Ureset · Legal
Ureset privacy policy.
Ureset is a 100-day habit reset: daily quests the app checks for you, focus and workout timers, an app blocker, a private day log and sleep tracking. This policy explains exactly what the app collects, what stays on your iPhone, and what never leaves it.
Effective 5 November 2026 · Last updated 5 November 2026
The short version
- From 5 November 2026 the app is called Ureset; it was called Cloyra (and LockIn before that). Nothing about your data changes. It is the same app, your account is the same account, and this policy stays at the same address.
- Alarms were removed in version 1.4.0 (26 October 2026). See “A note on a removed feature: alarms” below for what that means for data an earlier version stored.
- Your 100-day reset (quests, XP, levels, stats, the quests you write yourself and your streak) is stored on your iPhone and, when you are signed in to iCloud, in your own iCloud account, so it follows you to a new phone. We never receive it. The journal lines you write stay on your iPhone only.
- Most camera missions (like push-ups) are verified entirely on your iPhone, and so are calorie photos of your meals. Photo-proof missions send one downscaled photo for a single verification check, then discard it — it is never saved on your phone or kept on our servers.
- Your day log (calories, water, mood, weight, and a note and photo for each day) stays on your iPhone. It is never uploaded and is not copied to iCloud. See “Your day log” below.
- If you sign in, your first name, your profile photo if you add one, and your weekly push-up and squat counts and your streak appear on the leaderboard, where other people using Ureset can see them. See “The leaderboard and friends” below.
- If you pair up with a friend for a shared streak, the days you finish at least two quests are sent to our server and your streak partners can see whether you have kept the streak today.
- Sleep data stays on your iPhone. What Ureset reads from Apple Health, and the sleep stages it estimates itself from a monitored night, are both worked out on the device and never reach our servers. We never sell any of it or use it for advertising.
- Microphone audio (sleep sensing, night-audio clips, the Bible-verse mission) is analysed on your iPhone and never uploaded to us.
- Payments run through Apple. We never see or store your card number.
- We do not sell your data. There are no ads in Ureset.
- When we advertise Ureset on other platforms, such as Instagram, we measure which ads led to installs, first quests and subscriptions. See “Measuring our own ads” below.
- We do use product analytics, and the events are linked to your account rather than anonymous — see “Analytics and diagnostics” for exactly what is and is not collected.
- You can delete your account from inside the app at any time — Profile → the gear (Settings) → Delete account — or by emailing support@toolsai.app.
Who we are
Ureset is made by ToolsAi Pty Ltd (ABN 73 698 152 902), an independent iOS software company based in Sydney, Australia (“ToolsAi”, “we”, “us”). This policy covers the Ureset iOS app, which was called LockIn until 10 October 2026; that is why this page still lives at /privacy/lockin. Our website has its own privacy policy, and use of Ureset is governed by our terms of use.
Account data
An account is optional. Ureset works without one. The sign-in step during setup has a “Skip for now”, and your quests, missions and settings behave the same either way. An account is needed for the leaderboard, friends and Invite & earn.
New accounts are created with Sign in with Apple. What we hold is your email address (which can be the private relay address Apple offers), the sign-in identifier Apple gives us, a display name, and a token from Apple that lets us revoke the sign-in if you delete your account. Accounts created before 10 September 2026 may instead have signed in with Google, or with an email address and password; a password is handled by Supabase, our authentication provider, and stored only as a hash. We never see it, and there is no way for us to read it back.
Alongside your account we store the outcome of photo-proof checks, the focus time you bank, and the leaderboard details described below. If you used a version before 1.4.0, the alarm rows saved with your account (times, repeat days and the missions you set) are still there: version 1.4.0 does not use them and we left them as they were. They are deleted with your account, as before.
