ScrollGuard — Privacy Policy

Summary: ScrollGuard is a 100% offline, privacy-first app. All data stays on your device. We collect nothing. We transmit nothing. We share nothing. Zero servers, zero tracking, zero ads.

1. Introduction

ScrollGuard ("we," "our," or "us") is a digital wellbeing application developed by Xaylon. This Privacy Policy explains how ScrollGuard handles information when you use our mobile application (the "App") available on the Google Play Store.

We are deeply committed to protecting your privacy. ScrollGuard is designed with a privacy-first architecture — all data is processed and stored locally on your device. We do not collect, transmit, store, or share any personal data with any server, cloud service, third party, or any external system.

By downloading, installing, or using the App, you agree to the terms described in this Privacy Policy. If you do not agree, please uninstall the App.

2. Information We Do NOT Collect

To be explicitly clear, ScrollGuard does NOT collect, access, store, transmit, or process:

Personal identification information (name, email, phone number, address, date of birth)
Account credentials or passwords
Financial information (credit card numbers, bank details, payment information)
Precise or approximate geographic location data (GPS, IP-based location)
Contact lists or address book data
Call logs or SMS/MMS messages
Photos, videos, audio recordings, or any media files
Calendar events or reminders
Browsing history, search queries, or web activity
Content of messages, emails, or social media posts
Device identifiers (IMEI, IMSI, SIM serial number, MAC address)
Advertising identifiers (Google Advertising ID, IDFA)
IP addresses or network information
Biometric data (fingerprints, face recognition data, voiceprints)
Health or fitness data
Any data from other applications on your device
The content you view within monitored applications
Crash reports or analytics data to external services

3. Information Processed Locally on Your Device

ScrollGuard processes certain data exclusively on your device to provide its core functionality. This data never leaves your device, is never transmitted over any network, and is never accessible to us or any third party.

3.1 Accessibility Service Data

ScrollGuard uses the Android Accessibility Service API to detect scrolling activity within user-selected applications. Specifically:

Foreground Application Detection: The App detects which application is currently in the foreground by reading the package name from accessibility events. This is used solely to determine if the current app is one the user has chosen to monitor.
Scroll Event Detection: The App listens for scroll events to count vertical scroll actions (swipes) in monitored applications. Only the occurrence of a scroll event is counted — no content, text, images, or any data displayed on screen is accessed, read, captured, or stored.
No Screen Content Reading: Although the Accessibility Service technically has the capability to read screen content, ScrollGuard explicitly does NOT read, capture, store, or process any text, images, descriptions, or content visible on your screen.

3.2 Scroll Statistics

The following statistical counters are maintained locally on your device using Android SharedPreferences:

Daily swipe counts per monitored application
Daily intervention (break screen) trigger counts
Daily zombie scroll detection counts (rapid, mindless scrolling patterns)
Recall test results (pass/fail counts only — your typed answers are NOT stored)

These statistics are stored as simple integer counters associated with date strings. They contain no personally identifiable information.

3.3 User Preferences and Settings

Your configuration choices are stored locally using Android SharedPreferences:

Whether protection is enabled or disabled
Global and per-app swipe limit thresholds
Cooldown timer duration
List of monitored applications (package names only)
Zombie scroll detection sensitivity settings
Schedule settings (active hours and days)
Notification preferences
Onboarding completion status

3.4 App Usage Statistics (Optional)

If you grant the optional Usage Access permission, the App reads app usage time from Android's UsageStatsManager API for the monitored applications only. This data is read in real-time and displayed in the App's dashboard. It is not stored persistently or transmitted anywhere.

4. Permissions Required and Their Justification

ScrollGuard requests the following Android permissions. Each permission is essential for the App's core functionality:

Permission	Purpose	Data Access
BIND_ACCESSIBILITY_SERVICE	Detect scroll events and foreground app in monitored applications	Scroll event occurrence only. No screen content is read or stored.
SYSTEM_ALERT_WINDOW	Display the intervention overlay screen on top of other apps	No data is accessed. Only displays ScrollGuard's own UI overlay.
PACKAGE_USAGE_STATS (Optional)	Read app usage time to show daily usage statistics	Foreground time per app for the current day only. Not stored permanently.
VIBRATE	Provide haptic feedback when an intervention is triggered	No data is accessed.
RECEIVE_BOOT_COMPLETED	Ensure the accessibility service restarts after device reboot	No data is accessed.
POST_NOTIFICATIONS	Show persistent notification when service is active	No data is accessed.
INTERNET	Required by Flutter framework. ScrollGuard makes NO network requests.	No data is transmitted. No network connections are established.
FOREGROUND_SERVICE	Keep the overlay service running when displaying intervention screens	No data is accessed.

5. Accessibility Service API Disclosure

This section provides the detailed disclosure required by Google Play's Accessibility Service API policy.

5.1 Core Functionality Requiring Accessibility

ScrollGuard's Accessibility Service is fundamental to the App's core purpose of detecting and interrupting endless scrolling behavior. Without the Accessibility Service, the App cannot function. The Accessibility Service is used exclusively for:

Detecting when the user switches between applications (to identify monitored apps)
Counting scroll events in user-selected monitored applications
Triggering the intervention overlay when the user-configured scroll limit is reached

5.2 What the Accessibility Service Does NOT Do

ScrollGuard's Accessibility Service does NOT:

Read, capture, or store any text displayed on screen
Read, capture, or store any images, videos, or media content
Interact with, modify, or control other applications in any way
Perform any actions (clicks, swipes, gestures) on behalf of the user
Capture screenshots or record the screen
Access passwords, form data, or input fields in other applications
Transmit any data over the internet or to any external service
Track user behavior for advertising, analytics, or profiling purposes
Share any data with third parties

5.3 Accessibility API Events Used

TYPE_WINDOW_STATE_CHANGED: Used to detect which application is in the foreground. Only the package name is read and compared against the user's monitored apps list. No window content is accessed.

