Resurface Privacy Policy
Last updated: 2026-09-18
Resurface is a screen-time app blocker for Android. This policy explains what data the app handles and where it goes.
The short version: Resurface needs an account. Your account keeps your blocking rules, your recent screen-time totals, your pet and its room in sync through our own server, so every phone you log in on follows the same rules. Nothing is sold, and nobody but you can read your account.
Your account
Resurface needs an account: it is how one set of rules reaches all of your phones. You sign in with Google, or with a Resurface username and password. Before anything is uploaded the app shows what syncing covers and asks you to agree. If you choose "Not now", nothing is uploaded: the rules already on the phone keep blocking, and the rest of the app stays closed until you agree. You can log out later in Settings.
Sign-in itself is handled by Firebase Authentication (Google LLC), which holds your account identifier and the email address you signed in with.
What your account holds on our server
Our server is a Cloudflare Worker with a Cloudflare D1 database, run by Stillwater Labs. While you are logged in it holds, under your account only:
- Your account identifier, the email address you signed in with, your username if you chose one, and your time zone
- The name of each phone you log in on and its notification token, so a rule change reaches your other phones
- Your blocking rules: which apps you chose to limit (their Android package names), your daily limits, your schedules, and whether strict mode is on
- Your recent daily screen time for the apps you chose to limit — and only those — which the app computes on your device from Android's Usage Access data, so a limit counts your phones together
- Each day's result — a clean day or a limit reached — which is what your pet's streak and your coins are earned from
- Your pet and its room: name, species, birth and death dates, streaks, the graveyard, and the toys, snacks and furniture you own or have placed
- Your coin operations and the items you own
Per-app screen time is kept only while it is still needed to settle the day: rows older than two days are deleted once every phone that watched the day has reported. Day results, rules, pet, room and items stay while the account exists. A phone you remove, or that stops syncing, is dropped after 30 days.
What stays only on your device
- Protection-health history (a local log of interruptions and permission changes)
- Your theme, sound and other local settings
- Screen-time history older than what the server keeps, and the usage data Android itself holds
Logging out leaves this phone working on its own; what it already synced stays in the account until you delete the account.
Delete your data
- Your account and everything in it: Settings → "Delete account" in the app, or the web page https://resurface.normankinghin.workers.dev/delete (sign in there with Google). Either one deletes your account row, your rules, usage, day results, pet, room, devices and items from our database, deletes your login from Firebase Authentication, and deletes your customer record and coin balance at RevenueCat. Coins and bought items are deleted too and are not refunded.
- This phone's own data: Settings → "Delete all data" erases everything Resurface stored on the device and closes the app. Uninstalling does the same.
Deletion is immediate. Google Play keeps your order and refund history under Google's own policies, independent of Resurface.
What third-party services process
Firebase Authentication and Firebase Cloud Messaging (Google LLC)
Your sign-in and the messages that tell your other phones a rule changed. Firebase receives your account identifier, your sign-in email and your phones' notification tokens.
RevenueCat (purchases and coins)
Purchases are processed by Google Play. RevenueCat validates them, keeps your Pro access working across reinstalls, and holds your coin balance. RevenueCat receives purchase receipts, your coin transactions, and your account identifier as its customer id — or a random anonymous app-instance id when you are not logged in. It never sees your name or payment details; those stay with Google Play.
Google AdMob (not currently active)
The app contains the Google Mobile Ads SDK. Ads are switched off — no ads are shown and no ad requests are made in this version. If advertising ever launches, this policy is updated first, with the "last updated" date changed, and Google Mobile Ads would then process data such as your device's advertising ID and app set ID, IP address and coarse (IP-derived) location, coarse device information, app launch and ad interaction data, and diagnostics, for serving and measuring ads and for fraud prevention, security and compliance. Where consent is required (for example in the EEA, UK and Switzerland), Resurface asks before any ad request and you can revisit the choice in Settings → Privacy options.
- https://support.google.com/admob/answer/6128543
- https://policies.google.com/technologies/partner-sites
What we never collect
- No name, no phone number, no contacts
- No browsing history and no message content
- Nothing about the apps you did not choose to limit, beyond the daily screen time the blocking itself needs
- Nothing is sold or shared for advertising
Children
Resurface is intended for adults (18+). It is not directed at children and is declared accordingly on Google Play.
Changes
If this policy changes, the updated version is published at this address and the "last updated" date changes. Material changes are noted in the app's release notes.