Privacy Notice for Pacifier

Last updated: 14 September 2026

1. Controller

2. The principle

Pacifier is built so that no data can reach us in the first place. The app makes no network connections of its own: no servers, no endpoints, no analytics or advertising libraries, no user accounts. There is no place in the entire source code that could transmit your data. Pacifier works in airplane mode exactly as it does anywhere else.

Two exceptions, neither of which is technically ours: purchases are handled by Apple's App Store (see section 7), and links to these legal texts open your browser.

3. We do not read your Screen Time data

Pacifier uses Apple's Screen Time frameworks (FamilyControls / ManagedSettings) to seal the device. Since iOS 26.4 Apple bundles the approval: an app permitted to apply the shield is technically also permitted to read usage data. We do not.

Pacifier requests no usage reports and reads no browsing history, contacts or message content. The app does not learn who writes to you, or what your child does inside an allowed app. It applies the shield without looking inside it.

4. What is stored on the device

All of the following stays local to your device and is never transmitted:

• Profiles — the name, colour, age band, default length and battery floor you set for your child. Held in a local database (SwiftData).
• Your selection of allowed apps — see section 5.
• Session state — whether the device is currently sealed, when the session ends, and how many hand-offs you have used in total. Held in a shared app group so the system extensions see the same state.
• Your Pacifier PIN — not the digits, but a salted SHA-256 hash of them, stored in your device's Keychain. Not even we could reverse it.

5. The selection of allowed apps

You choose which apps stay open during a hand-off in Apple's own picker (FamilyActivityPicker). Pacifier receives only opaque identifiers (tokens) for exactly the apps you allow — not a list of your home screen, and not the names of any other app. The tokens are valid only on that device and cannot be resolved by us.

6. Notifications

If you allow it, Pacifier sends local notifications — for example "Time's up" at the end of a session. These are created and scheduled on the device. There are no push servers and no push tokens.

7. Purchases

Pacifier offers a one-time purchase (Lifetime) and a monthly subscription. Both are handled entirely through Apple's in-app purchase system. We receive no payment data, no card numbers and no billing address. The app only asks the device whether a valid purchase exists. Apple's privacy policy applies to the payment process.

8. Apple Watch

The optional Watch app shows the countdown and can end a session. Only session state is exchanged, directly between your iPhone and your watch (WatchConnectivity). None of it passes through our servers or anyone else's.

9. This website

This website is hosted on Cloudflare Pages (provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR. As Cloudflare, Inc. is established in the United States, personal data are transferred to a third country. The transfer takes place on the basis of the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, additionally, the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023, Art. 45 GDPR); Cloudflare, Inc. is certified under the DPF.

When you access this website, the hosting provider automatically processes server log files: anonymised or shortened IP address, date and time of the request, transferred data volume, requested URL, user-agent string. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website). These data are deleted after a maximum of 14 days.

This website sets no cookies. We use no web analytics, tracking, advertising pixels or social-media plugins. Fonts are served exclusively from our own server (no Google Fonts CDN). No third-party content is embedded.

10. Email contact

If you contact us by email, we process your information to handle your enquiry under Art. 6(1)(f) GDPR. Where the contact relates to the conclusion of a contract, Art. 6(1)(b) GDPR applies as an additional legal basis. We delete these data once they are no longer required, and in any case after the expiry of any statutory retention periods.

11. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). To exercise these rights, please contact the email address above.

Note: because Pacifier transmits no data to us, we hold no personal data about your use of the app that we could give you access to. Everything stored on your device is removed completely when you delete the app.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is:

13. SSL encryption

This website uses SSL/TLS encryption for security.