apple. We never see your name, payment method, billing address, or Apple Account — the app only stores a single yes/no flag saying whether the unlock applies.
Offlimit is an iOS app built on Apple's Screen Time APIs (Family Controls, Managed Settings, and Device Activity). If you read nothing else, read the box above; the rest of this page explains the details.
Information We Collect Directly
None. Hrdlicka Apps operates no servers, no backend, and no analytics platform for Offlimit. We do not collect your name, email address, phone number, location, contacts, advertising identifiers, payment information, or any usage data. We have no way to see your limits, your streaks, your wagers, or which apps you've chosen to limit — that information never reaches us, because it is never sent anywhere we could receive it.
Offlimit contains no code that makes network requests of any kind. It has zero third-party software dependencies. There is no analytics SDK, no crash reporter, no advertising network, no attribution or install-tracking library, and no account system to attach anything to.
Screen Time Permission & Apple's Family Controls Framework
Offlimit's core feature — daily time limits on the apps you pick — is built on Apple's Family Controls, Managed Settings, and Device Activity frameworks. To work, the app asks for Screen Time authorization the first time you set a limit.
By design, Apple's framework does not tell Offlimit (or any app) which specific apps or categories you selected, or how much time you spent in them. Your app selections are represented internally as opaque tokens that only Apple's system extensions can interpret — Offlimit's own code cannot read them, display their names outside the system picker, or transmit them anywhere, even if it wanted to. This is an Apple platform guarantee, not a promise we are making on top of the framework.
What Offlimit actually learns from the framework is coarser than you might expect: it receives a callback when you cross a threshold of your own budget (for example, at half or 80% of it). It never receives a duration, a timestamp of use, or an app name.
Three small system extensions do the monitoring and blocking, entirely on-device:
- Device Activity Monitor — runs in the background to detect when you are approaching or have reached a limit, and to schedule the next check.
- Shield Configuration and Shield Action — display the blocking screen when a limit is reached and handle your response to it (for example, spending a freeze token or logging an override).
All of them run locally, communicate only with the main Offlimit app through a private on-device App Group container, and never make network requests.
Data Stored On Your Device
Offlimit stores the following locally, in a shared App Group container (group.com.hrdlickaapps.offlimit) accessible only to Offlimit and its own extensions:
- Your tracked limits — the daily minute budget, an optional separate weekend budget, and any nickname you give a limit. Never the underlying app identities, which the app cannot read.
- Daily pass/fail evaluation results, used to calculate your current and longest streaks, plus flags marking days you took off, days a freeze token covered, days you used an override, and days the app could not evaluate reliably.
- Streak counts, your freeze-token balance and its history, and wager records.
- Notification and quiet-hours preferences.
- Schedule and monitoring configuration needed to keep Screen Time limits in sync, including your device's time zone at the last check.
- If you turn on the accountability feature, the contact name and phone number you type in. See the section below.
- A single true/false flag recording whether Offlimit Pro is unlocked on this device.
Day-by-day history is pruned automatically after roughly 400 days, so the app does not accumulate an indefinite record of your habits. All of this data is removed when you delete the app. It is never transmitted to us, and there is no server-side copy under our control.
Offlimit Pro & the App Store
Offlimit Pro is a one-time, non-consumable in-app purchase. Apple is the seller and processes the entire transaction. Payment, billing, tax, and receipts are handled by Apple under your own Apple Account and are governed by Apple Media Services Terms and Conditions and Apple's Privacy Policy.
We never receive, see, or store your payment details, billing address, Apple Account identifier, or any transaction identifier. We have no customer database and no way to look you up.
Technically, the app asks Apple's StoreKit framework two questions: what the product costs in your local currency, and whether this Apple Account owns it. The answer to the second is cached on your device as a single flag so the app does not have to re-ask before it can draw a screen. That flag is re-checked against Apple on every launch, which is also how a refund or a Family Sharing change correctly re-locks the feature. No receipt or purchase record is ever sent to a server of ours, because we do not operate one.