Your 100-day reset stays with you, not with us. The program you set up, your daily quests and which ones you completed, your XP, level and stats, every past round, the perfect days that unlock app icons, the dates of mornings you won a wake mission in earlier versions (your old wake streak, kept as a record), and any quests you add yourself — including the names you give them — are stored on your iPhone. When you are signed in to iCloud, Ureset also keeps a copy in your own iCloud account (Apple's iCloud key-value storage), so the reset follows you to a new phone or a reinstall and stays in step across your devices. That copy is part of your iCloud account, which Apple runs: none of it is sent to us, and we cannot see it. When you are not signed in to iCloud, nothing is copied. The lines you write in the journal are not part of it: they stay on the device and do not sync. To take it out of iCloud, turn off Profile → the gear (Settings) → Keep my 100-day reset in iCloud: the copy is removed from iCloud and syncing stops on every device signed in to the same iCloud account, while the reset on each iPhone stays.
Camera and photos — mission verification
Some missions use your iPhone’s camera. There are two kinds, and they handle your camera differently:
- On-device missions — push-ups, squats and the Rave dance mission. The camera feed is analysed entirely on your iPhone. No image is ever uploaded, and we never receive one.
- Photo-proof missions — a photo of the sky, and touching grass (versions before 1.4.0 also asked for a made bed or an item to find). These send a single downscaled photo to our verification service for one automated pass-or-fail check, which runs on our servers and uses a third-party AI provider (Anthropic) to read the photo. The photo is used only for that one check and is then discarded — it is never saved to your device, added to your photo library, or stored on our servers.
What we keep from a photo-proof mission is the outcome (completed or missed), how confident the check was, and a short perceptual hash — a non-reversible fingerprint that stops the same photo being reused. Never the photo itself.
Calorie photos. In the Log tab you can photograph a meal, or pick a photo from your library, to estimate its calories. Apple’s Vision framework names the food on your iPhone and Ureset looks up an estimate from a table built into the app. The photo is never saved by Ureset and never sent anywhere. What is kept is the food’s name, the calories, the portion size and the time, on your iPhone only, and entries older than 90 days are removed.
You can decline camera access and choose missions that do not use the camera, such as math drills.
Your day log
The Log tab is a private record of your day. It holds the calories from your meal photos (described above), glasses of water, your mood, your weight, and one short note and one photo for each day, plus the goals you set for calories and water.
- It stays on your iPhone. The entries are saved on the device, and the photos in a folder of their own that is left out of device backups. None of it is uploaded to us or to any provider, and none of it is copied to iCloud, so it does not follow you to a new phone.
- Weight is typed in by you. Ureset does not read your weight, or anything else for the Log tab, from Apple Health.
- The photo is yours to choose. You pick it from your library with the system picker or take it with the camera. Ureset shrinks it and saves one copy on the device.
- It is kept for up to 365 days, and older days are removed (calorie entries are kept for 90 days). You can remove a day’s photo or clear a day yourself from the Log tab at any time, and deleting the app removes all of it.
App blocking (Screen Time)
If you turn on app blocking, Ureset uses Apple’s Screen Time framework, with the access iOS grants an app for your own device, to shield the apps you pick. A shielded app opens for a short window after you wait out a pause or complete a mission, and once a day you can lift the shield for 15 minutes in an emergency. Apple’s framework hands Ureset opaque tokens for the apps you choose: Ureset never learns their names, never sees what you do inside them, and nothing about your app use leaves your iPhone.
The screen-time figures on Home and the Stats screen are drawn by a separate iOS extension that Apple runs in its own sandbox. The app itself never receives those numbers, and neither do we. Ureset does keep the times at which a blocked app was opened through a pause or a mission, as timestamps with no app names, on your iPhone for 14 days. You can turn app blocking off, or revoke Screen Time access in Settings, at any time.
Microphone, sleep sensing and night audio
The microphone is used for two things and nothing else: sensing how you sleep, and hearing you read a Bible verse aloud for the Bible-verse mission. Both are analysed on your iPhone.
- Sleep tracking (Night audio). You can start it yourself with “Start tonight” on the Sleep screen. If you set a sleep schedule (a bedtime and a wake time), Ureset can also start it when you open the app during the night that schedule covers, and only after it has explained this to you once. It never starts by itself in the background. Before version 1.4.0 it could also start on a night before an alarm; it no longer does. While a night is tracked, the microphone listens and what it hears becomes a minute-by-minute restlessness measure on your iPhone. The audio itself is not kept, apart from the clips described next.