TYPE_VIEW_SCROLLED: Used to detect that a scroll action occurred. Only the event type is used as a counter trigger. No scroll content, position, or view hierarchy information is read or stored.

6. Data Storage and Security

6.1 Local-Only Storage

All data generated by ScrollGuard is stored exclusively on your device using Android SharedPreferences and Hive (local database). No data is stored on external servers, cloud storage, or any remote location.

6.2 Data Security

App Sandbox: Android's application sandbox ensures that ScrollGuard's data files are only accessible to ScrollGuard itself.
Device Encryption: If your device has encryption enabled, all locally stored data is encrypted at rest.
No Network Transmission: Since no data ever leaves your device, there is zero risk of data interception during transmission.

6.3 Data Retention

Statistical data is retained on your device until you uninstall the App, clear the App's data through Android Settings, or perform a factory reset. We do not have access to your data and cannot delete it remotely.

7. Data Sharing and Third-Party Services

7.1 No Data Sharing

ScrollGuard does not share any data with any third party, including advertising networks, analytics services, social media platforms, data brokers, government agencies, our own servers, or any affiliates or partners.

7.2 No Third-Party SDKs That Collect Data

ScrollGuard does not integrate any third-party SDKs, libraries, or services that collect, transmit, or process user data. The App does not include Google Analytics, Firebase Analytics, Facebook SDK, advertising SDKs, crash reporting services, or attribution SDKs.

7.3 No Selling of Data

ScrollGuard does not sell, trade, rent, or otherwise commercially transfer any user data to any party under any circumstances.

8. Children's Privacy

ScrollGuard is suitable for users of all ages as it promotes healthy digital habits. The App does not collect any personal information from any user, including children under the age of 13. Since ScrollGuard collects no personal data, it is compliant with COPPA (US), GDPR Article 8 (EU), the UK Children's Code, and India's IT Act.

9. Your Rights and Choices

9.1 Full Control

Enable/Disable Protection: Toggle the master switch to pause all monitoring instantly.
Choose Monitored Apps: Select exactly which applications ScrollGuard monitors.
Adjust Sensitivity: Configure swipe limits, cooldown durations, and detection sensitivity.
Revoke Permissions: Disable the Accessibility Service or Overlay permission at any time.
Delete All Data: Uninstall the App or clear its data to permanently delete all information.
Schedule Protection: Set active hours so monitoring only runs when you want it to.

9.2 Rights Under GDPR (European Users)

Since ScrollGuard does not collect or process any personal data, your GDPR rights are inherently fulfilled. You can access, modify, and delete all data directly from your device.

9.3 Rights Under CCPA (California Residents)

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. There are no categories of personal information to disclose.

10. Google Play Data Safety Disclosures

Data Safety Question	Our Answer
Does the app collect data?	No. The app does not collect or share any user data.
Does the app share data with third parties?	No. Absolutely no data is shared.
Is data encrypted in transit?	Not applicable. No data is transmitted.
Can users request data deletion?	Users can delete all data by uninstalling the app or clearing app data.
Does the app use the Accessibility Service?	Yes. Used solely to detect scroll events. No screen content is read.

11. Security Measures

Minimum Permissions: Only permissions strictly necessary for functionality are requested.
No Network Communication: Zero network requests, eliminating all remote attack vectors.
Application Sandboxing: All data stored within Android's application sandbox.
No Logging of Sensitive Data: Debug logs contain only event counters and package names.
Secure Overlay: The intervention overlay does not intercept or modify user input in other apps.

12. Recall Test Feature

The text you type in the recall test is used only for immediate on-device evaluation.
Your typed response is NOT stored, saved, logged, or recorded anywhere.
Only a pass/fail counter is incremented. The actual text is immediately discarded.
We have no ability to see, read, or access what you type.

13. Display Over Other Apps (Overlay)

The overlay displays only ScrollGuard's own content (messages, recall test, buttons).
The overlay does not capture, screenshot, or record the screen beneath it.
The overlay does not intercept, modify, or redirect any data in the underlying app.
Users can dismiss the overlay after the cooldown period.
The overlay permission can be revoked at any time via Android Settings.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date will be revised. For significant changes, we will notify users through the App or the Play Store listing. We will never change this policy to allow data collection without prominent notification and explicit consent.

15. International Users

Since no data is collected, stored, or transmitted, there are no cross-border data transfer concerns. The App complies with GDPR (EU), CCPA (US), LGPD (Brazil), PIPEDA (Canada), India's IT Act and DPDP Act, Australia's Privacy Act, South Africa's POPIA, and all other applicable international data protection laws.

16. Open Source Libraries

ScrollGuard uses Flutter, Hive, fl_chart, Provider, Google Fonts, flutter_animate, and shared_preferences. None of these collect or transmit user data. All are used solely for on-device functionality.

17. Legal Basis for Processing (GDPR)

Consent: You explicitly consent to scroll monitoring by enabling the Accessibility Service and selecting which apps to monitor. You can withdraw consent at any time.

Legitimate Interest: The App processes scroll event counts locally to fulfill its core purpose of promoting digital wellbeing.

18. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please contact us:

Developer: Tech Town Developers
Email: techtowndevelopers@gmail.com

We will respond to all privacy-related inquiries within 30 days.

19. Consent

By using ScrollGuard, you consent to this Privacy Policy. You acknowledge that ScrollGuard processes scroll event data exclusively on your device, no personal data is collected, transmitted, or shared, and you can revoke all permissions and delete all data at any time.

🛡️ ScrollGuard