Because purchases are tied to your Apple Account rather than to any account with us, "Restore Purchase" works by asking Apple, not by identifying you to us.
The Accountability Contact (Opt-In, Off By Default)
Offlimit can optionally remind you to tell someone when your streak breaks. If you turn this on, you type in a contact name and a phone number. Two things are worth being precise about:
- Where it is stored. On your device only, in the same private App Group container as everything else. It is deliberately excluded from iCloud sync and from the backup file you can export, so a phone number you enter here does not travel to your other devices or into a file you might share.
- How the message is sent. It isn't sent by us. When your streak breaks, Offlimit offers to open Apple's standard Messages compose sheet with the recipient and a draft already filled in. You read it, you decide, and you press send — exactly as if you had typed it yourself. Offlimit never sends a message automatically, never sends one in the background, and never transmits the contact or the message content anywhere. Standard messaging rates from your carrier apply.
Because you are entering another person's phone number, please only do so with that person's knowledge. You can clear the name and number, or switch the feature off entirely, at any time in the app's Settings. The toggle does not appear at all on a device that cannot send text messages.
Offlimit does not request access to your Contacts, and has no permission to read your address book.
iCloud Sync (Optional, Automatic If Signed In)
If you are signed into iCloud on your device, Offlimit automatically backs up and syncs a compact snapshot of your progress using Apple's iCloud Key-Value Store — private storage tied to your own Apple Account, of the kind many apps use for lightweight settings sync. This lets your streak carry over to a new device or survive a reinstall.
What the snapshot contains: your current and longest streaks, your freeze-token balance, day-by-day pass/fail history and its day flags, and one record per limit holding its internal identifier, creation date, minute budgets and nickname.
What it deliberately does not contain: your Screen Time app selections (Apple's tokens are not portable between devices, so they cannot be synced by anyone), your accountability contact, and your Offlimit Pro flag. Because app selections cannot travel, after restoring on a new device you will need to re-pick your apps; your streaks and history come back intact.
This sync goes directly from your device to your iCloud account and back to your other devices signed into the same Apple Account. Hrdlicka Apps has no server in this path and never receives, stores, or has access to the synced data. It is governed entirely by Apple's Privacy Policy. You can control iCloud access for Offlimit, or turn iCloud off entirely, in your device's Settings → [your name] → iCloud.
Manual Backup Export & Import
Offlimit lets you export a plain-text JSON backup file of your limits and history at any time, and import it back later. The file contains the same information as the iCloud snapshot described above — and, likewise, no Screen Time tokens and no accountability contact.
The file is created and saved entirely by you, using the standard iOS share sheet, to Files, AirDrop, email, or any destination you choose. We never see this file, never receive a copy of it, and have no way to access it unless you choose to send it to us yourself (for example, to help debug a support request). If you do send us one, we use it only to answer your question and delete it afterwards.
Sharing a Streak Card
Offlimit can generate an image of your streak for you to share. The image is rendered on your device and handed to the standard iOS share sheet; you choose whether to share it and with whom. Nothing is uploaded to us, and the card never names a tracked app, because the app cannot read those names.
Notifications
Offlimit can send local notifications — for example, when you are approaching a limit or hit a streak milestone. These are scheduled and delivered entirely on-device through Apple's notification system; no notification content or delivery data is sent to us or to any third party. Notification text is deliberately generic and never names a specific app, since Offlimit itself cannot read the identity of the apps you have selected. You can disable notifications at any time in the app's Settings, set quiet hours, or turn them off in iOS Settings → Notifications → Offlimit.
Third-Party Services
Offlimit integrates no third-party SDKs — no analytics, no crash reporting, no advertising, no attribution, and no payment processor of our own. The app has no external software dependencies at all.
The only outside systems involved are Apple's own: Family Controls, Managed Settings and Device Activity for limits and shielding; iCloud Key-Value Store for sync; local Notifications; Messages, for the compose sheet you approve yourself; and StoreKit, for the Offlimit Pro purchase. All are governed by Apple's Privacy Policy. We do not sell, rent, share, or disclose your personal information to anyone, for any purpose, because we never have it.