- Night-audio clips. While a night is tracked, Ureset saves a short clip — a few seconds, at most twelve — around each detected sound such as snoring, coughing or sleep talking, so you can listen in the morning. It never records the whole night. Clips are written only to your iPhone and are never uploaded to us. They delete themselves after 7, 20 or 100 nights depending on the setting you choose, and you can delete any of them by hand at any time.
- Your sleep stages are estimated from that same restlessness measure, on your iPhone, and shown as a sleep score in the morning. Nothing extra is recorded or kept to do it: it reads the minute-by-minute restlessness figure the night already produced. It is an estimate from sound, not a medical measurement, and Ureset labels it as one — if Apple Health holds stages measured by an Apple Watch for the same night, those are used instead.
- Battery level. While a night is being monitored Ureset reads your battery level so it can tell you to charge, switch off clip recording, and finally stop the session before the battery runs flat. The level is used on your iPhone and stored only in that night's own record; it is never sent to us.
- The Bible-verse mission. Speech recognition runs on your device and the mission is checked against the verse text bundled in the app, so nothing leaves your phone. Versions before 1.4.0 also had an affirmation mission, which sent the words you spoke (as text, never as audio) for a single automated check; it was removed in 1.4.0, and the app no longer sends spoken words anywhere.
You can decline microphone access. Sleep tracking and the Bible-verse mission then do not run. Sleep data from Apple Health still works, and every other mission still works.
HealthKit and sleep data
If you choose to connect Apple Health, Ureset asks for exactly three things, all read-only: sleep analysis, workouts and your step count. Sleep analysis is what feeds your sleep trends and, where an Apple Watch or another app recorded the stages of a night — what Ureset shows you as your sleep stages and sleep score, in preference to its own estimate. Workouts are what let the workout quest count something you actually did rather than a box you ticked, and what fills in your training hours. Your step count is read only if you add a steps quest such as “Walk 10,000 steps”: Ureset adds up the day’s steps, compares the total with your goal, and keeps nothing else. Steps typed into Health by hand are ignored. Those are the only three. Ureset never writes to Apple Health and never asks you to let it: iOS requires every app with Health access to carry a write-permission description, and ours says exactly that.
Ureset only ever reads Apple Health after you have granted access from a button you tapped. It never asks in the background, and on a device that has not granted access it reads nothing at all rather than raising a permission prompt you did not go looking for.
- None of it leaves your iPhone. Health data is read and analysed on the device. We hold no sleep, workout or step records on our servers — so unlike your account data, your sleep history does not sync to a new phone, because it was never ours to sync.
- Health data stays under Apple Health’s own controls.
- We never use health data for advertising or marketing.
- We never sell health data or share it with third parties.
- You can revoke Ureset’s access at any time in the Health app.
Calendar
Ureset estimates when in the day you are likely to be sharpest. If you tap to add those windows to your calendar, it writes them there as ordinary events — “Peak focus” and “Secondary focus”, each with a note saying Ureset suggested it.
- The access is write-only, and iOS enforces that. Ureset can add an event and cannot read anything already in your calendar. It does not know what you have on, who you are meeting, or what any existing event is called.
- Only when you ask. Nothing is written in the background. Events go into whichever calendar your iPhone already uses for new events.
- Nothing about your calendar reaches us. The events are created on your device by iOS itself; no calendar data is sent to our servers.
- Because the access is write-only, Ureset cannot find those events again afterwards, or remove them. Delete them in the Calendar app like any other event, and revoke the permission in Settings whenever you like.
The leaderboard and friends
The leaderboard is the one place where other people see something about you, so here is exactly what it shows. While you are signed in, Ureset adds a weekly row for you with:
- your first name, from Sign in with Apple or as you set it in Profile (or “Someone” if there is none);
- your profile photo, if you add one; and
- this week’s push-up count and squat count, and your streak (days in a row with at least two quests done).
Other signed-in Ureset users can see that row on the world board, and your friends see it on the friends board. Nobody can see your email address, your quests or anything else about your account through it. Your photo is stored with Supabase and reaches the board through a link that carries a random handle, never your account ID; anyone who has that link can open the photo while it is on the board. You can change your name or remove your photo in Profile at any time. There is currently no switch to stay signed in and off the board; if you do not want to appear, use the app without an account.
