Your data stays on your phone.

This policy covers the Prefront iOS app and the website getprefront.com. It is short because there is little to say: we built Prefront so that we never see your data.

Who we are

Prefront is developed by Tomáš Kliment and Moritz Oberschachtsiek (“we”). Contact for anything in this policy: tomas@getprefront.com.

The short version

No account. You never sign up, and we never ask for your name or email.
No server. The app does not send your data to us. We run no backend and no analytics.
No ads, no tracking, no selling. We don’t use advertising SDKs and never share or sell data.
Deleting the app deletes your data.

What the app stores on your device

Everything Prefront knows lives in the app’s private storage on your iPhone: your streak and check-ins, the notes you write, your settings, the apps you chose to protect and your accountability partner’s name. The partner PIN is stored only as a salted hash, so even someone with the file cannot read it. If you use iCloud Backup or an encrypted local backup, this data is included in your backup under Apple’s terms; we have no access to it.

Screen Time (Family Controls)

To lock apps, Prefront asks for Screen Time access, which you confirm with Face ID or Touch ID. Apple’s design means the app only receives anonymous tokens for the apps you select; it never learns which apps you have installed or how you use them. No Screen Time data leaves your device. You can revoke access at any time in Settings → Screen Time, which removes every lock the app has set.

Shield (on-device screen check)

Shield is optional and only runs when you start it through the iOS broadcast picker. While it runs, iOS shows the standard red recording indicator. Frames are analysed by a small machine-learning model entirely on your device, one at a time, and discarded immediately. No frame is ever stored, uploaded or shown to anyone. The app keeps only a count of moments the model flagged, so it can show you a daily summary.

Content filter (DNS)

The content filter works by setting an encrypted DNS resolver on your iPhone that refuses to resolve adult domains and enforces safe search. We don’t operate these resolvers and we don’t see your traffic. The resolver you choose does see the domain names your device looks up, in the same way your internet provider does today. The options are run by CleanBrowsing, AdGuard, Cloudflare or, if you bring your own profile, NextDNS; their privacy policies apply to that lookup data.

Purchases

Subscriptions are handled by Apple through the App Store. We receive no payment details and no identity from Apple, only anonymous confirmation that a subscription is active.

This website

getprefront.com sets no cookies and runs no analytics. It is hosted on Cloudflare, which processes standard connection data (such as your IP address) to deliver the page and protect it from abuse, under Cloudflare’s privacy policy.

Email

If you write to us, we keep your email and the conversation for as long as needed to help you, and delete it on request.

Age

Prefront is intended for adults. It is not directed at anyone under 16 and we knowingly collect no data from children. We can’t, because we collect none at all.

Your rights

Under the GDPR you have rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to a supervisory authority. Because your data is only on your device, you exercise most of them directly: open the app to see it, edit it, or delete the app to erase it. For anything else, email us.

Changes

If we ever change how the app handles data, we will update this page and the date at the top, and say what changed in the app’s release notes.