Children's Privacy
Offlimit is a general-audience self-monitoring tool, not a parental-control product — it is designed for you to manage your own device, not to monitor another person's device without their knowledge. It is not directed at children under 13, and we do not knowingly collect personal information from children under 13. Because Offlimit collects no personal information at all, there is no data of this kind for us to have collected, and nothing for a parent to request the deletion of from us.
In-app purchases on a child's device are controlled by Apple's own parental controls, including Ask to Buy and Screen Time restrictions in iOS Settings, not by us. If you believe a child has used the app in a way that concerns you, please contact us.
Data Retention, Deletion & Your Rights
All Offlimit data lives on your device and, if enabled, in your personal iCloud account, until you delete it. Day-by-day history is pruned automatically after roughly 400 days.
To remove your data entirely: delete individual limits in the app, clear the accountability contact in Settings, turn off iCloud for Offlimit in device Settings, and delete the app, which removes its local App Group storage. Deleting your data does not affect your Offlimit Pro purchase, which lives with your Apple Account and can be restored at any time.
Because we hold no copy of your data on any server, there is nothing further for us to delete, export, correct, or restrict on our end — you already have complete control, without needing to ask us. If you would like help doing any of the above, or have a question about how the app handles data, contact us using the details below and we will answer.
If you are in the EEA, the UK, or Switzerland
The GDPR and UK GDPR give you rights of access, rectification, erasure, restriction, portability, and objection against a data controller. Hrdlicka Apps does not act as a controller or processor of your Offlimit data, because we never receive it: there is no processing by us, no legal basis to declare, no profiling or automated decision-making, no international transfer, and no third-party recipient. The data is processed only locally on your own device, under your own control, and where you enable iCloud, by Apple as an independent controller under its own policy. You can exercise every one of those rights directly on your device using the steps above, and you may still contact us with any question.
If you are in California
Under the CCPA as amended by the CPRA: in the preceding twelve months we have not collected any category of personal information from Offlimit users, have not sold or shared any personal information, and have not disclosed any for a business purpose. We do not collect sensitive personal information, we do not use or disclose it for inferring characteristics, we do not offer financial incentives for data, and we are not a data broker. We honor opt-out preference signals by default, in the sense that there is nothing to opt out of. Exercising any privacy right will never cause you to be treated differently, and Offlimit has no feature that depends on providing us data.
If you are in another U.S. state with a comprehensive privacy law
Twenty U.S. states now have comprehensive consumer privacy laws in effect. Their consumer rights — access, correction, deletion, portability, opting out of targeted advertising, sale, and profiling — all attach to personal data a business has collected. We collect none, run no targeted advertising, perform no profiling, and sell nothing, so there is no request for us to fulfil and no appeal process to invoke. The same on-device steps above give you complete control.
Security
Offlimit relies on Apple's platform-level protections — app sandboxing, App Group isolation, device encryption, and the opaque token system used by Family Controls — to keep your data secure on-device and, where applicable, protected in transit to and from iCloud under your own Apple Account credentials. Purchase verification uses StoreKit's own cryptographic signature checking; a transaction that fails Apple's verification unlocks nothing.
No method of storage or transmission is completely secure, but Offlimit's design — no servers, no accounts, no network calls, no third-party code — means there is very little surface area for anything to go wrong, and no central store of user data to be breached.
Changes to This Policy
If we change this privacy policy in a meaningful way, we will update the effective date at the top of this page and note the change in the app's release notes. Continued use of the app after a change constitutes acceptance of the updated policy.
August 13, 2026. Updated to describe the Offlimit Pro one-time in-app purchase and the opt-in accountability contact, to state precisely what the iCloud snapshot and exported backup file do and do not contain, to add region-specific rights detail, and to correct an earlier statement that the app contained no in-app purchases.
Contact
If you have any questions about this privacy policy or how Offlimit handles data, please contact us:
Email: support@hrdlickaapps.com
Website: hrdlickaapps.com
Last updated: August 13, 2026 · Offlimit · hrdlickaapps.com