You add a friend with their invite code. You can remove a friend, block anyone (they disappear from your boards, you disappear from theirs, and they cannot add you), and report a name or a photo. A report records who reported whom, the reason you picked and an optional note of up to 500 characters, and we review it. Anyone reported by three different people within 30 days is hidden from every board until we have looked.
Streak partners. You can pair up with up to three friends for a shared streak that counts the days you both finish at least two quests (before version 1.4.0 it counted the days you both won your wake mission). While you have at least one partner, the app tells our server each day you reach that: we store your account, the date and nothing else (not the time or which quests). Your partners see whether you have kept the streak today and how long your shared streak is; nobody else can. When one of you has finished and the other has not by 10am, the late partner’s app says so and may show them one notification, which is scheduled on their own phone. We keep these daily records only from the day your earliest current partnership started. Ending your last partnership deletes all of them, and so does deleting your account. Blocking someone, or removing them as a friend, ends a partnership with them.
Invite & earn
Referrals. If you share your invite code, we store the code against your account. When a friend redeems it, we record whose code they used and whether they went on to subscribe, which RevenueCat tells our server, so we can give each of you a free month as an App Store offer code. The same code is how friends find you on the leaderboard.
Creator program. If you apply from the app, the form sends your full name, email address, country, the platform you post on, your handle, your audience size and an optional note, along with your account identifier. We use it to review your application and, if you are approved, to send you your codes and run the program with you. Emails about your application are sent through Resend. Unlike the rest of your account data, an application is not deleted when you delete your account: it is unlinked from the account and kept with our creator records. Email us and we will delete it.
Payments
Subscriptions are purchased through the App Store using Apple’s StoreKit. Apple processes the payment; we never see your card details. You manage or cancel your subscription in your App Store account settings.
Two companies help us run that subscription, and both are listed under “When we share information” below. RevenueCat checks with Apple whether your subscription is active, so the app knows what to unlock. Superwall draws the subscription screen itself and is told your age range, so the offer you see suits you. RevenueCat is also told which main problem you picked during setup (one of seven fixed choices, such as sleep or study), so we can see which version of setup leads to a subscription. If you have “Share usage analytics” switched on, RevenueCat also forwards your subscription events to Mixpanel, our analytics provider, as described under “Analytics and diagnostics”. Neither of them receives a payment method — there is none to receive, because the purchase happens inside Apple’s own sheet.
Earlier builds also offered an optional real-money stake on an alarm, charged through Stripe if a mission wasn’t finished in time. It was removed from the app on 1 August 2026 — no card is collected for it any more, the Stripe SDK is no longer part of the app, and Ureset has no real-money feature today beyond the subscription above. A small number of accounts created before then may still hold Stripe’s reference for a saved card, and a record of any stake charge that was made; see “Deleting your data” below for how those are kept and removed.
A note on a removed feature: alarms
Versions before 1.4.0 (26 October 2026) had alarms: an alarm list, a ring screen with a wake mission to get out of bed, optional wake music from Apple Music, a Sunrise wake mode and bedtime reminders tied to an alarm. Version 1.4.0 removed all of it. The first time 1.4.0 opens, it cancels any alarm an earlier version set with iOS, so nothing rings. Ureset no longer asks to set alarms or for Apple Music access, and no longer keeps itself awake overnight for an alarm. If you granted either permission earlier, you can revoke it in the iOS Settings app. The camera games, AR games, code scanning, made-bed and item-search photos and the affirmation mission went with it.
What an earlier version stored is handled like this. Alarms saved on your iPhone sit in a file that 1.4.0 no longer reads; it is removed when you delete the app. The playlist you chose for wake music was saved on the device only and we never received it. Alarm rows stored with your account on our server were left as they were (1.4.0 does not read or change them) and are deleted with your account, as before. The dates of mornings you won a wake mission remain as a record inside your 100-day reset, including its iCloud copy if you use it.
A note on a removed feature: the Social tab
Earlier versions of this policy described a Social tab — a stripped-back browser for TikTok, Instagram, Facebook, X, LinkedIn, WhatsApp and Telegram, each opening its own website inside the app. It was removed on 1 August 2026, alongside the stakes feature above. While it existed it never saw your platform passwords, never read your feeds, messages, followers or contacts, and the only thing it read from a page was the unread-count in its title. Nothing it collected is still held, and the app has no browser or social-platform integration of any kind today.
Analytics and diagnostics
We use product analytics to see which features people actually use and where the app loses them. “Analytics” covers a lot of different things, so here is exactly what it means in Ureset:
- What we collect. In-app events — the app being opened, a quest completed, a paywall shown, a subscription started, and which onboarding step you reached — along with your app version, device model, operating system version and language. Since the leaderboard arrived we also record that it was opened, that a friend was added, that a share card was shown or sent, that you saved a profile name, and that a streak partner was invited, accepted or ended. Those events say that it happened; they never carry the name, the photo or who the friend is.
- You can turn it off, and in Europe it starts off. There is a “Share usage analytics” switch in Profile, under the gear (Settings). If your device region is in the EEA, the UK or Switzerland it is off until you turn it on; everywhere else it starts on and you can turn it off at any time. Switching it off stops collection immediately and discards anything not yet sent. The app works exactly the same either way — nothing is withheld from you for saying no.
- We do not infer your location from your IP address. Analytics providers commonly derive a city from the connecting IP by default; we have turned that off. Combined with the app linking no location framework at all, this means we never collect your device’s location. The only place-related detail we hold is the country you type into a creator program application, if you send one.
- It is linked to you, not anonymous. Once you sign in, these events are tied to your Ureset account identifier so we can follow one person’s path through the app. This is event-level data about you, not aggregate statistics, and we would rather say so plainly than imply otherwise.
- What it never contains. Photos or camera imagery, health or sleep data, night-audio recordings, your card number, or anything you type.
- Your onboarding answers stay on your phone — with three deliberate exceptions. We send the “where did you hear about us?” answer, which exists only to tell us which channels are working; your age range, which selects which subscription offer you are shown; and the main problem you pick on “What keeps going wrong?” (one of seven fixed choices: phone, sleep, study, gym, food, looksmaxxing or a bit of everything), which tells us which version of setup works. That last one rides your analytics events and goes to RevenueCat with your subscription. Every other answer you give during setup is stored only on your device.
- Subscription events. RevenueCat, which manages your subscription, passes these events to Mixpanel: a trial started, a purchase, a renewal, a cancellation, a billing issue and an expiration, each with the price and the product. Mixpanel links them to the same analytics identifier as your in-app events, so we can see which parts of the app lead people to subscribe and where subscribers leave. They are sent only if the “Share usage analytics” switch is on for you (off by default in the EEA, the UK and Switzerland, on elsewhere until you turn it off). With the switch off, RevenueCat sends nothing to Mixpanel. The subscription itself is unaffected.
- No ads, no cross-app tracking. Ureset shows no ads, does not use Apple’s advertising identifier (IDFA), never asks for App Tracking Transparency permission, and shares nothing with data brokers.
- Measuring our own ads. When we advertise Ureset on other platforms, such as Instagram and Facebook, we use AppsFlyer to learn which ad led to an install, whether that install finished its first and second quest, and whether it started a free trial or a subscription. AppsFlyer receives a device identifier that is specific to Ureset (not the advertising identifier), your Ureset account identifier, the fact that a first and a second quest were finished (not which quests), and the trial and subscription events with their price. It tells the ad platform the result so we can see which ads work. On iPhone this reporting goes through Apple’s SKAdNetwork, which gives the ad platform aggregated results rather than your identity. It is covered by the same “Share usage analytics” switch, so turning that off stops it.
Crash and freeze reports. Ureset uses Sentry to tell us when the app crashes or freezes. A report holds the technical details of the failure (what the code was doing, the app version, the device model and the operating system version). It is not tied to your account, and Sentry is set not to collect your IP address or username, not to take a screenshot, and not to record what was on screen. Before a report leaves your iPhone, a filter drops any report that mentions sleep, audio or screen-time data. Crash reporting is not covered by the “Share usage analytics” switch, because it is how we find and fix the failures that stop quests, timers or app blocking working. Crash reports can also reach us through Apple, if you turned on “Share With App Developers” in your iPhone’s privacy settings. Our own servers keep short-lived technical logs of requests the app makes, so we can debug failures and detect abuse.
The analytics providers are named under “When we share information” below. To stop collection, use the switch in Profile, under the gear (Settings). To have data already collected about you deleted, email support@toolsai.app with the subject “Delete my Ureset analytics” and we will remove it within 30 days. Deleting your account does not remove it on its own: events already sent to Mixpanel and AppsFlyer stay with them, linked to your Ureset user ID rather than your name or email, until you ask us to delete them.
What we never do
- We never sell your personal information.
- We never show ads or share your data with ad networks.
- We never store your camera imagery or mission photos, or use them for anything but checking that one mission.
- We never upload your night-audio clips, and we never receive a recording of your voice.
- We never use your health data for anything except the features you asked for.
- We never read your calendar — Ureset can only add to it.
- We never receive your calorie photos, your day log, your 100-day reset or your journal.
When we share information
We do not sell your personal information. We share it with the service providers below, who process it on our behalf to run the app:
- Apple, for App Store purchases, Sign in with Apple and notifications (scheduled on your iPhone; we send no push notifications).
- Supabase — our cloud infrastructure provider. Hosts the database, sign-in and secure server functions that store your account, activity, the leaderboard, and profile photos, along with any alarm rows saved by earlier versions.
- Stripe — the historical processor for the real-money stakes feature removed on 1 August 2026. No new card data is sent to Stripe today; a small number of accounts created before then may still have a saved card or a past charge record on file there. We never see your card number.
- Anthropic — receives a photo-proof mission image transiently to return a pass-or-fail verdict. It is used only for that check and is not retained.
- Mixpanel — our product analytics provider. Receives the in-app events described under “Analytics and diagnostics”, tied to your Ureset account identifier, and your subscription events (trial started, purchase, renewal, cancellation, billing issue and expiration, with price and product) from RevenueCat, only while “Share usage analytics” is on for you. It never receives your photos, health data, audio or card details, and we do not use it for advertising.
- RevenueCat — manages and verifies your subscription, and receives your account identifier and purchase history. If “Share usage analytics” is on for you, it also forwards your subscription events (trial started, purchase, renewal, cancellation, billing issue and expiration, with price and product) to Mixpanel.
- AppsFlyer — measures which of our ads led to an install, a first quest, a trial or a subscription, as described under “Measuring our own ads”. It receives a Ureset-specific device identifier, your account identifier, the fact that a first and a second quest were finished, and trial and subscription events with their price, and passes attribution results to the ad platform that ran the ad (currently Meta).
- Superwall — presents and optimises the subscription screen. It receives your account identifier, which subscription screens you saw and what you did with them, and your age range, which selects which offer you are shown.
- Sentry: receives the crash and freeze reports described under “Analytics and diagnostics”. They are not tied to your account.
- Resend: sends the emails about a creator program application, so it receives the applicant’s name, email address and the content of those emails.
We also use a processor for support email and creator operations:
- xAI and Cursor (Grok Bot) — may process the content of email sent to support@toolsai.app, and creator operational records, to draft support replies and to run creator operations. A bot prepares the draft; a person sends the reply.
Some of these providers store data outside Australia, including in the United States. Where that happens, we take reasonable steps to make sure your information is handled consistently with the Australian Privacy Principles. We will disclose information if the law requires us to.
Retention
We keep account and activity data while your account is active. That includes your weekly leaderboard rows and any reports you made or that were made about you. The days you reached your streak are kept only while you have a streak partner, as described above. Alarm rows saved by earlier versions stay with your account until you delete it. A creator program application is kept with our creator records until you ask us to delete it. Historical stake transaction records, from before the feature was removed on 1 August 2026, are kept as long as financial record-keeping laws require. On your iPhone, the food log keeps 90 days of entries, the day log keeps up to 365 days and night-audio clips follow the setting you chose. Data stored only on your device is removed when you delete the app. The copy of your 100-day reset in your iCloud account is not: it stays in your iCloud account, which is what lets a reinstall pick up where you left off.
Security
No system is perfectly secure, so rather than offer you an adjective, here is what we actually do:
- Everything in transit is encrypted. The app talks to our servers over encrypted connections only.
- The database decides who can read what — not the app. Every row we store is tied to an account, and rules inside the database itself allow you to read and write only your own records. A bug in the app cannot hand you someone else’s data, because the check does not live in the app. The one deliberate exception is the leaderboard: other signed-in users can see the first name, photo and weekly counts described above, and your streak partners can see whether you have kept the streak today, through database functions that return nothing else.
- Keys never ship inside the app. The credentials for our server-side services and for the photo-verification service exist only on our servers. Taking the app apart yields nothing anyone can use.
- We hold as little as we can. Mission photos, calorie photos, night-audio clips and camera imagery are never stored on our side at all — which is the strongest protection available for them, and the reason the sections above are written the way they are.
If a breach ever affects your personal information, we will move to contain it and notify you and the Office of the Australian Information Commissioner where the Privacy Act requires it.
Your choices and rights
You do not have to take our word for what we hold. Under the Australian Privacy Principles you can ask us for a copy of the personal information we hold about you, and ask us to correct it if any of it is wrong. Email support@toolsai.app and we will respond within 30 days. If we cannot give you something, we will tell you why.
You can also turn analytics off in Profile, under the gear (Settings), revoke any permission — camera, microphone, Apple Health, calendar, Screen Time, notifications — in the iOS Settings app whenever you like, and delete your account outright. Nothing in the app is withheld from you for exercising any of these.
Deleting your data
You can delete your account from inside the app, at Profile → the gear (Settings) → Delete account. That is not a request that goes into a queue — it runs immediately. Your profile, alarms saved by earlier versions, verification records, banked focus time, leaderboard rows, friends, streak partners and the days you reached your streak, blocks, reports and invite code are removed from our database on the spot, your profile photo file is deleted from storage, along with any stake records from older versions. If an older account saved a card, it is detached at Stripe so no payment method stays on file, and if you signed in with Apple, that grant is revoked with Apple.
Two things are not removed by the button, and we would rather say so. A creator program application is unlinked from your account but kept, as described above; email us to delete it. And usage analytics already sent to Mixpanel and AppsFlyer stays with them, linked to your Ureset user ID rather than your name or email; email us with the subject “Delete my Ureset analytics” and we will delete it within 30 days. Your subscription history is kept by Apple and RevenueCat as a billing record.
If you would rather ask us to do it, email support@toolsai.app with the subject “Delete my Ureset data” and we will delete your account and associated data within 30 days.
One thing survives either route, and we would rather name it than leave it inside “records we are required to keep”: if an earlier version ever charged you for a missed alarm, the record of that charge — the amount and the payment reference — is retained for as long as financial and chargeback rules require. Your account is detached from it, so what remains is an anonymous transaction record, and it is not visible to anyone using the app.
Deleting the app from your iPhone immediately removes everything held only on the device, including your journal, food log, day log and its photos, night-audio clips, sleep history and settings. The copy of your 100-day reset in your iCloud account is not removed by deleting the app or your Ureset account, because it is held in your iCloud account rather than by us, and we have no access to it; it comes back if you reinstall. To remove it, turn off Profile → the gear (Settings) → Keep my 100-day reset in iCloud.
Children
Ureset is intended for people aged 13 and over, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us information, contact us and we will delete it.
Australian privacy law
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where you are located outside Australia, we apply the same standards described in this policy.
Nothing in this policy or in our terms of use limits any rights you have under the Australian Consumer Law, and nothing in it can be read as excluding a guarantee that law does not allow us to exclude.
Complaints
If you think we have mishandled your personal information, email support@toolsai.app with the subject “Privacy complaint”. We will respond within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.
Changes to this policy
If we change this policy, we will post the new version at this address and update the date at the top. If a change affects how camera, photo or health data is handled, we will tell you in the app before it takes effect.
Contact
ToolsAi Pty Ltd · ABN 73 698 152 902
Sydney, Australia
support@toolsai.app
Related: Website privacy policy · InvoiceMe privacy policy · Yap AI privacy policy · Terms of use